In fulfilling the requirements of the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, the International Education Center sp. z o.o., acting as the governing body for:

– European College – European Non-Public Primary School in Krakow with Bilingual Departments;
– European College – European Non-Public General Secondary School in Krakow;
– Bilingual Kindergarten „Step by Step” referred to hereafter as „Institutions” or „Primary School,” „High School,” „Kindergarten,” respectively.

The governing body for the High School, Primary School, and Kindergarten wishes to provide you with information about the processing of your personal data in the institutions, as well as to inform you of your rights related to this.

Who processes your and your child’s data?
The data controller is the International Education Center sp. z o.o. located in Krakow at ul. Śliwkowa 4.

Why do we process your and your child’s data?
Processing your and your child’s data allows us to provide educational and upbringing services. In particular, we process your personal data:

1. to carry out the recruitment process and respond to your questions about the institutions’ offerings and to make contact before concluding a contract. The basis for processing is the necessity to take action at your request before entering into a contract and your consent. (Article 6(1)(a) and (b) GDPR);
2. to implement the contract for your child’s education, including adapting the teaching process to individual needs and predispositions of the child, maintaining a class register, student records, grade sheets, contact related to the performance of the contract, and sending current information and settlements. The basis for processing is the necessity for the performance of the contract (Article 6(1)(b) GDPR);
3. to fulfill a legal obligation incumbent on the institutions. The basis for processing is a legal obligation (Article 6(1)(c) GDPR) imposed on the institutions by the Education Law (including, among others, all documentation of your children’s education and information passed to supervising institutions);
4. for security purposes. The legal basis is the legitimate interest of the institutions (Article 6(1)(f) GDPR), consisting in monitoring and recording data from monitoring of the building and the institutions’ surroundings;
5. for informational and marketing purposes. The legal basis for processing is the legitimate interest of the institutions and your consent (Article 6(1)(a) and (f) GDPR);
6. for analytical or statistical purposes. The legal basis for processing is the legitimate interest of the institutions (Article 6(1)(f) GDPR), consisting of using financial analyses for internal reporting and determining optimal directions for our development.
Your personal data will be processed in an IT environment, meaning it may also be temporarily stored and processed to ensure the security and proper functioning of IT systems, e.g., when performing backup copies, testing changes in IT systems, detecting irregularities, or protecting against abuse and attacks;
7. transferring and transferring your personal data outside the European Economic Area (EEA) is possible in situations related to the organization of the education process, international exchanges, international cooperation between educational institutions, etc. The condition for transferring data is your prior written consent in the form of signing an appropriate agreement.
The International Education Center sp. z o.o., when transferring your personal data, guarantees that it carries out this activity only if:
• the third country is on the list of third countries for which the European Commission has issued a decision on an adequate level of protection; or
• there is a possibility to provide appropriate safeguards described in Article 46 GDPR; or
• one of the special grounds mentioned in Article 49(1) GDPR has occurred.
8. Your personal data are not and will not be profiled by the International Education Center sp. z o.o.

How long do we keep your and your child’s data?
Your personal data will be stored for the duration of the contract. Additionally, after the termination of the contract, your data will be stored due to obligations arising from legal regulations, for the duration of their validity. To the extent that the basis for processing your data is consent, your data will be processed until it is withdrawn (information on the basis of processing can be found above, in the section „Why do we process your and your child’s data?”). Consent can be withdrawn at any time. Withdrawal of consent does not affect the legality of processing carried out before its withdrawal. If you wish to withdraw consent for the processing of personal data, please send an email or letter to the address provided below, in the „How can you contact us?” section.
Who do we share your data with?
In connection with the services that external entities provide for the High School, Primary School, and Kindergarten

, these entities may gain access to your personal data, to the extent necessary for the provision of these services. These entities include: providers of the electronic diary service, e-secretariat, e-certificates, IT systems, psychological-pedagogical and therapeutic counseling centers, postal and courier operators, catering, other external subcontractors. Moreover, your personal data may be shared only with entities and institutions authorized under the law.

What rights do you have?
In connection with the processing of your data by the High School, Primary School, and Kindergarten, you have the following rights:
1. to obtain information on how and to what extent we process your and your children’s data;
2. to obtain a copy of your and your children’s personal data;
3. to request the rectification of data (if they have been incorrectly recorded or have changed), their deletion (if there is no basis for the institution to process them) or restriction of processing (if you want the institution to process data only to a limited extent);
4. to request the transfer of data you have provided to us in a structured, commonly used format readable by machines;
5. in the case where the processing of your data by the institutions is based on a legitimate interest, you may object to such processing (information on the basis of processing is provided above in the section „Why do we process your and your child’s data?”).
If you believe that our processing of data infringes your rights, please inform us. We strive to respond to your comments and suggestions. You also have the right to lodge a complaint with the supervisory authority.

How can you contact us?
You can write to our address:
College: ul. Ślusarska 9, 30-710 Krakow, email: info@ke.edu.pl
Data Protection Officer: ul. Szarotki 8, 43-300 Bielsko-Biała, email: iod@mbm.edu.pl