PRIVACY POLICY

Last updated: December 2018

Our General Privacy Policy can be read in full here.

The information below outlines the information that the BEPS International School may collect about you from your visit to our website and how that information will be handled.

Who are we?

This website is operated by BEPS International School, 23 Avenue Franklin Roosevelt, 1050 Brussels, Belgium (hereafter “BEPS” or “we”).

As data controller within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, “GDPR”), BEPS determines the means and purposes of the processing of your personal data.

Such processing is performed by BEPS in Belgium.

The protection of your privacy and the security of your personal data are very important to us. We will therefore collect, treat and further process all personal data submitted by you through this website, or obtained as a result of the use made by you of this website, in accordance with the provisions of the EU Data Protection Directive, the applicable implementing national data protection legislation, and with any other (future) applicable legislation, including the GDPR which applies since 25 May 2018.

Definition

The BEPS website is defined as publicly accessible and password/login protected pages hosted under the domain beps.com. BEPS is not responsible for the privacy practices of external sites linked from or referenced by beps.com. This policy applies solely to information collected by this website.

Personal Data

We may receive your personal data in the framework of the execution of our business activities or when you use the Sites and Services which are offered hereto.

We may obtain such personal data because you have given them to us (e.g. by contacting us, by completing online forms), because others have given them to us (e.g. third party service providers that we use in the framework of our business activities), or because they are publically available.

When we obtain personal data from external parties, we make reasonable efforts to enter into contractual clauses with these parties obliging them to respect the data protection legislation. This can be done by obliging this party to provide you with all necessary information or – if necessary – to obtain your consent for processing the personal data as described in this Privacy Statement.

We may also obtain personal data when you interact with us (e.g. by completing forms on the site, by contacting us etc.).

By browsing this website and sharing your personal data with us, you expressly agree to the terms of this Online Privacy Policy and to the way in which we collect and process your personal data.

Which personal date are collected?

The personal data that we collect may, among other things, include:

• standard identification and contact data (e.g. name, address (private/work), phone number (private / work), e-mail address (private / work), country of residence)
• electronic identification data (e.g. IP address, browser type, cookie identifiers, …);
• employment and educational data (e.g. organisation you work for, job title, qualifications, …);
• visit data (store visited, date of the visit, …)
• data about how you interact with us (e.g. when you contact us through online forms) and other similar information
• camera images

The legal grounds for processing your data

We process your personal data for the purposes mentioned above:

• when necessary for the performance of contracts to which you are party or in order to take steps at your request prior to entering into a contract;
• when necessary for compliance with our legal obligations;
• for the purposes of the legitimate interests of BEPS and/or of a third party, including (but not limited to) our business activities, client and supplier management etc.
• If we have the legal obligation to obtain your free, informed, specific and unambiguous consent to process your personal data for certain purposes (e.g. specific direct e-marketing or market research activities), we will only process your data for such purposes to the extent that we have obtained such consent from you.

How do we use your data?

We only process your personal data for legitimate business reasons. These purposes include, but are not limited to:

• Administration of our customer database
• Customer and supplier management
• Orders management
• Management of your questions, comments or queries
• The provision of information on our company, its products, services and activities;
• The good organisation of our services;
• Direct marketing and sales;
• Dealing with enquiries, requests and complaints of customers, suppliers, consumers and stores visitors;
• Compliance with legal obligations
• Aggregation and anonymising of personal data for statistical/analytical purposes
• Security

Cookies

When you view this website, some information may be stored on your computer. This information will be in the form of a “cookie” or similar file and will allow the website to tailor the experience to your interests and preferences.

We retain cookies for as long as needed for their purpose.

How we use cookies

We use cookies for a variety of reasons detailed below. You can control the use of cookies at the individual browser level. Unfortunately, in most cases, there are no industry standard options for disabling cookies without completely disabling the functionality and features they add to this site. It is recommended that you leave on all cookies if you are not sure whether you need them or not in case they are used to provide a service that you use.

Disabling cookies

You can prevent the setting of cookies. Be aware that disabling cookies will affect the functionality of this and many other sites that you visit.

With most Internet browsers, cookies can be blocked or erased after visiting a website by adjusting the settings on your browser (see your browser Help for how to do this). Some aspects of this website may not function properly if your browser is set to block cookies.

