Privacy Policy of Beyond International School

At Beyond International School, we are committed to protecting the privacy of our students, parents/guardians, employees, and all individuals who interact with us, including users of our website.

This Privacy Policy explains how we collect and process personal data from individuals accessing our website, whether in physical form (e.g., printed documents and forms) or digital form (e.g., via our website, information systems, and email). We also outline the rights of individuals whose personal data we process.

We aim to make this policy as clear and transparent as possible. Should you have any questions or require clarification, please contact us via email at info@beyondschool.pt.

Legal Framework

We strictly comply with the applicable legislation on personal data protection, including the General Data Protection Regulation (EU Regulation 2016/679 – “GDPR”) and Law No. 58/2019 of 8 August, which implements the GDPR in the Portuguese legal system.

Furthermore, as our activities often involve the processing of children’s personal data, we adhere to the fundamental principle of the child’s best interest, as established in the United Nations Convention on the Rights of the Child and the Charter of Fundamental Rights of the European Union.

Data Controller

The entity responsible for processing personal data is Beyond International School, headquartered at [https://beyondschool.pt/].

As an institution committed to providing high-quality education, we process personal data relating to students, parents/guardians, employees, and others connected to our community.

Collection and Processing of Data

We collect and process personal data in the following circumstances:

When parents/guardians express interest in our services;
During pre-enrolment and admission procedures;
At the time of initial student enrolment;
During annual enrolment renewals;
At the start of each academic year.

Where applicable, we request explicit consent from parents/guardians and clearly communicate the purposes for which the data will be used.

Types of Data Processed

The categories of personal data processed include:

Student Identification Data: Name, gender, date of birth, nationality, tax identification number, and similar details.
Student Contact Information: Address, telephone number, and email.
Additional Student Data: Educational history, health information, dietary restrictions, photographs, religion (where applicable), and special educational needs.
Parent/Guardian Information: Name, profession, tax identification number, address, and contact details.
Website Usage Data: Information on how users interact with our website.

Purposes and Legal Basis

We process personal data based on the following legal grounds:

Consent provided by the data subject or legal guardian;
Performance of a contract or pre-contractual steps;
Compliance with legal obligations;
Legitimate interests pursued by Beyond International School;
Protection of vital interests of the data subject or another individual.

Under the terms of the General Data Protection Regulation, the use of personal data must be justified under at least one of the following legal grounds for its processing:

When consent has been given for the processing of personal data;
When processing is required to enter into an agreement or execute it;
When processing is necessary to comply with the legal obligations that the controller is subject to;
When processing is necessary to achieve a legitimate interest and that interest prevails over the rights of data subjects, in terms of data protection;
When treatment is necessary to allow declaring, exercising or defending a right in legal proceedings by any of the parties involved or a third party.

Beyond International School shall treat personal data on the following legal grounds and for the following purposes, which are essentially related to the educational activity carried out by the School:

Goal	Data Categories	Legal Basis
Pre-registration and selection of student applicants.	Student identification and contact details; Identification and contact details of guardians.	Execution of an agreement or pre-contractual steps; Legitimate interest of Beyond International School.
Student enrolment.	Student identification and contact details; Other student data; Identification and contact details of guardians.	Execution of an agreement.
Provision of teaching services/Management and development of educational activities.	Student identification and contact details; Other student data; Identification and contact details of guardians.	Performance of an agreement; Legitimate interest of Beyond International School.
Communication/publicity of the School’s activities.	Identification and contact details of guardians.	Execution of an agreement.
Safety and security of students, namely, provision of primary health care and medication when necessary.	Student identification and contact details; Other student data.	Performance of an agreement; Consent and/or defence of the student’s vital interests for the processing of health data.
Management of initiatives for internal/external communication.	Student identification data; Other student data (photograph).	Performance of an agreement; Consent for image data.
Sending commercial communications (newsletters).	Identification and contact details of guardians.	Consent; Legitimate interest of Beyond International School.
Compliance with legal obligations.	Student identification and contact details; Other student data; Identification and contact details of guardians.	Compliance with a legal obligation.
Website operation management.	Website user navigation data.	Legitimate interest of Beyond International School
Website quality improvement and user visit optimisation.	Website user navigation data.	Legitimate interest of Beyond International School

Data Sharing with Third Parties

The Beyond International School Privacy Policy is not applicable to third-party websites, so if you visit or have access to another website, you should always read the privacy policy of that website and confirm that you agree with its terms before providing your data.

