Protection of personal data (GDPR)
Statement of consent on the privacy and protection of personal data
‘Dreamsters’ Private Institute recognizes the importance on the policy of your personal data protection. It complies with the current regulation on personal data protection (General Regulation (EU) 2016/679 - otherwise known as "GDPR") and takes all the technical and organizational measures necessary for the secure processing of the data collected.
Your Personal Data is the information that defines you as an individual. For example, it is the information that we need to collect about you during your registration (name, home address, etc.) but also information about your status whilst taking the courses within the Language Center (e.g., academic performance, test results, etc.). In addition, photos and videos in which you or your children are featured in are also considered personal data.
The current statement is intended to help you understand how and why your personal information is collected and what we do with this information. Consequently, it explains the rights and decisions you can take regarding your personal information.
The director of ‘Dreamsters’ Private Institute is responsible for managing the way in which our students' personal information is collected and protected. The director can answer any potential inquiries regarding the use of your personal data.
What is "personal data"?
Personal data is the information that the ‘Dreamsters’ Private Institute collects about you as an individual.
The categories of information we may collect include the following:
- Personal information - e.g., Name, Address, date of birth nationality, mother tongue, country of birth etc.
- Monitoring information - e.g., number of absences, reasons for absence, photos or videos in the context of educational activities
- Evaluation information - e.g., curriculum evaluation results or competitions
- Relevant medical information, if and when required.
- Behavioural information - e.g., behaviour within the Center, recommendations, etc.
Who may process your information?
‘Dreamsters’ Private Institute is in charge of processing the personal information you provide us with. This means that it controls the purpose and wat in which personal data concerning its students and their families are collected and used.
The director of the Private Institute 'Dreamsters' acts as the Representative director regarding the responsibilities of the data control and her role is to supervise the procedures and ensuring that they comply with the European Protection Regulation Personal Data (GDPR).
In some cases, your data may be sent for processing to a third party, which is then responsible to perform the personal data processing. For instance, when 'Dreamsters' Private Institute shares the processing of your data with a third-party executor, it so in informational messages can be sent through companies that send such bulk messages to mobile phones .The same security and protection regulations are applied on that third party as well.
Why do we collect and use your personal data?
The chief purpose for collecting and using personal data is to provide the most efficient education to our students.
Below you can find examples of the different ways in which we use your personal data and where this personal data derives from:
- The registration forms you fill out give us personal information about you.
- With your consent, we may use photos or videos featuring you on our website or on social networking sites or for our Institute’s newsletter to further advertise our premises. We may also continue to use these photos and videos after you have completed your courses at ‘Dreamsters’.
- If required, we may need to obtain your medical to better conduct the lessons or potential examinations. For example, we need to know if you are allergic to something or if you may need special help or support to perform a task.
- We publish the examination results and other news on our website or within the Institute premisses as well as in printed promotional material, articles and photos for general information or advertising of ‘Dreamsters’ Private Institute.
- We often send you information to let you know what is going on at school (such as information about events, activities taking place at the ‘Dreamsters’ Private Tutoring Center.
- We use Surveillance cameras to make sure that the premises of the Institute are safe.
- We collect your information of financial nature, such as collection of receipts and pending payments.
Legal reasons for collecting and using your personal data:
The main reason why ‘Dreamsters’ Private Tuition processes personal data is in order to be able to provide education to students and to comply with the legal obligations of the Private Institute.
‘Dreamsters’ Private Institute processes personal data if at least one of the following applies:
When there is clear consent of the student
To comply with our legal obligations, ie if the law obliges us to use personal data for a reason, for example issuing receipts for tax purposes
When we have to fulfil our obligations under an agreement (contract), for example in order to provide you with the training services you want and to attend classes at the Center.
To exercise, establish, or defend legal cases or claims.
When we have a legitimate interest in doing so, that is, a good reason to do so. For example, in order to advance the goals of our business or to ensure that everything works properly and safely
To protect the very important interests of any person, when this person cannot give his consent, for example if he is seriously injured we will need to share this person's data with doctors or hospitals.
How long is my data stored?
Your personal data is not stored for an unlimited period of time. It is only kept for as long as is necessary to complete the initial purpose for which it was originally collected.
We mainly retain your personal data for as long as it takes to complete the education process. In addition, some information is retained after you complete the courses at 'Dreamsters' Private Institute in the event of a complaint or in cases where we are required by law to retain specific information regarding our accounts.
Will my details be disclosed to third parties?
Sometimes we need to share your personal information with other family members or guardians of the student. When necessary, we still fully comply with the personal data protection law.
The following is an indicative description of the types of operators we may need to share some of your personal information with for one or more reasons:
- With the educational staff of our Private institute so that we can provide the most effective academic services possible.
- Your family members, in order to inform them of any potential issues of concern.
- Partners we work with who help us provide our services to you (including, for example, the Operator of our website and its third-party electronic platforms, technical support of our systems by specialized professionals or cooperation with banks which you pay us through etc.).
- We may need to share your personal information in the event of an emergency, for example if someone is injured at our premisses and we need to give information to hospitals or doctors.
- Our insurance company if there is a serious incident at the Institute.
- Our legal advisors or associates, in case there are tuition payments due.
Sending personal data to other countries
All personal data held is stored only within the European Economic Area (EEA) and is therefore protected under the European law. ‘Dreamsters’ Private Institute will never transfer your child's data outside the EEA and if the need arises, this will only happen if we take all necessary steps to ensure that any of your information is adequately protected under the Personal Data Protection Policy, using all the appropriately available and secure secure cross-border transport solutions, as required by law.
What are my rights?
You should be aware that as an individual and data subject you have the following rights regarding the processing of your personal data:
- Be informed about what data ‘Dreamsters’ Private Institute holds and how it uses it and receive a copy of this information (right of access).
- Request the deletion of all personal data we hold about you (right of deletion) at any time ,unless we have a legal obligation to retain your data or a legal case is pending.
- You have the right to request that we transfer your information to another service provider in a specific electronic form (portability right).
- Ask for your personal data to be corrected or updated if it is inaccurate or incomplete (right of correction).
- Oppose the processing of your personal data or request a restriction on how we process your data, under certain conditions (right of objection and right of restriction).
- Ask us not to use your personal data for promotional or marketing purposes by contacting us directly.
- Withdraw your consent to the use of your personal information in all cases where you have given it prior. (Right of withdrawal of consent).
- The right to contact the Authority of Personal Data Protection for any issue concerning your personal data (right to report to Authority).
The Director of ‘Dreamsters’ Private Institute can give you more information about your privacy rights and how you can exercise each of them.
Management of personal data breaches
In the event of a breach of personal data and depending on the extent and severity of the breach, you should be aware that we will take immediate action, such as:
- We will inform the corresponding authorities.
- We will immediately take appropriate measures to address the issue.
- We will limit the scope of the violation.
- We will evaluate the way we took action in order to improve further.
- We will assess the risk that may exist.
- We will seek guidance and instructions from the Authority of Data Protection on how to manage the breach, as well as if and when it is necessary to inform you of this breach.
Where can I find out more information?
This personal data protection form is intended to clarify the way in which we operate and protect your personal data. The Director of the Institute may answer any additional enquiries you may have.
Changes may be applied to the current personal data protection form. Any changes will be published on our website https://dreamsters.com.cy/ or you will be notified for any substantial changes via email.
This Policy was updated on March 2023.