{"id":18834,"date":"2020-10-15T15:18:44","date_gmt":"2020-10-15T12:18:44","guid":{"rendered":"https:\/\/olgagudynn.ro\/?page_id=18834"},"modified":"2026-05-06T18:17:08","modified_gmt":"2026-05-06T15:17:08","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/olgagudynn.ro\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"18834\" class=\"elementor elementor-18834 elementor-17808\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"has_ae_slider elementor-section elementor-top-section elementor-element elementor-element-4e3aae26 elementor-section-boxed elementor-section-height-default elementor-section-height-default ae-bg-gallery-type-default\" data-id=\"4e3aae26\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_ae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-16ec7254 ae-bg-gallery-type-default\" data-id=\"16ec7254\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4e57942 elementor-widget elementor-widget-text-editor\" data-id=\"4e57942\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>PRIVACY POLICY<\/b><\/p>\n<p><b>within OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L.<\/b><\/p>\n<p><b>with regard to EU Regulation 2016\/679 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC<\/b><\/p>\n<p>&nbsp;<\/p>\n<p><b>Updated on 06.05.2026<\/b><\/p>\n\n<p><span style=\"font-weight: 400;\">OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L. (hereinafter referred to as <\/span><i><span style=\"font-weight: 400;\">\u201cOGIS\u201d<\/span><\/i><span style=\"font-weight: 400;\">) complies with Regulation (EU) 2016\/679 of the European Parliament and of the Council on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC <\/span><i><span style=\"font-weight: 400;\">(hereinafter referred to as the \u201cRegulation\u201d or the \u201cGDPR\u201d)<\/span><\/i><span style=\"font-weight: 400;\">, applicable from 25 May 2018.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">As this is a European Regulation, it applies directly and uniformly in all Member States of the European Union, in order to strengthen and unify security policies in the online environment and to provide better protection for the data of all European citizens.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Respect for confidentiality and the protection of personal data are fundamental principles to which OGIS gives the necessary importance and attention, since without understanding, awareness and implementation of these principles, our current activity cannot comply with the requirements of the aforementioned European Regulation.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">One of the fundamental principles of this Regulation is transparency, and through this Privacy Policy we wish to inform you about how we collect, use, transfer and protect your personal data.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">OGIS reserves the right to update this Policy periodically. Any revised version will be published on the website <\/span><b>www.olgagudynn.ro<\/b><span style=\"font-weight: 400;\">, indicating the date of revision. In the event of essential changes affecting the rights of data subjects, OGIS will ensure appropriate information through suitable means.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">This Privacy Policy applies to:<\/span><\/p>\n\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">All private pre-university educational units established by OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L.:<\/span><\/li>\n<\/ol>\n\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">\u201cOLGA GUDYNN\u201d BILINGUAL HIGH SCHOOL, with headquarters in Voluntari, 141 Pipera Boulevard, Ilfov County, with an extension in Voluntari, 5 Erou Iancu Nicolae Street, Ilfov County, identified by CIF 39700549;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">\u201cOLGA GUDYNN INTERNATIONAL SCHOOL\u201d KINDERGARTEN, with headquarters in Voluntari, 82-84 Erou Iancu Nicolae Street, Ilfov County, identified by CIF 39700611;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">\u201cOLGA GUDYNN INTERNATIONAL SCHOOL\u201d KINDERGARTEN, with headquarters in Bucharest, 6 F\u0103g\u0103ra\u0219 Street, Sector 1, identified by CIF 39886205;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">\u201cOLGA GUDYNN INTERNATIONAL SCHOOL\u201d KINDERGARTEN, with headquarters in Bucharest, 8 Ancu\u021ba B\u0103neasa Street, Sector 2, identified by CIF 39935200;<\/span><\/li>\n<\/ol>\n\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">All departments and all staff belonging to OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L.;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">All contractors, suppliers and other persons working on behalf of OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L.<\/span><\/li>\n<\/ol>\n\n<p><span style=\"font-weight: 400;\">This Privacy Policy refers to personal data belonging to pupils, in their capacity as primary beneficiaries of education, candidates in the admissions process, parents and\/or legal representatives, employees and candidates for positions within OGIS, persons who contact or visit us, representatives of our partners or collaborators, as well as potential collaborators.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">The Policy covers data collected through the website <\/span><b>www.olgagudynn.ro<\/b><span style=\"font-weight: 400;\">, through Schedule a Visit forms, educational or recruitment documents, email, direct interactions or during events organised by OGIS.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">This Privacy Policy does not cover third-party applications and websites that persons may access by following links on our website. This is beyond our control. We encourage everyone to review the Privacy Policy of any website and\/or application before providing personal data.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">To the extent that OGIS uses official pages on social networks or external platforms, for example for organising online events, webinars or communication campaigns, the processing of data within those platforms is also carried out in accordance with the privacy policies of the respective providers, which generally act as independent controllers or joint controllers.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Before providing personal data through third-party applications or platforms, we recommend that data subjects consult the privacy policies and privacy settings available within those services.<\/span><\/p>\n\n<p><b>Terms of the Regulation:<\/b><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Controller \u2014 in this case, OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L. or any other private pre-university educational unit that processes or determines the purposes and means of processing personal data;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data \u2014 any information relating to an identified or identifiable natural person; an identifiable person is a person who can be identified, directly or indirectly, by reference to an identifier: surname\/first name, address, personal identification number, email, telephone number, income, biometric data, image, IP address, or by reference to medical data, genetic data, data concerning ethnic or racial origin, political, religious, philosophical or cultural beliefs, or trade union membership;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data subject \u2014 any natural person whose personal data may be or are processed by the controller;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Processing \u2014 any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.<\/span><\/li>\n<\/ul>\n\n<ol>\n<li><b><\/b> <b>GENERAL INFORMATION:<\/b><\/li>\n<\/ol>\n\n<p><b>1.1.<\/b> <b>Who we are and how you can contact us:<\/b><\/p>\n\n<p><span style=\"font-weight: 400;\">OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L. is a legal entity of Romanian nationality, with headquarters in Bucharest, 8 Ancu\u021ba B\u0103neasa Street, Sector 2, registered with the Trade Registry Office attached to the Bucharest Tribunal under no. <\/span><span style=\"font-weight: 400;\">J2008006874403<\/span><span style=\"font-weight: 400;\"> and having unique identification code <\/span><span style=\"font-weight: 400;\">13947805.<\/span><\/p>\n\n<h2><b>Data Protection Officer (DPO)<\/b><\/h2>\n\n<p><span style=\"font-weight: 400;\">OGIS has appointed a Data Protection Officer (DPO), pursuant to Article 37 of Regulation (EU) 2016\/679, considering the nature of its processing activities, which include data relating to minors, medical data and data processed by systematic means.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">The DPO is the main point of contact for data subjects in all matters relating to data processing.<\/span><\/p>\n\n<p><b>DPO contact details: <\/b><a href=\"mailto:dpo@olgagudynn.ro\"><span style=\"font-weight: 400;\">dpo@olgagudynn.ro<\/span><\/a><span style=\"font-weight: 400;\">; Bucharest, 8 Ancu\u021ba B\u0103neasa Street, Sector 2.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">For the purposes of data protection legislation, we act as CONTROLLER when we process your personal data.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">As we are always interested in hearing your opinions and in providing you with any additional information you may need regarding the processing of your personal data, we inform you that you may contact us at the email address <\/span><a href=\"mailto:dpo@olgagudynn.ro\"><span style=\"font-weight: 400;\">dpo@olgagudynn.ro<\/span><\/a><span style=\"font-weight: 400;\"> or directly by submitting a written request registered at our headquarters in Bucharest, 8 Ancu\u021ba B\u0103neasa Street, Sector 2.<\/span><\/p>\n\n<ul>\n<li aria-level=\"2\"><b>Purpose of the General Privacy Policy:<\/b><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">When a natural person enters into any kind of relationship with us, they entrust us with their personal data.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">The purpose of this General Privacy Policy is to explain to data subjects what data we process, why we process them and what we do with them, in our capacity as controller. We take confidentiality seriously and do not, in any form or under any circumstances, disclose personal data of any kind. Being fully aware that personal data belong to each natural person, we make every effort to store them securely and process them carefully. We do not provide information to third parties without informing the data subjects in advance or, where the situation requires it, without requesting their consent.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">All information in this Privacy Policy is important. We hope it will be read carefully.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">In accordance with applicable legislation, the natural person benefiting from our services or having any kind of relationship with OGIS is considered a \u201cdata subject\u201d, namely an identified or identifiable natural person.