The cookies we set

• Necessary for the operation of the site
• Certain cookies are necessary for the operation of the site. For example, certain cookies are used to help keep track of your session status. This makes it possible for you to stay logged into the site as you move from page to page.
• User Preferences
• We may use cookies to store certain user preferences that you make as you use our site. This allows your preferences to be used when you visit the site at a future time.
• Tracking
  We use cookies and other tracking technologies to track what pages you visit and how long you stay on a page. We use this information to measure how our site is used and to improve our product. We also use this information to track what users have received administrative notices, so we can only show these notices to each user once.
• Third party cookies
• Third party analytics are used to track and measure usage of our website, so we can continue to produce engaging content. These cookies may track things such as how long you spend on the site or pages you visit which helps us to understand how we can improve the site for you.

Use of Text and Images

If you would like to publish information that you find on our website, please send your request to info@beps.com . Downloading any photos of students or community members from our website is not authorised. Information about using our logo is available by contacting info@beps.com .

Security

BEPS takes every precaution to protect users’ information. When users submit sensitive information via this website, it is encrypted and remains secure during all stages of transmission. The School complies with all Belgian legislation requiring safeguards on specific types of information.

How do we protect your personal information?

Appropriate administrative, technical and organisational measures will be taken to ensure the security and confidentiality of your personal data and to protect your personal data against accidental loss, misuse, unauthorized access, disclosure, alteration and accidental or unauthorised destruction. These measures include:

• training to relevant staff to ensure they are aware of our privacy obligations when handling personal data;
• administrative and technical controls to restrict access to personal data on a ‘need to know’ basis;
• technological security measures, including fire walls, encryption and anti-virus software;
• physical security measures, such as staff security badges to access our premises, office spaces which are closed, and so on.

Sharing and transfers of personal data

We do not pass on your information to any other third party, with the possible exception of any other third party in case it is relevant for the purposes outlines in the “How do we use your data?” section above.

The confidentiality of your personal data will be guaranteed.

For the purposes mentioned above, it could be necessary that some of your personal data are transferred to organisations located outside the European Economic Area (EEA) whose laws may not provide the same level of data protection. This may for example occur in the framework of the various teaching and learning applications which we use and whose providers and subprocessors may be based outside the EEA.

For such transfers of personal data outside the EEA, BEPS has implemented appropriate safeguards in line with the applicable data protection legislation. More information on these transfers and appropriate safeguards can be requested from the BEPS Data Protection Lead.

Your rights

The rights which you may have under applicable data protection legislation are:

• Right to object – the right to object at any time to the processing activities for which we rely on the legitimate interests of BEPS. In that event, we will immediately cease the processing activities unless there would exist compelling legitimate grounds for further processing. You will for instance be able to object to the processing of your personal data in the event of an unsuccessful application. In that event, we will delete your personal date immediately and cease any further processing.
• Right to information and access – to request access to and a copy of the personal data BEPS holds on you, as well as the right to information about relevant aspects of the data processing by BEPS. This Notice serves to inform you thereon but contact us if you have any questions.
• Right to rectification – to correct inaccurate personal data or to complete incomplete personal data.
• Right to erasure – to request the deletion or removal of personal data in specific circumstances, for example if your personal data is no longer necessary for the purposes pursued by BEPS, or if there is no longer a legal ground for the data processing.
• Right to restriction of the way in which we process your personal data, – if you would contest the processing or the correctness of the personal data, or if you wish to keep certain personal data in view of a possible legal claim, while we no longer need the personal data for the purposes mentioned above…
• Right to data portability – to receive your personal data in a structured, commonly used format and to transmit it or have it transmitted to another international school.
• Right not to be subject to automated individual decision-making – the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Automated decisions are defined as decisions about individuals that are based solely on the automated processing of data and that produce legal effects that significantly affect the individuals involved. As a rule, your personal data will not be used for automated decision-making. Consequently, we do not base any decisions about your application solely on automated processing of your personal data.

The first point of contact in connection with the processing of personal data and the exercise of the rights described below is the BEPS Data Protection Lead privacy@beps.com). BEPS shall respond to such requests and may or may not act upon them, in principle within a period of one month, all in accordance with applicable data protection legislation.

In addition, you also have the right to contact or file a complaint with the Belgian Data Protection Authority:

Data Protection Authority

Rue de la Presse 35, 1000 Brussels

contact@apd-gba.be

www.dataprotectionauthority.be

You can contact us at any time for assistance on your application or regarding the management of your application.

Changes to this Privacy Notice

We may modify or amend this Online Privacy Policy from time to time. Any changes we may make to this Online Privacy Policy in the future will be posted on this page. To inform when we make changes to this Online Privacy Policy, we will amend the revision date at the top of this page. The new modified or amended Online Privacy Policy will apply from that revision date. Please check back periodically to see changes and additions. If we are in the possession of your e-mail address and we are still processing your personal data, we will also inform you electronically about all changes to this Online Privacy Policy.

This Online Privacy Policy has last been updated in December 2018.