BSS Privacy & Cookie Policy

British School of Sofia Privacy and Cookie Policy

Last Updated: 12/12/2020

Introduction 

This privacy and cookie policy (“Policy”) describes how British School of Sofia (“Company”, “we”, and “our”) collects and uses personal data when using this website www.bssofia.bg (the “Site”). Please read the following information carefully to understand our views and practices regarding your personal data and how we will treat it. It complies with the relevant national data protection regulations. We are committed to keeping personal information accurate, up-to-date, safe, secure and will not keep personal information longer than necessary. This notice applies to all personal data collected for and on behalf of the school.

Who we are: For the purpose of applicable data protection legislation, the data controller of your personal data is British School of Sofia, 21, Georgi Raychev Str., Sofia, Bulgaria

Purposes of Processing

What is personal data?

We collect information about you in a range of forms, including personal data. As used in this Policy, “personal data” is as defined in the European Data Protection Directive 95/46/EC until 25 May 2018, and from 25 May 2018 onwards, as defined in the General Data Protection Regulation 2016/679 (“GDPR”). This includes any information which, either alone or in combination with other information we hold about you, identifies you as an individual, including, for example, your name, postal address, email address and telephone number.

Why do we need your personal data?

We will only process your personal data in accordance with applicable data protection and privacy laws. We need certain personal data in order to proceed with the application process for both school and summer camp.

Collecting Your Personal Data

We collect information about you in the following ways:

Information You Give Us. This includes:

  • the personal data you provide when you fill in the application forms, including name (s) of a child whose application you are filling, date of birth, nationality, previous school, detailed information about the parents including names, address/es, job positions, phone number, address and email addresses;
  • the personal data you provide when you correspond with us by phone, email or otherwise. 

Consent

Where consent for the use and disclosure of personal information is required, the school will seek consent from the appropriate person. In the case of a student’s personal information, the school will seek the consent from the student and/ or parent depending on the circumstances and the student’s mental ability and maturity to understand the consequences of the proposed use and disclosure.

Information Automatically Collected. We automatically log information about you and your computer or mobile device when you access our Site. For example, when visiting our Site, we log your computer or mobile device operating system name and version, manufacturer and model, browser type, browser language, screen resolution, the website you visited before browsing to our Site, pages you viewed, how long you spent on a page, access times and information about your use of and actions on our Site. We collect this information about you using cookies. Please refer to the sections on Cookies below.

Cookies

What are cookies?

We may collect information using “cookies”. Cookies are small data files stored on the hard drive of your computer or mobile device by a website. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer or mobile device until you delete them) to provide you with a more personal and interactive experience on our Site.

We use two broad categories of cookies: (1) first party cookies, served directly by us to your computer or mobile device, which are used only by us to recognise your computer or mobile device when it revisits our Site; and (2) third party cookies, which are served by service providers on our Site, and can be used by such service providers to recognise your computer or mobile device when it visits other websites.

Cookies we use

Our Site uses the following types of cookies for the purposes set out below:

Essential Cookies:
hese cookies are essential to provide you with services available through our Site and to enable you to use some of its features. Without these cookies, the services that you have asked for cannot be provided, and we only use these cookies to provide you with those services.

Analytics and Performance Cookies:
These cookies are used to collect information about traffic to our Site and how users use our Site. The information gathered does not identify any individual visitor. The information is aggregated and anonymous. It includes the number of visitors to our Site, the websites that referred them to our Site, the pages they visited on our Site, whether they have visited our Site before, and other similar information. We use this information to help operate our Site more efficiently, to gather broad demographic information and to monitor the level of activity on our Site.

We use Google Analytics for this purpose. Google Analytics uses its own cookies. It is only used to improve how our Site works. You can find out more information about Google Analytics cookies here:  https://developers.google.com/analytics/resources/concepts/gaConceptsCookies

You can find out more about how Google protects your data here: www.google.com/analytics/learn/privacy.html.

You can prevent the use of Google Analytics relating to your use of our Site by downloading and installing the browser plugin available via this link: http://tools.google.com/dlpage/gaoptout?hl=en-GB

Disabling cookies

You can typically remove or reject cookies via your browser settings. In order to do this, follow the instructions provided by your browser.  Many browsers are set to accept cookies until you change your settings. 

Further information about cookies, including how to see what cookies have been set on your computer or mobile device and how to manage and delete them, visit www.allaboutcookies.org .