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">In order to ensure transparency regarding the processing of personal data and to allow the easy exercise, at any time, of the rights conferred by law, OGIS has implemented appropriate measures to facilitate communication between the data controller and data subjects.<\/span><\/p>\n\n<ul>\n<li aria-level=\"2\"><b>Processing of minors\u2019 data:<\/b><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">With regard to minor pupils, the processing of data is based mainly on the performance of the Educational Contract, the fulfilment of OGIS\u2019s legal obligations in the field of education, as well as the performance of tasks carried out in the public interest, and not on consent.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">If you are under the age of 16, you will need the consent of your parents or legal representatives before providing us with any personal data for registration purposes or other online activities.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">If you have any questions regarding the information available on this website, we recommend that you seek the support of your parents or legal representatives.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">OGIS does not process data of minors under the age of 16 on the basis of the minor\u2019s own consent.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">If you are a minor and have not obtained parental consent, please do not provide personal data on our website.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Any processing of minors\u2019 personal data is carried out exclusively under the conditions and in compliance with the applicable legal provisions.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">OGIS does not make the provision of educational services conditional upon consent for additional processing that is not necessary for the conduct of the educational relationship or for the fulfilment of legal obligations.<\/span><\/p>\n\n<ul>\n<li aria-level=\"2\"><b>Commitment of OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L.:<\/b><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">The protection of the personal data of data subjects is a priority for us. In this respect, we undertake to comply with the provisions of Regulation (EU) 2016\/679, as well as the applicable national legislation in this field, taking into account the following principles:<\/span><\/p>\n\n<ul>\n<li aria-level=\"1\"><b>Lawfulness, fairness and transparency:<\/b><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">We process personal data lawfully and fairly. We are always transparent regarding the personal data we process, and the data subject is properly informed.<\/span><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Control belongs to the data subject:<\/b><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">Within the limits of the law, we provide the data subject with the opportunity to review, amend or delete the personal data they have shared with us and to exercise their other rights.<\/span><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Data integrity and purpose limitation:<\/b><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">We use data only for the purposes described at the time of collection or for new purposes compatible with the initial ones. In all cases, our purposes are compatible with the law. We take reasonable measures to ensure that personal data are accurate, complete and up to date.<\/span><\/p>\n\n<ul>\n<li aria-level=\"1\"><b>Security:<\/b><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">We have implemented reasonable security and encryption measures in order to protect information as effectively as possible. However, it should be noted that no website, application or internet connection is completely secure.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Access to personal data is granted exclusively to OGIS staff who need this information to perform their duties, based on role-based differentiated access rights and strict confidentiality obligations.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">OGIS ensures that all persons processing personal data, whether employees or processors, are periodically trained regarding their obligations in the field of data protection and the applicable security measures.<\/span><\/p>\n\n<ol>\n<li><b> CATEGORIES OF DATA SUBJECTS:<\/b><\/li>\n<\/ol>\n\n<p><span style=\"font-weight: 400;\">Within OGIS, personal data may be processed belonging to the following categories of data subjects:<\/span><\/p>\n\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Pupils \u2014 current, prospective and former pupils, in their capacity as primary beneficiaries of educational services;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Parents and\/or legal representatives of pupils;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Candidates for employment within OGIS;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Employees and collaborators of OGIS and\/or members of their families \u2014 for data processed for the purpose of managing employment and collaboration relationships and human resources;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Visitors to OGIS premises \u2014 for data processed for the purpose of ensuring the security of persons, premises and\/or assets;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Legal representatives of legal entities with which OGIS comes into contact as partners \/ potential partners, collaborators and\/or potential collaborators and\/or suppliers;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Visitors to the website www.olgagudynn.ro.<\/span><\/li>\n<\/ol>\n\n<h5><b>III. RIGHTS OF THE DATA SUBJECT:<\/b><\/h5>\n\n<p><span style=\"font-weight: 400;\">OGIS respects all rights of data subjects provided by the GDPR and undertakes to ensure appropriate means for exercising them, in accordance with the details set out below.<\/span><\/p>\n\n<p><b>3.1. Right of access to personal data:<\/b><\/p>\n\n<p><span style=\"font-weight: 400;\">Any data subject has the right to obtain from OGIS, when it acts in its capacity as Controller, upon request and free of charge, confirmation as to whether or not data concerning them are being processed, and, where that is the case, information shall be provided regarding: the purposes of the processing; the categories of data concerned; the recipients or categories of recipients of the data, in particular recipients in third countries or international organisations; where possible, the period for which the personal data are expected to be stored or, if this is not possible, the criteria used to determine that period;<\/span><\/p>\n\n<ul>\n<li aria-level=\"2\"><b>The right to request rectification of inaccurate data or completion of incomplete data;<\/b><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">The data subject has the right to obtain from OGIS, without undue delay, the rectification of inaccurate personal data concerning them.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">The data subject also has the right to obtain the completion of personal data that are incomplete, including by providing a supplementary statement.<\/span><\/p>\n\n<ul>\n<li aria-level=\"2\"><b>The right to erasure of data<\/b> <b>(\u201cthe right to be forgotten\u201d), under the conditions provided by law;<\/b><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">The data subject has the right to obtain the erasure of personal data concerning them without undue delay, and OGIS has the obligation to erase the data without undue delay where:<\/span><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the data are no longer necessary for the purposes for which they were collected or processed;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the data subject withdraws the consent on which the processing is based;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the personal data have been unlawfully processed;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the data subject exercises the right to object under the GDPR;<\/span><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">Personal data may be erased where this is necessary for compliance with a legal obligation to which the controller is subject; at the same time, OGIS, as data controller, may refuse an erasure request in the following situations:<\/span><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the processing is necessary for exercising the right of freedom of expression and information;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the processing is necessary for compliance with a legal obligation applicable to the controller;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, under the conditions of the GDPR, insofar as exercising the right could make impossible or seriously impair the achievement of the objectives of that processing;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the processing is necessary for the establishment, exercise or defence of legal claims.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><b>The right to restriction of processing<\/b><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">The data subject has the right to obtain from OGIS restriction of processing in the following cases:<\/span><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the data subject contests the accuracy of the data, for a period enabling the controller to verify the accuracy of the data;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the processing is unlawful, but the data subject opposes the erasure of the personal data and requests instead the restriction of their use;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">OGIS no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise or defence of legal claims;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the data subject has objected to processing, for the period during which it is verified whether the legitimate grounds of the controller override those of the data subject.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><b>The right to object:<\/b><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">The data subject has the right:<\/span><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">to object at any time, on justified and legitimate grounds relating to their particular situation, to data concerning them being processed, except where there are legal provisions to the contrary. In the event of a justified objection, the processing may no longer concern the data in question unless there are compelling legitimate grounds that justify the processing and override the rights of the data subject, or where the purpose is the establishment, exercise or defence of legal claims;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">to object at any time, free of charge and without any justification, to the processing of data concerning them for direct marketing purposes<\/span><i><span style=\"font-weight: 400;\">, <\/span><\/i><span style=\"font-weight: 400;\">including profiling related to such direct marketing.