Skip To Main Content

Privacy Policy

WHAT IS PERSONAL DATA

According to the provisions of the General Data Protection Regulation (GDPR) Regulation (EU) 2016/679, personal data is all data from which an individual can be identified or identifiable.

HOW WE MAY COLLECT PERSONAL INFORMATION

You may give us personal data about you in a number of ways, including:

  • using, visiting or interacting with our website (such as filling out forms or registering on our website);
  • filling out forms sent by the school with regards the services provided;
  • visiting our offices or schools;
  • during an interview or meeting;
  • corresponding with us by phone, e-mail or post;
  • sending information directly to us or providing information as requested by us.

We may also receive information from other sources, for example:

  • from third parties that we are working with (including, for example, your child’s previous or new school(s), medical practitioners, photographers, local authorities, education authorities, payment and delivery services);
  • from CCTV footage that we use to ensure the school is safe;
  • from other websites we operate;
  • through technology or automated interactions: technical data about your equipment, navigation actions and usage patterns is collected automatically on the website. This data is collected through cookies or similar technologies (please refer to the Cookies Policy in this document);
  • through third parties outside the EU: Google Analytics, Google Adwords, Youtube, Facebook, Twitter, Instagram, FormAssembly, Salesforce.com, Schooly.

PERSONAL INFORMATION WE COLLECT AND/OR PROCESS 

Personal information the school might hold for prospective, former and existing students includes: 

  • Full name
  • Date of birth and year group
  • Nationality 
  • Gender
  • Information about previously attended schools (name, location, language of the school, attendance period)
  • School reports from previously attended schools 
  • Teacher recommendations from previously attended schools 
  • The name of school or university attended after leaving [school]
  • Passport or other ID document details and a copy
  • Visa details and a copy
  • Home address, home telephone number, mobile number
  • School and personal email address
  • Photographs and video recordings 
  • Medical records (including allergies, dietary restrictions and special education needs and/or accidents) 
  • Parents’ or guardians’ details
  • Academic, pastoral (including child protection records), attendance records and test results


Personal information the school might hold for parents or guardians of prospective, former and existing students includes: 

  • Full name
  • Date and place of birth
  • Nationality 
  • Gender
  • Information about employment
  • Passport or other ID document details and a copy
  • Visa details and a copy
  • Home address, home telephone number, mobile number
  • Email address
  • Car registration details
  • Economic and financial data
  • Data on social circumstances
  • Technical data: login data, Internet protocol addresses, browser type and version, configuration and location of the time zone, operating system, types and versions of browser plug-in, and any other technology in the devices you use to access our website, as we detail in the Cookies.


Personal information the school might hold for employees and employment candidates includes:

  • Full name
  • Date and place of birth
  • Nationality 
  • Gender
  • Photograph (for which we will obtain your specific consent to use, when this is collected)
  • Marital status
  • Social security number
  • Economic and financial data
  • Employment history
  • Contact details (including home address, e-mail address, and mobile, home and/or work phone number, Skype ID and others)
  • Data on social circumstances
  • Passport or other ID document details and a copy
  • Previous educational records and achievements
  • Information received via safeguarding forms when visiting a site
  • References
  • Information about your physical or mental health, or disability status, to ensure your health and safety at our sites and to assess your fitness to work and to provide appropriate adjustments;
  • Information about your race or national or ethnic origin, religious, philosophical or moral beliefs, or your sexual life or sexual orientation, to ensure meaningful equal opportunity monitoring and reporting
  • Documents related to child protection screening
  • Dependents information, such as full name, nationality, date of birth, relationship
  • Technical data: login data, Internet protocol addresses, browser type and version, configuration and location of the time zone, operating system, types and versions of browser plug-in, and any other technology in the devices you use to access our website, as we detail in the Cookies.


Personal information the school might hold for others includes:

  • Full name
  • Date and place of birth
  • Nationality 
  • Gender
  • Information about employment
  • Passport or other ID document details and a copy
  • Information received via safeguarding forms when visiting a site
  • Visa details and a copy
  • Home address, home telephone number, mobile number
  • Email address
  • Car registration details
  • Technical data: login data, Internet protocol addresses, browser type and version, configuration and location of the time zone, operating system, types and versions of browser plug-in, and any other technology in the devices you use to access our website, as we detail in the Cookies.

