SP TRIADA PRIVATE SCHOOL LIMITED (with a trademark TRINITY PRIVATE SCHOOL) dedicated to protecting the confidentiality and privacy of information entrusted to it and complies with Personal Data Privacy legislation (GDPR) 169/2016 as currently in force and Cyprus Republic Law 125/2018.
Trinity Private School processes personal data of its prospective, current, and former students and their parents or representatives as part of its educational services. Trinity acknowledges its obligations under data protection legislation and is committed to fulfilling these obligations for both staff and students. The school will adhere to the requirements of the General Data Protection Regulation (GDPR), which is applicable in the European Union.
The appointed Data Protection Officer (DPO) will ensure the highest standards of data security and confidentiality are upheld during data processing and handling within the school premises. Their responsibilities include coordinating and monitoring data management training, fostering a positive data culture and best practices, providing advice on data-related matters, assessing the severity of data breaches, and implementing data protection policies issued by Trinity Private School. The DPO will also ensure the existence of secure and confidential systems within the school and provide information to authorized entities as required.
We invite you to carefully read this Privacy Notice, which sets out in which context we are processing your personal data and explains your rights and our obligations when doing so.
To exercise any of the rights provided in this policy or to seek further information or clarification regarding the processing of personal data, please contact Trinity Private School through its designated Data Protection Officer at [email protected]. The Data Protection Officer is responsible for ensuring that Trinity Private School adheres to all GDPR requirements.
At Trinity Private School, we collect and process personal data about various individuals connected to our institution, including prospective, current, and former students, their parents, staff, suppliers, contractors, friends, supporters, and visitors. The personal data we collect can vary depending on the purpose for which it is collected. The types of personal data we may collect include:
Trinity Private School primarily collects personal data directly from the individuals themselves or their parents/guardians in the case of students. However, in certain instances, we may also gather information from third parties such as referees, previous schools, professionals, or authorities involved with the individual. Additionally, we may obtain data from publicly available sources.
The personal data we hold is processed by designated staff members for the purposes for which it was provided. We have implemented appropriate technical and organizational measures to ensure the security of personal data, including policies regarding the use of technology, devices, and access to school systems. We do not transfer personal data outside the European Union unless we are confident that it will receive an equivalent level of protection.
During the course of school operations, we may share personal data, including special category personal data where necessary, with third parties such as examination boards, professional advisors, and relevant authorities (e.g., Ministry of Education, Department of Statistics, Immigration Office, Tax Department, Social Insurance Services). Some of our systems and services are provided by third-party providers, including hosted databases, the school website, school calendar, school email, platforms, and applications. These arrangements are always subject to contractual assurances ensuring that personal data is securely maintained and used only in accordance with our explicit instructions. We do not disclose or sell personal data to other organizations for their own purposes.
At Trinity Private School, we collect and process personal data based on the legal grounds established by the GDPR. These legal bases include:
For the processing of special categories of personal data (e.g., health data), we adhere to the following legal grounds:
At Trinity Private School, we handle personal data in accordance with the applicable legal bases, ensuring compliance with data protection regulations and safeguarding the privacy and rights of our students and parents.
Trinity Private School processes personal data of parents and students for various purposes, including:
At Trinity Private School, we adhere to the laws and regulations of Cyprus and the European Union when processing your personal data. We ensure that there is a proper justification or legal basis for processing your personal data, which may include the following:
Please note that the above list serves as examples, and the specific legal basis for processing your personal data may vary depending on the circumstances. We ensure that all processing activities are conducted in compliance with applicable data protection laws and regulations.
At Trinity Private School, we prioritize the confidentiality and security of your personal data. We do not share personal data with unrelated third parties, unless it is necessary for legitimate professional and business purposes, to fulfill your requests, or as required or permitted by law or professional standards.
In order to provide our services effectively, we may engage reputable partners, service providers, or agencies to process your personal data on our behalf. Before transferring any personal data to them, we ensure that they meet our stringent standards for data processing and security. We enter into contractual agreements with these external service providers, imposing obligations to maintain the confidentiality and security of the information they have access to.
Confidentiality is a core principle at Trinity Private School, and it is reflected in our General Terms of Business, which includes a confidentiality clause. At times, we may also sign confidentiality or non-disclosure agreements with third parties, such as external service providers who have access to confidential information.