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><b>The right to data portability<\/b><span style=\"font-weight: 400;\"> <\/span><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">The data subject has the right:<\/span><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">to receive the personal data concerning them which they have provided to OGIS in a structured, commonly used and machine-readable format <\/span><i><span style=\"font-weight: 400;\">and to<\/span><\/i><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">transmit those data to another controller without hindrance from OGIS to which the personal data have been provided, where: (a) the processing is based on consent or on a contract; and (b) the processing is carried out by automated means.<\/span><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">In exercising their right to data portability, the data subject has the right to have their data transmitted directly from one controller to another, where technically feasible.<\/span><\/p>\n\n<h2><b>3.7. The right to withdraw your consent:<\/b><\/h2>\n\n<p><span style=\"font-weight: 400;\">Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal. Withdrawal does not affect processing carried out on the basis of other legal grounds.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Methods for withdrawing consent:<\/span><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Written request sent to: <\/span><b>dpo@olgagudynn.ro;<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The \u201cunsubscribe\u201d option in the electronic communications received;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Written request submitted at the OGIS headquarters.<\/span><\/li>\n<\/ul>\n\n<h2><b>3.8. The right not to be subject to automated decision-making:<\/b><\/h2>\n\n<p><span style=\"font-weight: 400;\">OGIS does not carry out automated profiling and does not make decisions based solely on automated processing. All decisions concerning pupils, parents or employees are made by authorised staff, with human involvement, in accordance with Article 22 of the GDPR.<\/span><\/p>\n\n<h2><b>3.9. The right to address the competent courts:<\/b><\/h2>\n\n<p><span style=\"font-weight: 400;\">The data subject has the right to address the competent courts for the protection of their rights.<\/span><\/p>\n\n<h2><b>3.10. The right to lodge a complaint with ANSPDCP<\/b><\/h2>\n\n<p><span style=\"font-weight: 400;\">The data subject may lodge a complaint with the National Supervisory Authority for Personal Data Processing (A.N.S.P.D.C.P.) through the website <\/span><b>www.dataprotection.ro<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\n\n<ol>\n<li><b> PURPOSES OF PROCESSING ACTIVITIES WITHIN OGIS:<\/b><\/li>\n<\/ol>\n\n<p><span style=\"font-weight: 400;\">OGIS processes personal data for the following purposes, as set out below:<\/span><\/p>\n\n<p><b>4.1.<\/b><span style=\"font-weight: 400;\"> Managing the application and admissions process within OGIS \u2014 The processing of personal data is carried out at the pre-contractual stage, before the conclusion of the Educational Contract and the Financial Agreement, for the purpose of managing the application and admissions process within OGIS, including but not limited to:<\/span><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">assessing the pupil\u2019s eligibility for the chosen educational programme;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">analysing compatibility with the school\u2019s academic profile;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">organising interviews and, where applicable, academic testing;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">checking the submitted school documents, as well as the legal situation regarding the exercise of parental authority, where applicable;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">communicating the final admissions decision, whether admitted or rejected;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">managing all administrative aspects preceding the conclusion of the Educational Contract.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Providing educational services \u2014 for the proper conduct of the contractual relations established through the Educational Contract and the Financial Agreement, including but not limited to: carrying out the enrolment and re-enrolment process, preparing and assessing pupils, assigning them to classes, drafting and implementing the calendar of educational, artistic and extracurricular activities, organising and conducting the teaching and learning process, as well as administering internal and public examinations;<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Organising internal and international assessments;<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Managing educational platforms;<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Collaboration with international educational bodies<\/span><b>: <\/b><span style=\"font-weight: 400;\">the processing of personal data is carried out for the purpose of managing institutional and academic relations with international educational bodies, such as Cambridge Assessment International Education and the International Baccalaureate Organization, including for: registering and enabling pupils to participate in international programmes and assessments, managing examinations and certifications, reporting academic results, as well as fulfilling administrative and compliance obligations imposed by these bodies;<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Providing auxiliary educational services: personal guidance, orientation towards areas of interest and personal counselling, library services, extracurricular activities, school trips, publications and projects belonging to OGIS.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Human resources activities \u2014 data processing is carried out for the purpose of recruitment and selection processes, including but not limited to communication with candidates for positions offered by OGIS, the conclusion and performance of individual employment contracts, management of employment relationships, fulfilment of related legal obligations, such as tax, occupational health and safety obligations, and for internal administrative purposes.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Managing financial obligations, the relationship with data subjects and defending OGIS\u2019s rights:<\/span> <span style=\"font-weight: 400;\">The processing of personal data is carried out for the purpose of managing financial obligations, including invoicing, payment processing, collection of all fees, debt collection and activities related to the recovery of receivables, through banking institutions or other payment service providers, as well as for fulfilling applicable accounting and tax obligations. Data may also be processed for the purpose of managing and resolving complaints and notifications, as well as for establishing, exercising or defending the rights and legitimate interests of OGIS before the competent authorities and\/or courts.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Administration of IT platforms and the website: Data processing is carried out for the purpose of administering, operating and securing OGIS information systems and website, including for: managing user accounts, where applicable, ensuring the technical functionality of the website, improving the user experience, analysing traffic and preventing abusive or fraudulent use of information systems.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Communication with website visitors and interested persons: Data processing takes place for the purpose of managing requests submitted through contact forms, email or other means of communication, including for providing information regarding the educational offer, the admissions process or other services provided by OGIS.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Fulfilling legal and compliance requirements: Data processing takes place for the purpose of complying with OGIS\u2019s legal obligations, including in the fields of education, tax, accounting and archiving, as well as for <\/span><i><span style=\"font-weight: 400;\">convening and informing members of management bodies, resolving various requests, communicating or reporting to <\/span><\/i><span style=\"font-weight: 400;\">public authorities or competent public institutions\/agencies, both in Romania and in the European Union.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Ensuring the security of persons, premises and assets: Data processing is carried out for the purpose of ensuring the physical security of persons and assets, including through the use of video surveillance systems, access control and other technical and organisational measures aimed at preventing and managing security incidents.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Marketing and promotional activities: Data processing is carried out for the purpose of promoting the educational services offered by OGIS, including by sending informational communications, newsletters, event invitations, educational campaigns, publishing photo-video materials and other institutional communication activities, under the conditions of the law and, where applicable, based on the consent of the data subjects. Direct marketing communications, such as newsletters, event invitations and educational campaigns, sent by email, SMS or other electronic channels, take place exclusively on the basis of the prior consent of the data subject, in accordance with Article 6(1)(a) GDPR and legislation on electronic communications.<\/span><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">Consent for marketing communications is not a condition for concluding or performing the Educational Contract, and refusal or withdrawal of consent does not affect in any way the quality of the educational services provided by OGIS.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Data subjects may withdraw their consent for marketing communications at any time by using the unsubscribe option in each message, by sending a request to dpo@olgagudynn.ro or by submitting a written request directly at the OGIS headquarters, without any cost and without negative consequences.