HOW THE PERSONAL DATA MAY BE USED

We will use the information you give to us to pursue the following legitimate interests:

  • To promote the objects and interests of our school, ensuring the most efficient management of our school;
  • To deliver educational services to pupils;
  • To use your and/or your child’s photograph as part of an ID system on the school management information system;
  • To contract with other companies and organisations for the purposes of fraud protection and credit risk reduction;
  • To provide you with information about other similar services (for example, after school clubs or open days) we offer as part of the education and overall development of your child at the school;
  • To keep you up to date with key school news and upcoming events;
  • To send out surveys to you as part of our school improvement approach;
  • To enforce our terms of use with you or any other contract we may have with you;
  • For the purposes of recruitment;
  • To enable us to receive your services;

Our schools also rely on software applications and other technology to process personal data about you and your children. These include the school’s management information system, virtual learning environments, revision tools, parents evening booking systems, text and email messaging communications, assessments of pupils’ progress, our billing system and coordination of school trips. The third parties we use to deliver these applications are carefully chosen and vetted by us to ensure that, among other things, your and your child’s personal data is kept secure. For further information on the kind of technology we use, please contact the school directly.

We will also use the information you give to us as is necessary to carry out our obligations arising from the contract (or potential contract) between you and us and to provide you with the information and services that you request from us or we request from you. If you are a parent or a guardian we will provide education services to your child and will use personal data where necessary to deliver these services. We will also use your personal information to invoice you for our services pursuant to the contract between you and us. We will also require a certain amount of personal information about you and your child at the pre-contract enquiry and application stage.

In addition, we may be required by corresponding applicable law to do the following (which is not an exhaustive list):

  • Keep an admissions and attendance register;
  • Keep pupil files (including, where relevant, special education needs and child protection files);
  • Keep a record of behaviour sanctions;
  • Provide an annual written report on pupil progress and attainment;
  • Keep an accounting record of payment;
  • Comply with safer recruitment procedures; and
  • Keep a record to evidence fair recruitment processes.

Inevitably, there will be an overlap between what we do that is necessary to (a) perform our contract with you, (b) carry out our legal obligations and (c) pursue a legitimate interest although we have tried our best to demarcate these as set out above.


When we disclose information

We may share the personal data with:

The British Schools Foundation and its affiliates or subsidiaries schools;
Local authorities, education authorities, medical emergency services, social services, the police or the student’s, former student’s, employee’s or former employee’s new school;
The local immigration authorities where required by them;
Professional advisors, debt collectors, suppliers and subcontractors for the performance of any contract we enter into with them or you;
Credit reference agencies for the purpose of assessing your credit score where this is a condition for us entering into a contract with you.


When we need to get your consent 

You are not required to provide details of your child’s race, religion or ethnicity if you do not want to. If you do provide us with this information, we only use these details to assist us with the day-to-day running of the school (for example, if your child’s religion means that he or she has particular dietary requirements we will be able to better cater to your child’s requirement if we have this information) and for equal opportunities monitoring purposes.

DEADLINES FOR THE PRESERVATION OF PERSONAL DATA

The personal data provided will be stored during the necessary time to fulfil the purpose for which it was collected and to determine the possible responsibilities that could derive from the purpose and the treatment of the data. If the user revokes his consent or exercises the restriction of processing or cancellation rights, his personal data will be kept available for the Local Data Protection Authority during the legally established deadlines to attend to the possible responsibilities arising from the treatment of the same.

LAWFULNESS OF PROCESSING PERSONAL DATA

The school is entitled to carry out the processing of personal data on the basis that:

  • User has provided their personal data for pre-contractual or contractual relations, applications for enrolment or employment, provision of information about the services or subscription to newsletter.
  • There are legal obligations that require the processing of personal data, according to the services provided.

TRANSFERS AND RECIPIENTS OF PERSONAL DATA

The school will not share personal details of its users with third parties, unless:

  • The transfer is done to a data processor assigned by the school for purposes for which the school and the data processor have an agreement which offers sufficient guarantees with regard to technical and organizational security measures with regard to the processing to be carried out; or
  • The school is required by law to pass on personal data to competent authorities.
  • The school could also send personal data to third parties outside the EU. The school will make sure that there are suitable security measures in place to prevent unauthorised access and abuse of personal data.

SECURITY AND CONFIDENTIALITY

The school ensures appropriate technical and organisational measures to prevent loss or unlawful processing of personal data. These measures guarantee, taking into account the state of technology and the costs of implementation, an appropriate level of security, having regard to the risks involved in the processing and the nature of the data to be protected. The measures are also aimed at preventing unnecessary collection and further processing of personal data.

The school must record all data leaks and report them to the Local Data Protection Authority, unless it is unlikely that the data leak involves a risk to the rights and freedoms of natural persons. Based on records the data protection authority must be able to check if the school complied to the report duty.

The school will notify the person(s) of the Data Leak as described above, insofar as the data leak is likely to pose a high risk to the rights and freedoms of natural persons.

PERSONAL DATA OF THIRD PARTIES

In the event that the personal data provided belongs to a third party, the user guarantees that he has informed the third party of this Privacy Policy and has obtained his authorisation to provide his data to the school for the purposes indicated. It also guarantees that the data provided are accurate and up to date, being responsible for any damages, direct or indirect, that could be caused as a result of breach of such obligation. 

