Privacy Policy
Identity of the person responsible for processing personal data
While you (hereinafter, the “User”) browse the website or use any of the services we offer on said website, your data may be processed by COLEGIO SEK LOSVALLES, CIA. LTDA., with Tax Identification Number 1791740130001 (hereinafter, the “Data Controller”). Its contact information is as follows:
Address: Calle Eloy Alfaro S8-48 and Intersection of Los Rosales, Parish of Cumbayá.
Contact email: dpo@edusek.net
Information and Consent
By reading this Privacy Policy, the User is informed about how the Center processes and protects the personal data provided to the Center through the forms available on the Website, as well as their own browsing data and any other data they may provide through any other means or medium.
The User must carefully read this Privacy Policy, which has been written in a clear and simple manner to facilitate its understanding, and freely and voluntarily decide whether they wish to provide their personal data to the Center.
Purposes for which personal data are processed and legal bases
Personal data is collected and managed by the Center for the following purposes:
1) To facilitate, expedite, and fulfill the commitments established between the website and the User.
2) To facilitate, expedite, and fulfill the maintenance of the relationship established in the forms completed by the User, which may entail:
a) Managing the admissions process, including any necessary procedures with organizations and admissions tests.
The User is informed that conversations during the admissions process may be recorded, solely for the purpose of monitoring the relationship and the corresponding admissions and/or enrollment process.
The legal basis for processing the User’s personal data for this purpose is the User’s consent and the execution of a contractual or pre-contractual relationship between the User and the Center.
b) Manage registration for the corresponding event.
The User is informed that the Center reserves the right to record and broadcast live or on-demand, and to take photographs, during events or initiatives organized by or with the participation of the Center, and to use, reproduce, distribute, and publicly communicate these photographs in analog or electronic media such as the intranet or social networks, among others, for academic purposes or to disseminate its activities or those of the sponsors of the event. To this end, the Center will notify the User in advance and obtain the necessary consents and authorizations for the use of the User’s individual image in each context. If the User does not authorize the capture of their image and/or voice, the User will be informed of this possibility so that appropriate measures can be taken.
The legal basis for processing the User’s personal data for this purpose is the User’s consent and the execution of a contractual or pre-contractual relationship between the User and the Center.
c) Respond to a request or query.
The legal basis for processing the User’s personal data for this purpose is the legitimate interest in responding to the query and answering it.
3) Monitor the User’s browsing history in accordance with the provisions of the Cookie Policy.
The legal basis for processing the User’s personal data for this purpose is consent, as well as the Center’s legitimate interest in essential cookies.
4) Manage User requests regarding the exercise of personal data protection rights.
The legal basis for processing the User’s personal data for this purpose is the legal obligation to respond to the corresponding request.
5) Evaluate the application submitted by a User in the event of applying for a job or to provide services to the Center.
The legal basis for processing the User’s personal data for this purpose is the User’s consent and the execution of a contractual or pre-contractual relationship between the parties.
6) To assess the candidacy and suitability of a candidate to be a beneficiary of scholarships and financial aid offered by the Center or other organizations and institutions with which we have collaboration agreements, and, where appropriate, to carry out the necessary actions for their award.
The legal basis for processing the User’s personal data is the User’s consent.
7) To manage the User’s requests regarding the reporting channel.
The legal basis for processing the User’s personal data for this purpose is the legal obligation to respond to the corresponding request.
8) To send informative communications and advertising about products, services, and services.
Services, events, courses, programs, promotions, and relevant news from the Center, by sending commercial communications via electronic means (newsletters) and traditional means.
If the User wishes to stop receiving commercial or promotional communications, they may unsubscribe from the service by sending an email to the following address: dpo@edusek.net or through any of the communications received.
Categories of Personal Data
The categories of data processed by the Center to manage the aforementioned processing may be, depending on the corresponding form:
• Name and surname.
• Nationality.
• ID/Passport.
• Address, telephone number, and contact information.
• Qualifications or training of legal guardians.
• Previous academic evaluations of the student.
• Email address of the parent and financial guardian.
• Signature of the legal guardians and/or parents and photograph of the student.
• Social circumstances data.
• Employment details.
• Economic, financial, or insurance data.
• Browsing data collected through cookies, such as your browsing history, IP address, or similar information.
• Other similar data.
We inform you that the required data is essential to provide the requested services. Failure to provide it will make it impossible to provide them.
The information provided by the User to the Center through the forms must be accurate and truthful. The User guarantees the authenticity of all data provided and will keep the information provided to the Center updated so that it corresponds, at all times, to the User’s actual situation. In the event of inaccurate, incomplete, or false statements made by the User, the User will be solely responsible for any damages caused to the Center or third parties.
If the User provides data of third parties, they declare that they have their consent and undertake to provide them with the information contained in the Privacy Policy, exempting the Center from any liability in this regard. However, the Center may carry out periodic verifications to verify this fact, adopting the appropriate due diligence measures in accordance with data protection regulations.
Legal Basis for the Processing of Personal Data
The legal basis for the processing of personal data is the express and explicit consent granted by the User in each case, which may be withdrawn at any time, as well as the legal basis that specifically applies to each processing purpose, as described above.
