Data protection policy

The management of Hajra Safdar (British Fleming School), as data controller, is committed to establishing, implementing and maintaining this Data Protection Policy, ensuring its continuous improvement in order to achieve excellence in complying with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and with Spanish personal data protection law.

The policy rests on the principle of proactive accountability: the controller is responsible for complying with the legal framework governing this policy and is able to demonstrate that compliance to the competent supervisory authorities.

Data protection by design: we apply appropriate technical and organisational measures, such as pseudonymisation, to implement data protection principles effectively.

Data protection by default: we ensure that, by default, only the personal data necessary for each specific purpose is processed.

Protection throughout the life cycle: protective measures apply for the whole life of the information, from collection to secure deletion.

Lawfulness, fairness and transparency: data is processed lawfully, fairly and transparently in relation to the data subject.

Purpose limitation: data is collected for specified, explicit and legitimate purposes and is not processed in a manner incompatible with them.

Data minimisation: data is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

Accuracy: we keep data accurate and up to date, and erase or rectify inaccurate data without delay.

Storage limitation: we keep data only for as long as is necessary for the purposes of the processing.

Integrity and confidentiality: we apply the measures needed to secure data against unauthorised or unlawful processing and against accidental loss or destruction.

Information and training: all staff are trained on their data protection obligations.

This policy applies to all school staff, who must know it and adhere to it in carrying out their duties.

It covers all the processing we carry out: students, families, people interested in our courses, staff and suppliers.

Management reviews this policy periodically to ensure continued compliance with applicable provisions and that it remains appropriate to the processing we carry out.

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@britishflemingschool.es, enclosing a copy of your identity document.

Details of how we process your data as a visitor, student or enquirer are set out in our privacy policy.