<\/span><\/p>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Institutional communication with parents \u2014 sending various messages related to pupils and OGIS activities by any means of communication;<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Organising educational events and extracurricular activities: The processing of personal data is carried out for the purpose of organising and conducting school and extracurricular events, including but not limited to: fundraising activities, concerts, theatre performances, talent shows, charitable and ecological actions, trips, camps, international exchanges; collaboration with international bodies, such as Cambridge Assessment International Education and the International Baccalaureate Organization; as well as any other educational and community events. Data may also be processed for the purpose of communications related to these activities, including informational and marketing communications regarding events and fundraising campaigns organised by OGIS, under the conditions of the law.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Providing medical care and support services: The processing of personal data is carried out for the purpose of ensuring the health and safety of pupils, including for providing medical care, managing emergency situations, monitoring health status, as well as providing psychological or specialist counselling services, under the conditions of the law and in compliance with the confidentiality of sensitive data.<\/span><\/li>\n<\/ul>\n\n<ul>\n<li aria-level=\"2\"><span style=\"font-weight: 400;\">Resolving and managing disputes:<\/span> <span style=\"font-weight: 400;\">The processing of personal data may take place for the purpose of preventing, managing and resolving disputes, including for establishing, exercising or defending the rights and legitimate interests of OGIS before the competent authorities, courts or other entities involved.<\/span><\/li>\n<\/ul>\n\n<ol>\n<li><b> CATEGORIES OF PERSONAL DATA:<\/b><\/li>\n<\/ol>\n\n<p><span style=\"font-weight: 400;\">Depending on the purposes mentioned above, OGIS processes the following categories of personal data, without being limited to them:<\/span><\/p>\n\n<p><b>5.1<\/b><span style=\"font-weight: 400;\">. Identification data of parents\/legal representatives, as well as of other persons who may be contacted in case of emergency: surname, first name, citizenship, nationality, domicile\/residence, data contained in identity documents, identity card\/passport, including photograph, as well as other information necessary for identifying and contacting them;<\/span><\/p>\n\n<p><b>5.2.<\/b><span style=\"font-weight: 400;\"> Identification data of pupils: surname, first name, date and place of birth, domicile\/residence, citizenship, nationality, gender \u2014 according to the birth certificate and\/or passport or national identity card for pupils who have reached the age of 14, data from identity documents, including photograph;<\/span><\/p>\n\n<p><b>5.3.<\/b><span style=\"font-weight: 400;\"> Contact details of pupils, parents\/legal representatives: telephone number, email and any other data necessary for communication in the context of providing educational services;<\/span><\/p>\n\n<p><b>5.4.<\/b><span style=\"font-weight: 400;\"> Information regarding the family and family environment: language spoken within the family, parents\u2019 profession and workplace, their marital status, as well as any other data relevant to the pupil\u2019s educational context;<\/span><\/p>\n\n<p><b>5.5.<\/b><span style=\"font-weight: 400;\"> Exercise of parental authority \u2014 where there is additional information resulting from court decisions or other official documents made available to OGIS, including any restrictions or conditions regarding the exercise of parental rights;<\/span><\/p>\n\n<p><b>5.6.<\/b><span style=\"font-weight: 400;\"> Medical data relevant to schooling, such as data from the medical file, medical history, allergies, immunisation\/vaccination data, psychomotor conditions, medical examination results and any other data necessary to ensure the health and safety of pupils;<\/span><\/p>\n\n<p><b>5.7.<\/b><span style=\"font-weight: 400;\"> Academic data and school results \u2014 academic results, assessments, disciplinary records or any other related information, academic references, special educational needs, hobbies, assessment test results, feedback, as well as any other information regarding the pupil\u2019s educational pathway;<\/span><\/p>\n\n<p><b>5.8.<\/b><span style=\"font-weight: 400;\"> Behavioural data and preferences: information regarding pupils\u2019 behaviour, interests and preferences, relevant to the educational process;<\/span><\/p>\n\n<p><b>5.9.<\/b><span style=\"font-weight: 400;\"> Special categories of data:<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">In carrying out its educational activity, OGIS also processes special categories of data within the meaning of Article 9(1) of Regulation (EU) 2016\/679, namely data concerning pupils\u2019 health, such as allergies, vaccinations, medical conditions, psychological data and medical history.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">This processing is carried out exclusively on the basis of:<\/span><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Article 9(2)(c) GDPR \u2014 protecting the vital interests of the data subject or of another natural person, where the data subject is physically or legally incapable of giving consent;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Article 9(2)(g) GDPR \u2014 reasons of substantial public interest, on the basis of Union law or national law, in particular educational and health legislation applicable to educational units.<\/span><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">Pupils\u2019 medical data are processed exclusively by authorised staff, such as management, medical staff or designated counselling staff, and are not disclosed to third parties without an appropriate legal basis.<\/span><\/p>\n\n<p><b>5.10.<\/b><span style=\"font-weight: 400;\"> Photographs and video recordings \u2014 photographs and video recordings taken during school, educational or extracurricular activities;<\/span><\/p>\n\n<p><b>5.11.<\/b><span style=\"font-weight: 400;\"> Data concerning the use of educational platforms and information systems: authentication data, platform access history, activity carried out within them, as well as other information generated through the use of information systems made available by OGIS;<\/span><\/p>\n\n<p><b>5.12.<\/b><span style=\"font-weight: 400;\"> Financial and banking data: data necessary for managing contractual relations and financial obligations, including bank account (IBAN), account holder name, information regarding payments made, such as amounts paid and payment history, records of outstanding debts, transaction details, as well as other information necessary for payment processing, invoicing, accounting, debt recovery and fulfilment of legal tax obligations.<\/span><\/p>\n\n<p><b>5.13.<\/b><span style=\"font-weight: 400;\"> Data collected through the website and online information systems<\/span><b>:<\/b><span style=\"font-weight: 400;\"> IP address, data regarding the device used, such as device type, operating system and browser, online identifiers, cookies and similar technologies, website browsing data, such as pages accessed, duration of visit and actions performed, as well as other information automatically generated through the use of the OGIS website or online platforms, used for technical operation, security, analysis and improvement of the services provided.<\/span><\/p>\n\n<p><b>5.14. <\/b><span style=\"font-weight: 400;\">Personal data belonging to employees<\/span><b> &#8211; <\/b><span style=\"font-weight: 400;\">OGIS processes, for the purpose of managing employment relationships and fulfilling legal obligations, the following categories of personal data of employees, without being limited to them:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a) Identification and contact data: surname, first name, personal identification number, date and place of birth, nationality, citizenship, domicile\/residence address, data from the identity card\/passport, including photograph; telephone number, email address and other contact details;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">b) Data regarding personal situation: marital status and, where applicable, information regarding dependants or designated beneficiaries;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">c) Financial and remuneration data: information regarding salary, compensation, bonuses, incentives and other financial benefits, including amounts paid, frequency and method of payment, as well as data necessary for social and tax contributions;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">d) Data regarding benefits granted: information relating to insurance, including health insurance, pension contributions and other benefits offered, including data regarding beneficiaries;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">e) Data regarding professional and educational background: professional history, studies, qualifications, certifications and other information relevant to the work performed;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">f) Data regarding professional performance: evaluations, activity reports and other records regarding employee performance;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">g) Organisational data: position held, department, length of service and other information related to internal organisation;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">h) Data regarding the use of IT systems: authentication data, username, access rights, activity in information systems and other data associated with the use of OGIS IT resources;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">i) Image and audio-video data: image captured through video surveillance systems or during activities organised by OGIS;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">j) Other data provided by the employee: any other information voluntarily communicated by the employee in the context of the employment relationship.<\/span><\/li>\n<\/ol>\n\n<p><span style=\"font-weight: 400;\">5.15. Signature:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a)<\/span> <span style=\"font-weight: 400;\">For pupils and parents\/legal representatives <\/span><b>&#8211; <\/b><span style=\"font-weight: 400;\">signature data<\/span><b> &#8211;<\/b><span style=\"font-weight: 400;\"> handwritten and\/or electronic signature of pupils, where applicable, as well as of parents\/legal representatives, used in educational, contractual documents, declarations, agreements and other official documents, for their acknowledgement and validation.<\/span><\/li>\n<li><span style=\"font-weight: 400;\">b) For employees &#8211; signature data<\/span><b> &#8211;<\/b><span style=\"font-weight: 400;\"> handwritten and\/or electronic signature used in the individual employment contract, human resources documents, internal documents, declarations and other documents related to the employment relationship.<\/span><\/li>\n<\/ol>\n\n<p><b>5.16.