Beyond International School is not responsible for the privacy policy or for the content made available on such third-party websites.

Rights of Data Subjects

Data subjects have the right to:

Access their personal data – You can request information about the processing of your personal data and request access to them;
Rectify inaccurate or outdated information – You have the right to rectify your personal data if they are incorrect or out of date and/or to complete them if they are incomplete;
Request the deletion of personal data – You can request the deletion of any personal data at any time, unless there are circumstances that prevent immediate deletion of the data (for example, legal reasons or legitimate interests);
Restrict or object to the processing of their data – You have the right to object, at any time, to the processing of your personal data, for reasons related to your particular situation, whenever processing is based on the pursuit of the legitimate interests of the controller or of a third party, unless there are compelling reasons. and legitimate reasons that prevail over your interests, or in the case of legal proceedings.

You may also, by exercising this right, object to the receipt of direct marketing communications at any time, through the option provided by Beyond International School in each marketing email sent;

Request data portability – You have the right to receive personal data concerning you, in a structured, commonly used and machine-readable format, and the right to transmit this data to another organisation. This only applies to data for which processing was based on your consent or entering into an agreement, and if processing is carried out by automated means.
Withdraw consent at any time, where applicable – You can withdraw the consent granted at any time. The withdrawal of consent does not compromise the lawfulness of the treatment carried out based on the previously given consent.

To exercise any of these rights, please contact us at info@beyondschool.pt.

Information Security

Information security and protection of personal data are priorities for Beyond International School. In this sense, we have implemented the necessary technical and organisational measures, including encryption and authentication tools, to help protect and maintain the security, integrity and availability of personal data of students and parents.

The technical, organisational and physical procedures that we have in place guarantee the confidentiality of your personal data, protecting them from accidental or unlawful destruction, loss, change, disclosure or unauthorised access and against other illegal forms of data processing.

Although the transmission of data over the internet cannot guarantee complete security against intrusions, we make our best efforts to implement and maintain physical, digital and organisational security measures aimed at protecting information, in compliance with applicable data protection requirements.

We highlight, among others, the following measures:

Restricted personal access to personal data based on the “Need to Know” criterion and only within the scope of the purposes communicated;
Transfer of data collected in encrypted form, using SSL certificates;
Protection of information technology systems through firewalls, with a view to preventing unauthorised access from outside;
All teachers and other employees of the School sign a confidentiality declaration, which includes clauses of duty of secrecy in the scope of the data to which they have access in the strict fulfilment of their obligations;
Implementation of written procedures within the scope of processes that include the processing of personal data and their periodic reviews, documents that may be consulted at the request of Parents and Guardians;
Permanent monitoring of access to information technology systems with a view to preventing, detecting and preventing misuse of information;
Any entity that we subcontract shall be bound by equivalent security measures, permanently acting under our duly documented instructions.

In this regard, it is critical that the login data of guardians, namely passwords, be kept with utmost secrecy and care, thus preventing misuse.

Cookies

We use cookies to enhance user experience on our website. For more details, please refer to our Cookies Policy.

Changes to the Privacy Policy

This Privacy Policy may be updated periodically. We recommend that you review it regularly. In the event of significant changes, we will notify you directly via email.

Contact

If you have any questions or wish to exercise your data rights, please contact us at:

Email: info@beyondschool.pt