The Privacy Policy informs you about which data we collect about you on the School Portal, how we use that data, and how you can exercise your rights regarding the protection of personal data.
The Privacy Policy has been prepared in accordance with the Law on Personal Data Protection (“Official Gazette of the RS”, No. 87/18, hereinafter: the Law).
This Privacy Policy informs you about the purpose of processing, the method of processing, the types of personal data we process, the legal basis for processing, the data retention period, your rights, and the security measures we apply.
DATA CONTROLLER AND DATA PROCESSOR INFORMATION
Our school is responsible for collecting and processing personal data on the School Portal and acts as the data controller in accordance with the Law. The purpose of data processing is to transparently present the results of the school’s work, inform students and parents about the teaching and professional staff, and promote curricular and extracurricular activities relevant to achieving the educational goals of the school.
The data processor is the Ministry of Education, which, in accordance with the Law on the Foundations of the Education System (“Official Gazette of the RS”, No. 88/17, 27/18 – other law, 10/19 and 6/20), supervises the work of the school for the purpose of granting access rights to the administrative section of the School Portal. The Ministry of Education processes data about the designated administrator, namely: unique personal identification number, first name, last name, and email address. The Ministry of Education maintains records of authorized persons who publish content on the School Portal.
The Office for Information Technologies and eGovernment acts as a data processor when performing activities related to data storage, implementation of protection measures, and ensuring the security and safety of data in the State Data Center, in accordance with regulations governing eGovernment and information security.
HOW DO WE COLLECT AND PROCESS YOUR PERSONAL DATA?
Student data, such as name and surname, class, academic performance, and photos from events, are processed exclusively with the consent of the parent and the child. The data is published in the News section and retained for 8 years, after which it is deleted.
Employee data is processed by the school in accordance with the Labor Law, and the Portal publishes the employee’s name and surname, as well as their role (principal, secretary, pedagogue, psychologist, teacher, etc.). Employee photos are published exclusively with their consent. These data are processed while the individual is employed at our school, after which they are deleted.
In order to provide information at your request that is relevant to the operation of our school, we process your email address and any other personal data you have provided through the contact form during the response to your request, after which they are deleted.
WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
For the purpose of informing and fulfilling legally prescribed obligations, your personal data may be disclosed for further processing to:
- a legal entity that maintains the “School Portal” software solution and has a contract with the Office for Information Technologies and eGovernment;
- a legal entity that provides physical security services for the school.
Personal data may also be disclosed upon request of other state and judicial authorities for the purpose of detecting criminal offenses.
DATA STORAGE AND SECURITY OF YOUR PERSONAL DATA
Data security is very important to us. Therefore, we apply appropriate technical, organizational, and personnel measures to eliminate the risks of accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data.
The Office for Information Technologies and eGovernment implements appropriate protection measures using a modern service architecture, taking into account data availability, integrity, and security. International information security standards are applied in the State Data Center to ensure that data is safe and protected.
YOUR RIGHTS
In order to respect your rights, we inform you that you can contact us via email and request access to, updating, or deletion of your personal data processed on the School Portal. You also have the right to object to processing and to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection if you believe your data is being processed unlawfully.
LINKS TO OTHER WEBSITES
The School Portal contains links to other websites. These websites are not controlled by us, and this Privacy Notice does not apply to them. We are not responsible for the processing of personal data carried out by other websites.
CONTACT
If you have any questions regarding our Privacy Policy or wish to exercise any of your rights, you may contact the data protection officer via email at: spvukkaradzic@gmail.com
The Privacy Policy may be amended in accordance with needs and regulations. Any changes will be published on the School Portal.