<\/b><span style=\"font-weight: 400;\"> Personal data belonging to legal representatives of private paying entities<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">OGIS processes, for the purpose of managing contractual and financial relations with private paying entities, the following categories of personal data of their legal representatives, without being limited to them:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a) Identification data: surname, first name, position\/role within the entity, data contained in identity documents, where applicable;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">b) Contact details: telephone number, professional and\/or personal email address, as well as other data necessary for communication;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">c) Data regarding the contractual relationship: information necessary for concluding and performing contracts, including handwritten and\/or electronic signature, correspondence, payment instructions and other information relevant to the conduct of the contractual relationship;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">d) Associated financial data, where applicable: information regarding payments made or to be made on behalf of the entity, to the extent that such information is communicated or managed through the legal representative;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">e) Other data provided directly<\/span><b>:<\/b><span style=\"font-weight: 400;\"> any other information communicated by legal representatives in the context of the relationship with OGIS.<\/span><\/li>\n<\/ol>\n\n<p><b>5.17.<\/b><span style=\"font-weight: 400;\"> Personal data of legal representatives of partners and collaborators<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">OGIS processes, for the purpose of initiating, conducting and managing contractual or collaboration relationships, personal data belonging to legal representatives and\/or contact persons designated by partners, collaborators or suppliers, without being limited to them:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a) Identification data: surname, first name, function\/position within the entity;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">b) Contact details<\/span><b>:<\/b><span style=\"font-weight: 400;\"> telephone number, professional email address and\/or other data necessary for communication;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">c) Data regarding the contractual or collaboration relationship: information necessary for concluding and performing contracts or agreements, including handwritten and\/or electronic signature, professional correspondence, operational instructions and other data relevant to the conduct of the relationship;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">d) Associated financial data, where applicable: information regarding payments made or to be made within the contractual relationship, to the extent that such information is communicated through the contact persons;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">e) Other data provided directly: any other information communicated by representatives of partners, collaborators or suppliers in the context of the relationship with OGIS.<\/span><\/li>\n<\/ol>\n\n<p><b>5.18.<\/b><span style=\"font-weight: 400;\"> Source of personal data:<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">OGIS collects personal data from the following sources, depending on the method of processing:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a) Directly from data subjects \u2014 through enrolment forms, educational contracts, agreements, correspondence, email, telephone, online platforms or direct interaction with OGIS;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">b) From parents or legal representatives \u2014 in the case of pupils, data are provided mainly by parents or legal representatives during the admissions and enrolment process and throughout the educational relationship;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">c) From official documents \u2014 such as birth certificates, identity documents, school documents, medical documents or court decisions made available to OGIS;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">d) From interaction with the systems and platforms used \u2014 including educational platforms, internal information systems or the OGIS website, for example authentication data, online activity and technical data such as IP address;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">e) From institutional partners or educational organisations \u2014 such as international bodies, for example educational programmes, to the extent that this is necessary for the provision of educational services;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">f) From third parties on the basis of contractual or legal relationships \u2014 such as suppliers, partners, collaborators or public authorities, under the conditions of the law;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">g) Through the use of the website and similar technologies \u2014 including cookies and other tracking technologies, in accordance with the applicable cookie policy available on the website <\/span><a href=\"http:\/\/www.olgagudynn.ro\"><span style=\"font-weight: 400;\">olgagudynn.ro<\/span><\/a><\/li>\n<\/ol>\n\n<p><span style=\"font-weight: 400;\">The use of cookies and similar technologies on the OGIS website and online platforms is detailed in the <\/span><b>Cookie Policy.<\/b><span style=\"font-weight: 400;\"> <\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Cookies strictly necessary for the operation of the website are used without consent, on the basis of OGIS\u2019s legitimate interest in ensuring the functionality and security of IT systems, while analytical or marketing cookies are used only on the basis of the visitor\u2019s freely given consent, obtained through the consent banner.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Data subjects may change their cookie options at any time through their browser settings or through the consent management interface available on the OGIS website.<\/span><\/p>\n\n<h3> <\/h3>\n\n<h3><b>VI. LEGAL BASIS FOR PROCESSING OPERATIONS REGARDING PERSONAL DATA:<\/b><\/h3>\n\n<p><span style=\"font-weight: 400;\">6.1. OGIS processes personal data on the basis of one of the following legal grounds, expressly provided by the GDPR \u2014 Article 6:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a) Consent of the data subject \u2014 where the data subject has given consent to the processing of their personal data for one or more specific purposes \u2014 Article 6(1)(a) of Regulation GDPR 2016\/679;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">b) Performance of a contract and pre-contractual steps<\/span> <span style=\"font-weight: 400;\">\u2014 where processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, for example the admissions process \u2014 Article 6(1)(b) of Regulation GDPR 2016\/679;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">c) Compliance with a legal obligation \u2014 where processing is necessary for compliance with legal obligations to which OGIS, as data controller, is subject \u2014 Article 6(1)(c) of Regulation GDPR 2016\/679;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">d) Protection of vital interests \u2014 where processing is necessary in order to protect the vital interests of the data subject or of another natural person, for example in medical emergencies \u2014 Article 6(1)(d) of Regulation GDPR 2016\/679;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">e) Performance of a task carried out in the public interest \u2014 where processing is necessary for the performance of tasks serving the public interest or arising from legal responsibilities specific to the field of education \u2014 Article 6(1)(e) of Regulation GDPR 2016\/679;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">f) Legitimate interest of the controller<\/span><b> &#8211; <\/b><span style=\"font-weight: 400;\">where processing is necessary for the purposes of the legitimate interests pursued by OGIS, provided that these interests are not overridden by the fundamental rights and freedoms of the data subject, especially where the data subject is a child \u2014 Article 6(1)(f) of Regulation GDPR 2016\/679;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">g) Substantial public interest in conjunction with national legislation applicable to educational units \u2014 Article 9(2)(a) and (g) of Regulation GDPR 2016\/679 \u2014 in the case of health data.<\/span><\/li>\n<\/ol>\n\n<p><b>6.2. Procedure for withdrawing consent:<\/b><\/p>\n\n<p><span style=\"font-weight: 400;\">Data subjects have the right to withdraw, at any time, the consent given for the processing of personal data for the purposes for which it was granted, without affecting the lawfulness of processing carried out before the withdrawal.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Withdrawal of consent may be carried out through the following means:<\/span><\/p>\n\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">sending a written request to the OGIS email address indicated in this policy;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">using the unsubscribe option available in the electronic communications received \u2014 in the case of newsletters;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">submitting a written request at the OGIS headquarters.<\/span><\/li>\n<\/ul>\n\n<p><span style=\"font-weight: 400;\">OGIS will process the request to withdraw consent as soon as possible, but no later than 10 working days from receipt.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">After the request has been processed, the data subject will receive confirmation of the withdrawal of consent.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Withdrawal of consent does not affect processing carried out for other purposes, on the basis of other legal grounds, for example performance of a contract or compliance with legal obligations.<\/span><\/p>\n\n<p><b>VII. TRANSFERS:<\/b><\/p>\n\n<p><b>7.1.<\/b><span style=\"font-weight: 400;\"> Considering its status as an educational institution with an international profile, certified to deliver Cambridge and International Baccalaureate (IB) programmes, OGIS collaborates with educational partners, specialised providers and competent authorities in Romania and abroad.<\/span><\/p>\n\n<p><b>7.2.<\/b><span style=\"font-weight: 400;\"> The personal data held by OGIS have been provided directly by parents or have resulted from the interaction of parents and pupils with OGIS institutions.<\/span><\/p>\n\n<p><b>7.3.<\/b><span style=\"font-weight: 400;\"> In this context, certain personal data may be communicated to strictly determined third parties, exclusively to the extent necessary for achieving educational, administrative or organisational purposes and only on the basis of an applicable legal ground, while respecting the principles of minimisation, proportionality and confidentiality.