Privacy Policy
Privacy Policy
At Canadian International School of Hong Kong Ltd., we value the rights and freedoms of all people. This includes respecting your privacy and protecting your personal data. This privacy policy describes how we collect and use (or “process”) your personal data. It also tells you how to contact us as well as outlining what rights you have regarding your personal data.
Who we are?
What is the personal data?
The term ‘personal data’ refers to any information which identifies you or can be used to identify a data subject when used in conjunction with other information.
The term ‘data subject’ describes the person about whom the personal data is about.
What personal data do we collect about you?
In order to help us serve you more efficiently, we may ask for your name, email address, mailing address or phone number. Your IP address (which is a unique identifying number assigned to every device connected to the internet) and browser user agent string (which identifies the browser, its version number, and its host operating system) will also be collected.
When is your personal data collected?
We collect data from you when you fill out a comment form, sign up for our newspaper, or browse our website. If you upload images to the website, please avoid uploading images with embedded location data (EXIF GPS).
If you leave a comment on our site, you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year or will be erased when they are no longer required for the purposes of collecting your personal data, whichever occurs earlier.
How is your personal data used?
Your personal data may be used to help us serve you better and to provide you with the services you’ve requested. Your personal data would not, without the consent of you, be used for any purpose other than the purpose for which it was collected or a directly related purpose.
How do we retain and store your personal data?
Your personal data is contained within secured networks and is only viewable by a limited number of persons who have special access to these networks. These people are required to keep your personal data confidential.
We retain personal data only for legitimate purposes (See section “How if your personal data used?”, relying on one or more of the lawful bases as set out below and only for so long as necessary for those purposes, or as required by law.
We take appropriate technical and organisational steps to ensure the security of personal data about individuals, including policies around the use of technology and devices, and access to school systems.
We may also be required to share your personal data with other organisations for legal or statutory purposes, or where we have your consent to do so. Moreover, some of our systems are managed or operated by third parties (e.g. hosted databases, School post or cloud storage providers).
Sharing data with these parties is always subject to contractual assurances that personal data will be kept securely and only in accordance with our specific directions. We do not transfer personal data you have provided unless we are satisfied that the personal data will be afforded an equivalent level of protection and obtained your consent.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
What is our legal basis for processing your personal data?
We may process your personal data for the above purposes based one or more of the following legal bases:
- we have an individual’s consent to do so (or their parent’s, if appropriate). You can withdraw your consent at any time by emailing [email protected]
- it is necessary to protect an individual’s vital interests (in certain limited circumstances, for example where a student has a life-threatening accident or illness while at school and we have to process that student’s personal data in order to ensure the student receives prompt and appropriate medical attention)
- it is necessary for the establishment, exercise or defence of legal claims
- it is necessary for reasons of substantial public interest, including safeguarding purposes
- it is necessary for archiving, research or statistical purposes.
What are our responsibilities for looking after your personal data?
- We pledge to meet, and where possible exceed, internationally recognized standards of personal privacy protection, in compliance with the Personal Data (Privacy) Ordinance of the Hong Kong Special Administrative Region (‘the Ordinance’). In the case of any inconsistency between this Private Policy and the Ordinance, the Ordinance shall prevail. You can also review the Ordinance by following this link to the government’s website.
What rights do you have over your personal data?
Under data protection laws, you have the right to:
- obtain access to, and copies of, the personal data that we hold about you (subject to legal exceptions);
- correct the personal data we hold about you if it is incorrect;
- require us to erase your personal data in certain circumstances e.g. if it is used for a purpose other than the one originally stated, or if it was acquired by fraudulent or other unlawful means;
- require us to restrict our data processing activities in certain circumstances;
- receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of your transmitting that personal data to another data controller;
- object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights (including a right to object to receiving communications, and to object to our profiling you for the purposes of keeping in touch);
- where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal.
For users that register on our website (if any), we also store the personal data they provide in their user profile. All users can see, edit, or delete their personal data at any time (except they cannot change their username). Website administrators can also see and edit that data.
The Personal Data (Privacy) Ordinance requires a data access request to be made in accordance with the form which is available here. We may charge a reasonable fee for the processing of any data access request.
Please note that these rights are not absolute, and we may be entitled or required to refuse requests where exceptions or exemptions apply.
We will respond to any such written requests as soon as is reasonably practicable and in any event within statutory time limits.
Contact us
If you have any questions or concerns about how we are using your personal data or if you would like to exercise any of your information rights, please contact us at [email protected].
Controller Details
The Data Protection Officer
Canadian International School of Hong Kong Ltd.
36 Nam Long Shan Road
Aberdeen
Hong Kong