DATA PROTECTION INFORMATION FORM

Dear student, parents or guardians, physician and emergency contact person,

The present Data Protection Information Form is intended to provide you with information regarding the processing of your personal and health data by ASSIST, pursuant to Art. 13 of the EU General Data Protection Regulation, Regulation 679/2016 ("GDPR"). Your consent to the processing of your personal and health data is needed. You will find Consent Form at the bottom of the present Data Protection Information Form.

1) Which personal data is processed by ASSIST, for which purpose and under which legal basis?

Students and parents or guardians: ASSIST needs to process your name, contact data in the Parental Permission for the Day In Boston above so as to be able to perform the contract concluded with ASSIST regarding the participation of the student in the ASSIST program, or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) of the GDPR) and we do not need your consent for such processing.

Your data will be kept for as long as necessary to fulfill the contract. As a rule, it shall be deleted within one year after the student's return from the US, except if you give your consent to the retention and use of your personal data by ASSIST for other specific purposes (such as the sending of informational e-mails) through a separate consent form. Also, data may be kept longer if there are any issues with student's health status that require ASSIST to keep the present  Parental Permission for the Day In Boston for the exercise or defense of legal claims. ASSIST would then have a legitimate interest in keeping the data (Art. 6(1)(f) of the GDPR).

2) Who will process my data? Who is responsible for the processing ("Controller"), how can I contact the Controller, and are there other recipients of my personal data?

ASSIST is responsible for the processing of your personal data ("Controller" in the sense of the GDPR). ASSIST will receive, consult and store the filled-out Parental Permission for the Day In Boston.  Please find below its identity and contact details to exercise your rights:

American Secondary Schools for International Students and Teachers (ASSIST)

P.O. Box 969, Suffield, CT 06078 USA

Tel.: 001-860-668-5706, Fax: 001-860-668-5726

e-mail: privacy@assistscholars.org

3) Is my personal data going to be sent to the US? Are there any risks? Does ASSIST need my consent for that?

Accordingly, all personal information contained herein will be sent to the US. In the US, data protection rules are less stringent than those in the European Union. For this reason, the European institutions are of the opinion, that the US legislation does not grant an adequate level of protection to personal data. However, ASSIST takes data protection very seriously and has taken a number of steps to assure personal data handled by it respects GDPR principles and standards. Technical and organizational measures have been taken to assure confidentiality and security of data, and we respect your rights as described.

4) What are my rights regarding my personal data? 

You have the right to request access to your personal data from ASSIST and to request rectification of incorrect personal data as well as the right to request the deletion of your personal data. You furthermore have the right to restrict the processing of your data, if one of the legal prerequisites of Article 18 of the GDPR applies, and the right to data portability, if one of the legal prerequisites of Article 20 of the GDPR applies. If the processing of your personal data is based on your consent, you can withdraw your consent at any time. The lawfulness of the data processing up to the withdrawal is not affected by your withdrawal. To enforce your legal rights or to withdraw your consent, please use the street address indicated above, or email privacy@assistscholars.org.

If you are of the opinion that the processing of your personal data violates applicable data protection laws, you have the right to file a complaint with the competent supervisory authority. The following link leads to a webpage of the European Commission listing the competent supervisory authorities in each European country: https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-are-data-protection-authorities-dpas_en.