<\/span><\/p>\n\n<p><b>7.4.<\/b><span style=\"font-weight: 400;\"> OGIS confirms that the personal data obtained are stored securely or destroyed, and in this regard we inform data subjects that data processing agreements exist with the software provider(s), through which they have in turn assured us that they comply with the GDPR.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">OGIS may disclose the data of data subjects, in compliance with applicable law, to business partners or other third parties, such as its own processors.<\/span><\/p>\n\n<p><b>7.5.<\/b><span style=\"font-weight: 400;\"> We constantly make reasonable efforts to ensure that these third parties have implemented appropriate protection and security measures. We have contractual clauses with these third parties so that the data of data subjects are protected.<\/span><\/p>\n\n<p><b>7.6.<\/b><span style=\"font-weight: 400;\"> Data may be transmitted, where applicable, to the following categories of recipients:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a)<\/span> <span style=\"font-weight: 400;\">international educational bodies, such as Cambridge Assessment International Education and the International Baccalaureate Organization (IB), for the purpose of registering pupils in international academic programmes, managing examinations, validating results and issuing internationally recognised certificates. Transfers are carried out in accordance with the provisions of Regulation (EU) 2016\/679, on the basis of appropriate safeguards, such as standard contractual clauses or other applicable legal mechanisms, and with additional protection measures;<\/span><\/li>\n<\/ol>\n\n<p><span style=\"font-weight: 400;\">In relation to international educational bodies, Cambridge Assessment International Education and the International Baccalaureate Organization, OGIS acts mainly as an independent data controller, while these organisations generally act as independent controllers for their own processing activities.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">In certain educational programmes or projects, Cambridge Assessment International Education and\/or the International Baccalaureate Organization may act as joint controllers, in which case the respective responsibilities are established in accordance with Article 26 GDPR and communicated to data subjects, where applicable.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Detailed information regarding the processing of data by Cambridge Assessment International Education and the International Baccalaureate Organization may be consulted in the privacy policies published by these bodies, which apply in addition to this Policy.<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">b)<\/span> <span style=\"font-weight: 400;\">IT service providers and educational platforms for the administration of the digital infrastructure, platforms and information systems used in the educational process. These providers act, where applicable, as data processors of the controller, on the basis of contracts concluded in accordance with Article 28 GDPR, which include strict obligations regarding data security and confidentiality;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">c)<\/span> <span style=\"font-weight: 400;\">travel agencies and transport providers in the case of organising trips, camps or educational exchanges, exclusively for the data necessary for making bookings, ensuring transport and managing the related logistics;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">d)<\/span> <span style=\"font-weight: 400;\">external consultants, including tax, legal and accounting consultants and lawyers, strictly to the extent that access to data is necessary for providing specific services, defending our rights in court or fulfilling our legal obligations, such persons being bound by strict confidentiality obligations;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">e)<\/span> <span style=\"font-weight: 400;\">photo-video service providers during school events, competitions, educational projects or public events organised by OGIS, for documenting and reflecting the institution\u2019s activities, under the conditions of the consent expressed and on the basis of contractual confidentiality obligations;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">f)<\/span> <span style=\"font-weight: 400;\">banking institutions and payment service providers, for the purpose of processing payments, collecting fees and managing financial operations related to the contractual relationship, exclusively for the data necessary for carrying out the transactions;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">g)<\/span> <span style=\"font-weight: 400;\">public authorities and institutions where there is a legal obligation or an official request made pursuant to the powers provided by law, for example educational authorities, tax authorities and courts, within the limits established by the applicable legal framework.<\/span><\/li>\n<\/ol>\n\n<p><span style=\"font-weight: 400;\">7.7. Transfers of personal data to international educational partners are carried out in strict compliance with the requirements set out in Articles 44-49 of Regulation GDPR 2016\/679. Thus, transfers to Cambridge Assessment International Education (United Kingdom \u2014 third country post-Brexit) are based on the European Commission\u2019s adequacy decision regarding the United Kingdom or on the standard contractual clauses adopted by Decision (EU) 2021\/914, as applicable, while transfers to the International Baccalaureate Organization (Switzerland \u2014 third country with an adequacy decision) are carried out on the basis of appropriate safeguards. In addition, before any transfer to a third country, OGIS carries out a Transfer Impact Assessment (TIA), analysing whether the legal framework of the recipient country ensures a level of protection essentially equivalent to that in the European Union, including from the perspective of public authorities\u2019 access to the transferred data, in accordance with EDPB Recommendations 01\/2020.<\/span><\/p>\n\n<p><b>VIII. AUDIO-VIDEO SURVEILLANCE OF EXAMINATIONS:<\/b><\/p>\n\n<p><b>8.1.<\/b><span style=\"font-weight: 400;\"> In accordance with the provisions of Law no. 198\/2023 on pre-university education, as well as with the specific regulations of the normative acts applicable to the organisation of national and international examinations, including Cambridge Assessment International Education and the International Baccalaureate Organization, OGIS may use audio-video surveillance systems during certain assessments, written tests or official examinations.<\/span><\/p>\n\n<p><b>8.2.<\/b><span style=\"font-weight: 400;\"> Audio-video surveillance has the following purposes:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a)<\/span> <span style=\"font-weight: 400;\">ensuring the integrity and fairness of the examination process;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">b)<\/span> <span style=\"font-weight: 400;\">preventing and deterring fraud;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">c)<\/span> <span style=\"font-weight: 400;\">eliminating suspicions regarding the favouring or disadvantaging of candidates;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">d)<\/span> <span style=\"font-weight: 400;\">protecting the security of participants and staff involved;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">e)<\/span> <span style=\"font-weight: 400;\">ensuring procedural traceability in cases of appeals or checks.<\/span><\/li>\n<\/ol>\n\n<p><b>8.3.<\/b> <span style=\"font-weight: 400;\">The processing of data resulting from audio-video surveillance is carried out on the basis of:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a)<\/span> <span style=\"font-weight: 400;\">Article 6(1)(c) GDPR \u2014 legal obligation provided by educational legislation;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">b)<\/span> <span style=\"font-weight: 400;\">Article 6(1)(f) GDPR \u2014 legitimate interest regarding fraud prevention and protection of the integrity of examinations.<\/span><\/li>\n<\/ol>\n\n<p><b>8.4.<\/b> <span style=\"font-weight: 400;\">Surveillance systems are configured so that:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a)<\/span> <span style=\"font-weight: 400;\">they cover exclusively the space necessary for conducting the examination;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">b)<\/span> <span style=\"font-weight: 400;\">they do not aim to intrude into the private life of data subjects;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">c)<\/span> <span style=\"font-weight: 400;\">they do not aim to collect special categories of data.<\/span><\/li>\n<\/ol>\n\n<p><b>8.5.<\/b> <span style=\"font-weight: 400;\">Access to recordings is strictly limited to authorised persons, such as management, the examination committee and designated responsible persons, and the storage period is limited to the period necessary to fulfil the purpose for which they were collected or according to applicable legal obligations.<\/span><\/p>\n\n<p><b>8.6.<\/b> <span style=\"font-weight: 400;\">Data resulting from examination surveillance are not used for commercial purposes and are not made public.<\/span><\/p>\n\n<ol start=\"9\">\n<li><b> SAFETY OF EDUCATIONAL PREMISES AND ACCESS MONITORING:<\/b><\/li>\n<\/ol>\n\n<p><b>9.1.<\/b> <span style=\"font-weight: 400;\">For the protection of pupils, staff and the institution\u2019s assets, OGIS implements appropriate security measures within its premises. In this respect, school premises are monitored through video surveillance systems, and access to the premises is managed through appropriate control measures. Consequently, when present on OGIS premises, whether as a pupil, parent or legal representative of a pupil, personal data may be processed, including images resulting from surveillance systems.<\/span><\/p>\n\n<p><b>9.2.<\/b> <span style=\"font-weight: 400;\">The processing of these data is carried out on the basis of the controller\u2019s legitimate interest, pursuant to Article 6(1)(f) of Regulation (EU) 2016\/679 (GDPR), with the purpose of ensuring a safe educational environment, preventing incidents and protecting the school community.<\/span><\/p>\n\n<p><b>9.3.<\/b> <span style=\"font-weight: 400;\">Recorded images are stored for a maximum period of 21 days from the date of capture, after which they are automatically deleted, except where their retention is necessary for resolving incidents or fulfilling a legal obligation.<\/span><\/p>\n\n<p><b>9.4.<\/b> <span style=\"font-weight: 400;\">Monitoring systems are configured in a proportionate manner, covering exclusively the areas necessary for ensuring security, without affecting the private life of data subjects.<\/span><\/p>\n\n<ol start=\"10\">\n<li><b> PERSONAL DATA STORAGE PERIOD<\/b><\/li>\n<\/ol>\n\n<p><b>10.1.