Inspired is a company registered in England as Inspired Education Holdings Limited, company number 09268120 with its registered address as Sixth Floor, 3 Burlington Gardens, London, W1S 3EP, United Kingdom. Inspired operate numerous affiliated schools globally via its regional offices in Europe, Africa, Middle East, Asia-Pacific and Latin America.
Inspired takes seriously data protection and our responsibilities to correctly and lawfully process personal data as a data controller. We are committed to complying with legal obligations stated in the General Data Protection Regulation 2016/679 (GDPR) and the Data Protection act 2018, as well as under consideration, when necessary, of the applicable local regulations and practicing industry standards when collecting, processing and storing personal data.
This privacy notice provides detailed information about how we process the personal information that you provide to us. Our Data Protection Officer can be contacted by email on firstname.lastname@example.org if you have any queries regarding the processing of your personal data.
We process personal data about employees, suppliers, contractors, prospective customers and third parties interested in finding out more about our company and the schools within our group. All data related to students, parents and employees of the affiliated schools are processed within the systems controlled by each of those individual schools. You can read the associated privacy notice for each of our schools within the individual school website.
The personal data we collect, process and store will be personally identifiable information related to customers, prospective customers, previous and current employees, contractors, suppliers and supporters. The personal data processed may include video and photographic images about an individual. The collected Information is the following:
Other types of data we may collect, process and store, according to the school purposes, are: information related to health, criminal records and other sensitive information related to an individual. Information such as;
Information related to past and present parents and students is processed and stored by our affiliated schools within the systems controlled by those individual schools.
You can read the associated privacy notice for each of our schools within the individual school website.
Inspired collects information in several ways, including:
As an organisation, we may be lawfully required to share personal information with relevant authorities or third parties as permitted on statutory grounds, to comply with statutory obligation or where Inspired has received specific consent from the individual concerned. Our staff collect, process and store personal information only for the purposes for which it is intended for as long as those purposes remain valid.
All personal data which is collected by regional offices is stored within the European Economic Area on systems that are provided by our organisation, third parties and/or cloud storage providers. These systems include Enterprise Resource Systems, Human Resources Information systems, web servers and email systems.
We may collect personal data outside of the European Economic Area, however, regardless of location, we will impose the same data protection safeguards that we deploy inside the European Economic Area. We do not transfer personal data outside the European Economic Area unless the country in question has been deemed by the European Commission to provide an adequate level of protection for personal data.
Our organisation has a Data Protection Standard in place to oversee the effective and secure processing of your personal data. We have policies around the use of technology and devices, and access to school systems. We try to ensure that all personal data held in relation to an individual is as up to date and accurate as possible.
4.1. PROCESS OF PERSONAL DATA
Inspired processes personal data to lawfully and legitimately support the organisation’s operation. Our organisation collects information about customers, prospective customers, suppliers, contractors, employees and future employees when necessary to:
Our organisation collects information about staff, prospective staff, customers and prospective customers, suppliers and contractors when necessary for:
The personal data object of processing may only be communicated to other schools within Inspired group with the prior written consent of the data subject and the personal data will be processed with the same legitimate purposes mentioned herein.
4.2. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
In the context of the purposes as listed above, we may share your personal data with third parties, such as the service providers we use (e.g. IT service providers, marketing agencies, etc.). Your personal data can also be disclosed to our affiliated companies and professional contacts.
We will ensure that, where relevant, contractual safeguards are implemented to ensure the protection of your personal data when disclosing your personal data to a third party. For example, we will enter into data processing agreements with relevant parties (providing for restrictions on the use of your personal data and obligations with respect to the protection and security of your personal data).
The parties to whom we may disclose your personal data as referred to above may be located in countries outside the European Economic Area (EEA), including in countries which may offer a lower level of data protection than in the EEA.
In such case, we will implement appropriate measures to ensure adequate protection of your personal data in accordance with applicable data protection legislation.
Your personal data shall be neither rented nor sold to third parties.
We retain personal data only for a legitimate and lawful purpose and only for so long as necessary or required by law. Our Data Protection Officer can be contacted by email on email@example.com if you have any queries regarding the retention of your personal data.
Under Data Protection Law you have rights regarding the collection, processing and storage of your personal data. These rights are, however, subject to certain exemptions and limitations.
You have the right to:
Therefore, in accordance with the provisions of GDPR, data subjects will be able to exercise their rights by sending a written specific request, along with a copy of their ID card, to the following email address: firstname.lastname@example.org.
The Subject Access Request (SAR) procedure regulates the right of the subjects to access their personal data verbally or in writing and at no charge. We have processes in place to ensure that we respond to a subject access request without undue delay and within one month of receipt although we can extend the time limit to respond to a request if necessary. We are aware of the information we must provide in response to a subject access request and the need to provide it in clear and plain language.
Any data access request is subject to certain exemptions, limitations or contractual obligations. Data belonging to or identifying other individuals is exempt from right of access and will be subject to legal privilege. We cannot disclose any confidential information related to the purpose of providing education within our group of schools, examinations or supplying examination scripts to external bodies. We cannot disclose confidential information on any of our staff.
According to the GDPR, we are required to obtain consent to process personal data under legal limitations and exceptions as we may have lawful and legitimate reasons to process such data to support the organisation’s operation or fulfil contractual or legal obligations, regardless of consent. When our organisation collects information about you, we take reasonable steps to advise you of certain matters. This includes the purpose of the collection, and how to access, update and correct information held about you. For information relating to students and their families, a consent form is provided to parents (or mature students) via our affiliated schools directly. In some cases, we may send out separate consent requests using:
Inspired has adopted all necessary technical and organizational means in order to guarantee the confidentiality, security and integrity of personal data that is concerned, as well as to avoid the loss, alteration, destruction and/or access of unauthorised third parties.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO) http://www.ico.org.uk/ . We recommend that you contact our Data Protection Officer by email on email@example.com to take necessary steps to resolve the matter before contacting the ICO.
Inspired will update this Privacy Notice from time to time. Any substantial changes that affect how we process your personal data will be notified on our website. If required, we will also notify you directly. This Privacy Notice should be read in conjunction with other organisation policies and any contract terms and conditions.
This policy was last updated in July 2020
Your enquiry was sent successfully.
Something went wrong
Your enquiry was not sent successfully.
Please try again.
Too many attempts
Your enquiry was not sent as you tried sending too many times. Plesae try again later.