If you do not accept our cookies, you may experience some inconvenience in your use of our Site. For example, we may not be able to recognise your computer or mobile device and you may need to log in every time you visit our Site. 

Log Files

Like most standard website servers, we use website statistic packages such as Google Analytics to analyse trends in how our website is accessed and utilized. Information monitored includes internet protocol (IP) addresses, geographic location of visitors (country, city), browser type, internet service provider (ISP), referring/exit pages, platform type, date/time stamp, time spent on pages, and keywords used to find our site via search engines. This information is anonymous and cannot be directly linked to individual users. We may use it to identify high-use or low-use areas of the site, pinpoint problem areas of the site, analyse broad demographic trends in our visitors, and make decisions about how to make it easier for people to find and navigate our website.

Using Your Personal Data

We may use your personal data as follows:

  • to operate, maintain, and improve our Site;
  • as we believe necessary or appropriate (a) to comply with applicable laws; (b) to comply with lawful requests and legal process, including to respond to requests from public and government authorities; (c) to enforce our Policy; and (d) to protect our rights, privacy, safety or property, and/or that of you or others;
  • No personal information collected and retained by BSS is provided to any third party without the consent of a user;

Anonymous Data

When we use the term “anonymous data”, we are referring to data and information that does not permit you to be identified or identifiable, either alone or when combined with any other information available to a third party. 

We may create anonymous data from the personal data we receive about you and other individuals whose personal data we collect. Anonymous data might include analytics information and information collected by us using cookies.  We make personal data into anonymous data by excluding information (such as your name) that makes the data personally identifiable to you.  We use this anonymous data to analyse usage patterns in order to make improvements to our Site.

Third Party Sites

Our Site may contain links to third party websites and features. This Policy does not cover the privacy practices of such third parties. These third parties have their own privacy policies and we do not accept any responsibility or liability for their websites, features or policies.  Please read their privacy policies before you submit any data to them.

Links

This website may contain links to other sites. Please be aware that we are not responsible for the privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every Web site that collects personally identifiable information. This privacy statement applies solely to information collected by this website.

Security

This website takes every precaution to protect our users' personal information. Whenever users submit personal information via online forms, registration, that information is encrypted via the highest level of information security available. Servers that store personally identifiable information are in a secure environment.

Retention

We will only retain your personal data for 2 years unless a longer retention period is required or permitted by law (for example for regulatory purposes).

Our Policy on Children

Our Site is not directed to children under 13. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us using the details in the Contact Information section below. We will delete such information from our files as soon as reasonably practicable.

Your Rights

  • Opt-out. You may contact us anytime to opt-out of: (i) any new processing of your personal data that we may carry out beyond the original purpose. Please note that your use of some of the Site may be ineffective upon opt-out.
  • You may access the information we hold about you at any time by contacting us directly.
  • You can also contact us to update or correct any inaccuracies in your personal data.
  • Erase and forget. In certain situations, for example when the information we hold about you is no longer relevant or is incorrect, you can request that we erase your data.

If you wish to exercise any of these rights, please contact us using the details in the Contact Information section. In your request, please make clear: (i) what personal data is concerned; and (ii) which of the above rights you would like to enforce.  For your protection, we may only implement requests with respect to the personal data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and in any event, within one month of your request. Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting such change or deletion.

Complaints

We are committed to resolve any complaints about our collection or use of your personal data. If you would like to make a complaint regarding this Policy or our practices in relation to your personal data, please contact us at: office@bssofia.bg. We will reply to your complaint as soon as we can. We hope to resolve any complaint brought to our attention, however if you feel that your complaint has not been adequately resolved, you reserve the right to contact your local data protection supervisory authority, which for Bulgaria is the Commission for Personal Data Protection.

Changes in the privacy policy

We retain the right to make changes in our privacy policy.

If you have any questions regarding the processing of your personal data, please contact us at office@bssofia.bg

The collected data are used only for the above mentioned purposes. The information is not stored outside EU or EEA.

Contact Information

We welcome your comments or questions about this Policy. You may contact us in writing at office@bssofia.bg or +359 886 510 510.

Contact with the CPDP:

Address: Sofia 1592, 2 Prof. Tsvetan Lazarov blvd.
E-mail:  kzld@cpdp.bg
Website: www.cpdp.bg