<\/b><span style=\"font-weight: 400;\"> OGIS retains personal data exclusively for the period necessary to fulfil the purposes for which they were collected, as well as in accordance with the legal obligations applicable to educational units, as follows:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a)<\/span> <span style=\"font-weight: 400;\">academic data, such as school registers, academic records, assessment results, diplomas and documents relating to the educational pathway, are retained in accordance with the educational legislation in force, some of them being subject to indefinite archiving;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">b)<\/span> <span style=\"font-weight: 400;\">contractual and administrative data are stored throughout the contractual relationship and subsequently for a period of 5 years after its termination, taking into account statutory limitation periods and tax and accounting obligations;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">c)<\/span> <span style=\"font-weight: 400;\">images used for promotional purposes, such as photographs and video materials taken during school events, are retained for a maximum period of 5 years from the date they were taken or until consent is withdrawn, if this occurs before the expiry of that period. Upon expiry of this period, the materials will be deleted or anonymised;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">d)<\/span> <span style=\"font-weight: 400;\">data resulting from video surveillance are stored for a maximum period of 21 days from the date of recording, after which they are automatically deleted, except where their retention is necessary for investigating incidents, resolving complaints or fulfilling a legal obligation.<\/span><\/li>\n<\/ol>\n\n<p><b>10.2.<\/b> <span style=\"font-weight: 400;\">OGIS periodically reviews data retention periods to ensure that data are not kept longer than necessary and that the principles of minimisation and storage limitation provided by Regulation (EU) 2016\/679 are respected.<\/span><\/p>\n\n<ol start=\"11\">\n<li><b> METHODS FOR EXERCISING RIGHTS. ADDITIONAL INFORMATION<\/b><\/li>\n<\/ol>\n\n<p><b>11.1.<\/b> <span style=\"font-weight: 400;\">OGIS informs each data subject that:<\/span><\/p>\n\n<ol>\n<li><span style=\"font-weight: 400;\">a)<\/span> <span style=\"font-weight: 400;\">if they wish to exercise their rights, they may do so by submitting a written request at the OGIS headquarters in Bucharest, 8 Ancu\u021ba B\u0103neasa Street, Sector 2, marked \u201cFor the attention of the DPO\u201d, or at the email address: dpo@olgagudynn.ro;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">b)<\/span> <span style=\"font-weight: 400;\">the rights listed above are not absolute and may be subject to exceptions; therefore, each request received will be analysed individually, and the data subjects will be informed of the solution adopted;<\/span><\/li>\n<li><span style=\"font-weight: 400;\">c)<\/span> <span style=\"font-weight: 400;\">OGIS will respond to your request within a maximum of 30 days. However, this period may be extended depending on the complexity of the request, the large number of requests received or the inability to identify the applicant within a useful timeframe;<\/span><\/li>\n<\/ol>\n\n<p><span style=\"font-weight: 400;\">OGIS does not carry out automated profiling and does not make decisions based solely on automated processing of personal data, including through the digital educational platforms it uses. All decisions concerning pupils, parents or employees are made by authorised OGIS staff, with human involvement, in accordance with Article 22 of Regulation (EU) 2016\/679. Data generated through the use of digital platforms are processed exclusively for technical, educational and administrative purposes, without being subject to automated decision-making processes.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">In the event of a security breach involving personal data, OGIS will notify the National Supervisory Authority for Personal Data Processing within a maximum of 72 hours from becoming aware of it, in accordance with Article 33 of Regulation GDPR 2016\/679. The notification will include, to the extent that the information is available, the nature of the breach, the categories and approximate number of affected data subjects, the likely consequences, as well as the measures taken or proposed to remedy the situation. Where the breach is likely to result in a high risk to the rights and freedoms of data subjects, OGIS will also inform the affected persons directly, without undue delay, pursuant to Article 34 of Regulation GDPR 2016\/679, in order to allow them to take the necessary protective measures.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">OGIS has appointed a Data Protection Officer (DPO), pursuant to Article 37 of Regulation (EU) 2016\/679, considering the nature of its processing activities, which include data relating to minors, medical data and data processed by systematic means. The DPO is the main point of contact for data subjects in all matters related to the processing of personal data and may be contacted at dpo@olgagudynn.ro or directly at the OGIS headquarters in Bucharest, 8 Ancu\u021ba B\u0103neasa Street, Sector 2.<\/span><\/p>\n\n<ol start=\"12\">\n<li><b> TABLE OF PROCESSING ACTIVITIES:<\/b><\/li>\n<\/ol>\n\n<h1 class=\"wp-block-heading\"> <\/h1>\n\n<p><span style=\"font-weight: 400;\">The table below correlates the purposes of processing with the categories of data, data subjects, legal bases and retention periods, in accordance with Articles 13-14 of Regulation (EU) 2016\/679.<\/span><\/p>\n\n<h1 class=\"wp-block-heading\"> <\/h1>\n\n<table>\n<thead>\n<tr>\n<th>\n<p><b>Purpose of processing<\/b><\/p>\n<\/th>\n<th>\n<p><b>Categories of data processed<\/b><\/p>\n<\/th>\n<th>\n<p><b>Data subjects<\/b><\/p>\n<\/th>\n<th>\n<p><b>Legal basis (Article 6 GDPR)<\/b><\/p>\n<\/th>\n<th>\n<p><b>Retention period<\/b><\/p>\n<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td colspan=\"5\">\n<p><b>I. PUPILS AND PARENTS \/ LEGAL REPRESENTATIVES<\/b><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Managing the application and admissions process<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Identification data of pupils and parents, school documents, data regarding parental authority<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Pupils, current\/prospective, parents\/legal representatives<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(b) \u2014 contract<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(e) \u2014 public interest<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the duration of the admissions process; files of admitted pupils \u2014 for the duration of schooling + 5 years<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Providing educational services<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Identification data, academic data, relevant medical data, contact details, signature<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Pupils, parents\/legal representatives<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(b) \u2014 contract<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(c) \u2014 legal obligation<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(e) \u2014 public interest<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the duration of the Educational Contract; academic documents \u2014 indefinitely, in accordance with the law<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Organising internal and international assessments (Cambridge, IB)<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Identification data, academic data, assessment results<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Pupils<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(b) \u2014 contract<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(c) \u2014 legal obligation<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(e) \u2014 public interest<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">According to Cambridge\/IB requirements + national legal obligations<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Managing digital educational platforms<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Authentication data, platform activity, IT usage data<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Pupils, parents, employees<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(b) \u2014 contract<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(f) \u2014 legitimate interest<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the duration of the contractual relationship; technical logs \u2014 maximum 12 months<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Providing auxiliary services, counselling, library, extracurricular activities<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Identification data, preferences, behavioural data, medical data, where applicable<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Pupils, parents\/legal representatives<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(b) \u2014 contract<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(a) \u2014 consent, special data<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the duration of the contractual relationship or until consent is withdrawn<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Providing medical care and psychological support services<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Medical data, health history, allergies, vaccinations, psychological data<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Pupils<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(d) \u2014 vital interests<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 9(2)(c) \u2014 protection of vital interests<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 9(2)(g) \u2014 substantial public interest<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the duration of schooling + 5 years or according to applicable health regulations<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Institutional communication with parents<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Contact details, telephone, email, data regarding the pupil<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Parents\/legal representatives<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(b) \u2014 contract<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(c) \u2014 legal obligation<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the duration of the Educational Contract<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Organising educational events and extracurricular activities<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Identification data, photographs\/videos, contact details, medical data, emergencies\/trips<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Pupils, parents\/legal representatives<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(b) \u2014 contract<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(a) \u2014 