RESPONSIBILITIES OF INDIVIDUALS

The individual:

  • Guarantees he/she is over 16 years old and the data he/she provides to the school are true, exact, complete and updated. In this sense, the User is responsible for the truthfulness of all the data he / she communicates and will provide updated information, in a way that responds to his / her actual situation.
  • Guarantees you have informed third persons whose data is provided, if any, of the aspects contained in this document. You also guarantee you have obtained his/her authorisation to provide their data to the school for the purposes indicated.
  • Will be responsible for false or inaccurate information provided and for direct or indirect damages which may be caused to the school or to third parties.

CHILDREN’S DATA

According to the provisions of the Spanish Organic Act regarding Personal Data Protection and Regulation (EU) 2016/679, our company will not collect or process personal data of children under 16. If the child is under 16 years of age, such treatment shall only be considered if express authorisation of his or her parents or guardian.

RIGHTS OF THE INDIVIDUAL

The individual can send a letter to the school, enclosing a photocopy of your identity document, to:

  • Revoke the consents granted.
  • Obtain confirmation as to whether the school is processing personal data related to the individual or not.
  • Access his or her personal data.
  • Rectify inaccurate or incomplete data.
  • Request the erasure of his or her data when, among other reasons, the data is no longer necessary for the purposes for which they were collected in the first place.
  • Obtain from the school the restriction of the processing of the data, if any of the conditions stipulated in the data protection regulation is fulfilled.
  • Request the portability of his or her data.

Likewise, data subject may lodge a complaint to the Local Data Protection Authority, if he/she considers the school has violated the rights which are recognised in the applicable data protection regulations.

These rights can be exercised through contacting the school at:

Name: BISM SPAIN SL
Email: dpobsm@legitec.com
Phone number: +34 952 779 264
Address: Calle Teba 4,, 29602 Marbella, Malaga, Spain
CIF: B92983055

COOKIES POLICY

WHAT IS A COOKIE

The provider, through their own account or that of a third contracted party for the benefit of measurement services, can use cookies when the user browses the website. The cookies are files which are sent to the browser through the web server, with the aim to document the users activities during their browsing time. The cookies used by the website are uniquely associated with an anonymous user and their computer, and are not related to the user’s personal data.

PURPOSE OF COOKIES

Using cookies, it is possible for the server hosting the website to recognize the browser being used in order to facilitate navigation; allowing, for example, users who have registered previously to access areas, services, promotions or competitions reserved exclusively for them without having to register each time. They are also used to measure the audience and traffic parameters, monitor progress and the number of entries.

The user has the possibility to configure their browser in order to be shown when cookies are being used and to prevent their installation on their computer. Please consult the browser’s instructions and user manuals to find out more information.

In order to use the website, the user does not have to allow the installation of cookies sent by the website, or third parties which act on their behalf. Nevertheless, it is necessary for the user to log-in to every service which requires prior registration or log-in details.

TYPES OF COOKIES

The cookies used on this website are all temporary, with the sole purpose of making future transmission more efficient. In no case will cookies be used in order to collect personal data.

THE COOKIES USED ARE
  • Analytical cookies (Google Analytics): These allow monitoring and analysis of the user’s behaviour in order to make improvements based on his or her usage of the website and services. As stated by Google, Google Analytics is a free web analytics tool provided by Google that primarily allows website owners to know how users interact with their website. It also enables cookies in the domain of the website being viewed and uses a set of cookies called ” __utma ” and ” __utmz ” to collect anonymous information and report on website trends without identifying individual users. More information on Google Analytics at: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage-
  • Technical cookies: They allow the user to browse through the website and use its various options or services.
  • Plug-in cookies: these cookies are used to share social content. Social networks store and access this type of cookies in the user’s terminal equipment, allowing the social network to identify its members as they interact with the plug-ins.
  • Multimedia player cookies: They store technical data, necessary to play video or audio content, maintaining an adequate connection speed, image quality and buffering parameters.
OPTING OUT OF COOKIES

Users can disable cookies on their terminal by configuring their browser, but this will entail a less satisfactory browsing experience that may even be defective. For more information on disabling cookies visit:

Mozilla
Chrome
Internet Explorer
Microsoft Edge
iOS Safari
MacOS Safari
Opera

IP ADDRESSES

The website servers will automatically be able to detect the IP Address and domain name used by the user. An IP Address is a number which is automatically assigned to a computer when it connects to the Internet. All of this information is collected in a file about server activity that allows subsequent processing of data; with the aim to collect statistical measurements only, which show the number of printed pages, the number of visits to web services, the reasons for the visit, the point of access, etc.

SECURITY

The website uses information security technologies which are accepted throughout the industry, such as FireWalls, methods to control access and cryptic mechanisms. All of these have the objective of preventing unauthorised access to the data. In order to carry out these purposes, the user/ client accepts that the provider collects data for purposes of authentication for access control.