Regarding the management of service contracts, payment, and invoicing, the legitimate basis for the processing of your personal data is the necessity of such processing for the execution of the contract.
Regarding the processing of personal data to send information related to the services provided by the Center, the legitimate basis will be legitimate interest.
Personal Data Retention Periods
Personal data will only be retained for the minimum period necessary for the purposes of its processing and, in any case, for the period necessary for the establishment, exercise, and defense of legal claims or until the User requests its deletion.
Recipients of Personal Data
The User’s personal data will be shared with the following recipients or categories of recipients:
– To suppliers for the proper provision of services or any procedures required by the competent authorities or entities.
– To other entities of the SEK International Institution.
If the Data Controller intends to transfer personal data to a third country or international organization, the User will be informed of the third country or international organization to which the data is intended to be transferred, as well as of the existence or absence of an adequacy decision by the Commission.
Personal Data of Minors
Only those over 15 years of age may give their consent for the lawful processing of their personal data by the Center. If the child is under 15 years of age, the consent of the parent or guardian will be required for processing, and processing will only be considered lawful to the extent authorized by the parent or guardian.
Secrecy and security of personal data
The Center undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, to guarantee the security of personal data and prevent accidental or unlawful destruction, loss, or alteration of personal data.
is transmitted, stored, or otherwise processed, or unauthorized communication or access to such data.
Personal data will be treated as confidential by the Data Controller, who undertakes to inform and guarantee, through a legal or contractual obligation, that such confidentiality is respected by its employees, associates, and any person to whom it makes the information accessible.
Rights arising from the processing of personal data
The User may exercise the following rights against the Data Controller:
● Right of access: This is the User’s right to obtain confirmation of whether or not the Center is processing their personal data and, if so, to obtain information about their specific personal data and the processing that the Center has carried out or is carrying out, as well as, among other things, information available about the origin of said data and the recipients of any communications made or planned.
● Right to rectification and updating: This is the User’s right to have their personal data modified if it is found to be inaccurate or, taking into account the purposes of the processing, incomplete.
● Right to erasure: This is the User’s right, unless otherwise provided by current legislation, to obtain the deletion of their personal data when it is no longer necessary for the purposes for which it was collected or processed; the User has withdrawn their consent to the processing and there is no other legal basis for it; the User objects to the processing and there is no other legitimate reason to continue; the personal data has been processed unlawfully; the personal data must be erased in compliance with a legal obligation; or the personal data has been obtained as a result of a direct offer of information society services to a child under 15 years of age. In addition to deleting the data, the Data Controller, taking into account the available technology and the cost of its implementation, must take reasonable steps to inform the data controllers processing the personal data of the data subject’s request to delete any links to that personal data.
● Right to restriction of processing: This is the User’s right to restrict the processing of their personal data. The User has the right to obtain restriction of processing when they contest the accuracy of their personal data; the processing is unlawful; the Data Controller no longer needs the personal data, but the User needs it to make a claim; and when the User has objected to the processing.
● Right to data portability: Where processing is carried out by automated means, the User has the right to receive their personal data from the Data Controller in a structured, commonly used, and machine-readable format and to transmit it to another controller. Whenever technically feasible, the Data Controller will transmit the data directly to that other controller.
● Right to object: This is the User’s right to prevent the processing of their personal data or to have their processing stopped by the Center.
● Right not to be subject to a decision based solely on automated processing, including profiling.
● Right to withdraw consent: The User has the right to withdraw their consent to the processing of personal data at any time, although they are informed that such action may make it impossible for the Center to provide the corresponding services.
● Right to suspension of processing: The User shall have the right to obtain from the Data Controller the suspension of data processing when any of the following conditions are met: 1) when the User contests the accuracy of the personal data while the data controller verifies its accuracy; 2) when the processing is unlawful and the User opposes the deletion of the personal data and requests instead a restriction on its use; 3) when the Controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the formulation, exercise, or defense of legal claims; and,
4) when the User has objected to the processing, while it is being verified whether the Controller’s legitimate grounds prevail over those of the data subject.
The User may exercise their rights by writing to the Data Controller at the following address and/or email address, along with a scanned photocopy of their identity card/passport:
Mailing address: Calle Eloy Alfaro S8-48 and Intersección de los Rosales, Cumbayá Parish.
Email: dpo@edusek.net
Links to Third-Party Websites
The website may include hyperlinks or links that allow access to websites of third parties other than the Center and therefore not operated by the Center.
The owners of these websites will have their own data protection policies, and they are, in each case, responsible for their own files and privacy practices.
Complaints before the Supervisory Authority
If the User considers that there is a problem or a violation of current regulations in the way their personal data is being processed, they will have the right to effective judicial protection and to file a complaint with a supervisory authority, particularly in the state in which they have their habitual residence, place of work, or place of the alleged violation.
Acceptance and Changes to This Privacy Policy
The User must have read and agreed to the terms and conditions regarding the protection of personal data contained in this Privacy Policy, and must accept the processing of their personal data so that the Data Controller can process it in the manner, during the timeframe, and for the purposes indicated. Use of the website implies acceptance of the Privacy Policy.
The Center reserves the right to modify its Privacy Policy, at its sole discretion, or as motivated by legislative, jurisprudential, or doctrinal changes.