consent, photo\/video<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Promotional photo\/video \u2014 maximum 5 years or until consent is withdrawn<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td colspan=\"5\">\n<p><b>II. EMPLOYEES AND CANDIDATES FOR EMPLOYMENT<\/b><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Recruitment and staff selection<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">CV, cover letter, identification data, professional references, criminal record, certificates<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Candidates for employment<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(b) \u2014 pre-contractual steps<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(c) \u2014 legal obligation<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Selected candidates \u2014 for the duration of the employment relationship; rejected candidates \u2014 maximum 6 months, or with consent<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Performance of the individual employment contract and management of the employment relationship<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Identification data, personal identification number, financial\/salary data, performance, IT data, CCTV image<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Employees<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(b) \u2014 contract<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(c) \u2014 legal obligation<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(f) \u2014 legitimate interest<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the duration of the contract + 5 years; tax\/accounting documents \u2014 10 years<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Fulfilment of legal obligations, occupational health and safety, tax, reporting<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Identification data, personal identification number, medical data, occupational medicine, financial data<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Employees<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(c) \u2014 legal obligation<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 9(2)(b) \u2014 obligations in the field of employment<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">According to specific legal terms, occupational health and safety files \u2014 5 years; payroll records \u2014 50 years<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td colspan=\"5\">\n<p><b>III. SECURITY, WEBSITE AND MARKETING<\/b><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Video surveillance of educational premises (CCTV)<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Video image, recordings, data regarding access to the premises<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Pupils, parents, employees, visitors<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(f) \u2014 legitimate interest, security<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Maximum 21 days, except for incidents under investigation<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Audio-video surveillance of examinations<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Image and sound recorded in the examination room<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Pupils\/candidates, invigilators<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(c) \u2014 legal obligation<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(f) \u2014 legitimate interest, examination integrity<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the period necessary to resolve appeals or according to Cambridge\/IB regulations<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Administration of the website and IT systems<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">IP address, cookies, browsing data, device\/browser type, online identifiers<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Website visitors, platform users<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(f) \u2014 legitimate interest, IT security<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(a) \u2014 consent, non-essential cookies<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Essential cookies \u2014 session; analytical cookies \u2014 maximum 13 months; technical logs \u2014 maximum 12 months<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Marketing and institutional promotion activities<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Contact details, photographs\/videos from school activities, data regarding preferences<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Pupils, parents, potential clients, website visitors<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(a) \u2014 consent<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Until consent is withdrawn; photo\/video materials \u2014 maximum 5 years<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td colspan=\"5\">\n<p><b>IV. PARTNERS, COLLABORATORS AND FINANCIAL OBLIGATIONS<\/b><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Managing relationships with partners, collaborators and suppliers<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Identification and contact data of representatives, contractual data, signature<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Legal representatives of partners\/suppliers<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(b) \u2014 contract<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(f) \u2014 legitimate interest<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the duration of the contractual relationship + 5 years<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Managing financial obligations, invoicing, payments, debt recovery<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Identification data, IBAN, payment history, outstanding debts, tax data<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Parents\/payers, representatives of private entities<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(b) \u2014 contract<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(c) \u2014 legal obligation, tax\/accounting<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">10 years according to accounting and tax legislation<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Fulfilling legal requirements and reporting to authorities<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Identification data, academic data, financial data, any data legally requested<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">All categories of data subjects<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(c) \u2014 legal obligation<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(e) \u2014 public interest<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">According to the specific legal terms for each reporting obligation<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><b>Resolving disputes and defending rights in court<\/b><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Any data relevant to the disputed matter<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">All categories of data subjects involved<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Article 6(1)(f) \u2014 legitimate interest<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Article 6(1)(c) \u2014 legal obligation<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the duration of the dispute + 5 years from final resolution<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n<p><span style=\"font-weight: 400;\">Relevant electronic correspondence, emails and other official communications exchanged with parents, pupils, candidates, partners or authorities is generally retained for the period necessary to resolve the requests or matters discussed and subsequently for a maximum period of 5 years, taking into account the applicable limitation periods and OGIS\u2019s legitimate interest in defending its rights and interests.<\/span><\/p>\n\n<p><span style=\"font-weight: 400;\">Data provided through visit scheduling forms, where they do not lead to the conclusion of an Educational Contract, are retained for a maximum period of 12 months from the last interaction, after which they are deleted or anonymised, except where there is a legal basis for retaining them for a longer period.<\/span><\/p>\n\n<p><b>SUPERVISORY AUTHORITY AND POLICY UPDATES:<\/b><\/p>\n\n<p><b>We inform you that, in Romania, the authority<\/b><span style=\"font-weight: 400;\"> competent in the field of data protection is the National Supervisory Authority for Personal Data Processing (\u201cA.N.S.P.D.C.P.\u201d). If you consider that your rights have been infringed, you may lodge a complaint through the official website <\/span><a href=\"http:\/\/www.dataprotection.ro\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">www.dataprotection.ro<\/span><\/a><\/p>\n\n<p><span style=\"font-weight: 400;\">This Privacy Policy has been adopted by decision of the management of OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L. and enters into force on the date of its publication on the website www.olgagudynn.ro. OGIS reserves the right to revise, update or amend this Privacy Policy whenever necessary, including as a result of legislative changes, decisions of supervisory authorities or changes in processing activities. The updated version will be published on the OGIS website, indicating the revision date and version number. In the event of essential changes affecting the rights of data subjects, OGIS will ensure that they are informed through appropriate means, in accordance with the principle of transparency provided by Article 5(1)(a) of Regulation (EU) 2016\/679.<\/span><\/p>\n\n<p><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>PRIVACY POLICY within OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L. with regard to EU Regulation 2016\/679 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC &nbsp; Updated on 06.05.2026 OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L. (hereinafter referred to as \u201cOGIS\u201d) complies with Regulation [&#8230;]\n","protected":false},"author":8,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-18834","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/olgagudynn.ro\/en\/wp-json\/wp\/v2\/pages\/18834","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/olgagudynn.ro\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/olgagudynn.ro\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/olgagudynn.ro\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/olgagudynn.ro\/en\/wp-json\/wp\/v2\/comments?post=18834"}],"version-history":[{"count":6,"href":"https:\/\/olgagudynn.ro\/en\/wp-json\/wp\/v2\/pages\/18834\/revisions"}],"predecessor-version":[{"id":37562,"href":"https:\/\/olgagudynn.ro\/en\/wp-json\/wp\/v2\/pages\/18834\/revisions\/37562"}],"wp:attachment":[{"href":"https:\/\/olgagudynn.ro\/en\/wp-json\/wp\/v2\/media?parent=18834"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}