Within Trinity Private School, access to personal data is granted only to those members of our staff and collaborators who require it to ensure the provision of educational and ancillary services. For instance, the Medical Office, the Principal, and authorized staff have access to students' medical records. Other departments may have access to specific health data based on your expressed consent (e.g., allergies) or to protect substantial public interest as required by Union or national law (e.g., special learning needs related to certain medical conditions).
When it comes to disclosing personal data to third parties outside of Trinity Private School, such disclosures are made solely within the regular activities of the school. The categories of recipients may include:
Please note that apart from the mentioned categories, we do not release information to any other third parties unless required by law or with your express consent as the data subject. We take the privacy and confidentiality of your personal data seriously and ensure that it is handled in accordance with applicable regulations and best practices.
At Trinity Private School, we retain personal data for legitimate and lawful reasons, and only for as long as necessary or required by law. If you have any questions about our record retention periods or if you would like to request the erasure of your personal data, please contact our Data Protection Officer.
Trinity Private School adheres to applicable laws and regulations regarding the retention of personal data. We have established the following practices:
We prioritize the responsible handling and storage of personal data at Trinity Private School, ensuring compliance with legal requirements and maintaining transparency and accountability in our data practices.
Students at Trinity Private School can submit requests for their educational records by contacting the school administration. We aim to respond to all requests regarding educational records within 15 school days. For requests pertaining to information held outside the educational record, we will respond within one month.
It is important to note that members of staff at Trinity Private School act as representatives of the school, and any information they create, collect, or retain in records or mark books regarding students is considered data under our policy. Such information is not confidential to the individual teacher but is subject to the school's data protection policies.
We emphasize the significance of diligent data security to our staff, and they receive appropriate training to ensure the risk of any data breaches is minimized. We prioritize safeguarding personal information and maintain a strong commitment to protecting the privacy and security of our students' data.
At Trinity Private School, we respect your privacy and uphold your rights as outlined in the General Data Protection Regulation (GDPR). We are committed to ensuring the protection and transparency of your personal data. Here are your privacy rights:
Please note that there may be lawful exemptions and limitations to these rights. Trinity Private School will respond to your written requests regarding your personal data as soon as reasonably practicable, within the statutory time-limits. For access requests, the response time is one month. Please make any requests or address objections in writing to our Data Protection Officer.
It's important to be aware that certain data may be exempt from the right of access, such as information identifying other individuals or data protected by legal privilege. Additionally, we are not required to disclose student examination scripts, although examiners' comments may be shared. Confidential references provided by the school for educational, training, or employment purposes are also exempt from disclosure.
At Trinity Private School, we prioritize the protection and privacy of your personal data and strive to fulfill your privacy rights in accordance with GDPR.
At Trinity Private School, we understand the importance of protecting student data and respecting their rights under Data Protection legislation. In most cases, we rely on parental consent to process personal data relating to students, unless it is more appropriate to rely on the student's consent based on the nature of the processing and the student's age and understanding.
Parents should be aware that depending on the child's interests, parental rights at law or under their contract, and the circumstances involved, they may not always be consulted regarding the processing of their child's personal data.
In general, we assume that ordinary disclosure of students' personal data to their parents is not dependent on the student's consent. This includes sharing information about the student's activities, progress, behavior, and welfare. However, if a student specifically requests confidentially and withholds consent for their personal data to be disclosed to their parents, we may have an obligation to maintain confidentiality unless there is a good reason to do otherwise. This may include situations where disclosure is in the best interests of the student or other students or is required by law.
Students who have sufficient maturity to understand the request they are making can make subject access requests for their own personal data. A person with parental responsibility may also make a subject access request on behalf of a student, but it is important to note that the information is always considered to belong to the child at law. If a parent makes a subject access request on behalf of their child, the consent or authority of the child (if of sufficient maturity) may need to be obtained.
We strive to keep all personal data held about individuals as accurate and up to date as possible. If there are any changes to important information, such as contact details, please notify us by sending an email to [email protected] .
If you have any concerns regarding your data protection rights, you can address them to the School's Data Protection Officer by sending an email to [email protected] .
If you believe that your rights under GDPR have been violated, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection. You can visit their website at www.dataprotection.gov.cy or contact them through the Call Center: 22 818 456, Fax: 22 30 45 65, or via email at [email protected].
At Trinity Private School, we are committed to safeguarding your privacy and ensuring the protection of your personal data.