Data Controller Details

WINGATE SCHOOL S.L. (hereinafter WINGATE SCHOOL), with address in C/ Mirador de la Cumbrita, 10, 38627 Cabo Blanco (Arona) – Santa Cruz de Tenerife, with telephone number 922 720 102, TAX ID [NIF]: B38987889 and e-mail for the coordinator of data protection and DPO ( protecciondedatos@wingateschool.com)

Applicable Regulations

The privacy policy has been designed in accordance with the requirements of the European Regulation on Personal Data Protection GDPR 679/2016 of April 27th and the Organic Law on Protection of Personal Data and Warranty of Digital Rights LOPDGDD in 3/2018 of December 5th. This policy may vary according to changes in regulations and/or jurisprudence, in which case the situation will be announced.

Purpose of the Processing of Personal Data

The data are processed for the purpose of providing the service and provide the information requested by the interested party, in addition to advising on the educational offer of the centre and sending news and events related to its activity.

Legal Basis of the Treatment

The legal basis for legitimising the processing of the data subject’s personal data is set forth down in Article 6 of the General Data Protection Regulation.

Treatment shall only be lawful if at least one of the following conditions are met:

a) the data subject consented to the processing of his/her personal data for one or more specific purposes;

b) processing is necessary for the performance of a contract to which the data subject is a party or for the application of pre-contractual measures at the request of the data subject;

c) the processing is necessary in order to comply with a legal obligation applicable to the controller;

d) the processing is necessary to protect the vital interests of the data subject or of another natural person;

e) the processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller;

f) processing is necessary for the satisfaction of legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or by the fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

Data collected and type of legitimation

In accordance with article 4.11 of RGPD 679/2016 and article 6.1 of LOPDGDD 3/2018, the data collected from the interested party are legitimized by the consent given when requesting the information. The personal data collected are those necessary to provide information about the services provided by WINGATE SCHOOL. Likewise, not providing the aforementioned data or not accepting this privacy policy means the impossibility of subscribing, registering or receiving information from these services.

In case of making a communication, this is protected by article 21.2 of the LSSI-CE [Information Society Services Act] 34/2002 and the authorization may be revoked at any time by the interested party, in accordance with article 22 of the same law.

Accuracy and Authenticity of the Data Provided

The User who sends the information to WINGATE SCHOOL is solely responsible for the veracity and correctness of the data included, WINGATE SCHOOL being exonerated of any responsibility in this regard.

The interested parties guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user, therefore, agrees to provide complete and correct information in the registration or subscription form.

WINGATE SCHOOL is not responsible for the veracity of information that is not its own and that indicates another source, nor assumes any responsibility for hypothetical damages that may arise from the use of such information.
WINGATE SCHOOL is exonerated from any responsibility for any damage that the User may suffer as a result of errors, defects or omissions in the information provided by WINGATE SCHOOL provided that it comes from sources outside the same.

Recipients and Data Transfer

There is no transfer of data to third parties, except for transfers that are bound by regulatory compliance, being in any case an administration or public entity.

Time and Data Retention Criteria

The data will be stored at least 5 years or more, if there are communications and in any case until cancellation is requested by the interested party. In any case, due to the centre’s organisational and security policy, the following data will always be kept: name, surname and academic records.

Applied Safety Measures

Security measures are applied following criteria of Confidentiality, Integrity and Availability. This is restricted access to information, applying firewall and antivirus, as well as backups and images of relevant systems to avoid any contingency.

Exercise of Rights

The interested parties have the right to request from the data controller access to their personal data, its rectification or deletion, limitation of its processing or to oppose it, as well as the portability of such data, by sending the request to the following address protecciondedatos@wingateschool.com You also have the right to lodge a complaint with the supervisory authority (Agencia Española de Protección de Datos https://www.aepd.es. As well as withdrawing consent at any time.

Appendix 1

Personal data (Parents / Legal guardians)

The processed data is the following:

• Contact information: name, address, telephone number, email.
• CCTV images captured for security reasons (people accessing the school).

Students

The processed data is the following:

• Contact details, contact preferences (e.g., parent /legal guardian, carer), date of birth, identification
  documents.
• Characteristics, such as ethnic origin or special educational needs.
• Specificities related to physical and mental health.
• Student attendance information.
• Student protection information.
• Academic Support Information (ESL).
• Photographs.
• CCTV images captured at the school for security reasons.
• Results of internal evaluations and externally established examinations.
• Student performance and academic records and reports.
• Disciplinary and or exclusion information.

As well as data provided by third parties related to references and reports from other national and international Schools.

Appendix 2

• Support student learning.
• Track and report on student progress.
• Provide appropriate tutorial assistance.
• Protect the welfare of students.
• Evaluate the quality of our education and services.
• Manage admissions and waiting lists.
• Carry out investigations.
• Comply with the law on data sharing.