Privacy Policy

Personal data policy for Mariager Høj- & Efterskole

Last updated 23.03.2020.

This policy describes what personal data we collect about visitors to the school website, prospective and current students and their parents, and other external collaborators. It also describes how we handle the information, with whom it is shared and when it is deleted.

The policy must comply with the disclosure requirements for the processing of personal data set out in the EU General Data Protection Regulation (GDPR) 2016/679 of 27 April 2016, which entered into force on 25 May 2018, and the Personal Data Act.

1. The policy applies to the following data controller organisation:

Mariager Høj- & Efterskole
Gl. Hobrovej 10, 9550 Mariager

Tel. no. 96682700

Mail: mail@mariager-skolerne.dk

Secure mail: sikkermail@mariager-skolerne.dk

Website: www.mariager-efterskole.dk / www.mariager-hojskole.dk CVR. No. 57901314

If you have any questions about this Privacy Policy, please contact:

Martin Boesenbæk Managing Director Tel. no. 96682711

Mail: mab@mariager-skolerne.dk

2. Processing basis for personal data at Mariager Høj- & Efterskole

Depending on whether you are just visiting our website, considering applying to become a student, or have been admitted as a student, we process different information about you and possibly your parents.

The school's legal basis for processing the data is the Act on Folk High Schools, cf. Act No. 1605 of 26 December 2013 on Folk High Schools, and the Act on After-Schools, cf. Statutory Order 94 of 08/02 2018 and the related laws, such as the Act on Public Schools, the Social Services Act, etc.

The processing of personal data is carried out on the basis of Article 6 (general data), Article 9 (sensitive data) and Article 87 (identification number) of the Regulation.

3. Personal data that we collect from you and process about you:

3.1. Newsletters

We send out newsletters 5-6 times a year. If you sign up for our newsletter, we store your email address and name. We will not use your email for any other purpose and will not pass it on to anyone else.

3.2. Waiting list/registration for open house at the school

If you sign up for the waiting list for the coming school year, we process the following information about you: name, address, phone number, email, current school, interest, line and anything else you write to us.

We delete all data on applicants who are not admitted at the end of the school year in question. We keep the details of applicants on the waiting list for the current school year in order to be able to offer a place if other applicants drop out. If you do not wish to be on the waiting list for the current school year, please inform the office.

3.3. Upcoming/Current student

When a student applies for admission to the school, we collect the following information: name, address, phone number, email, citizenship, social security number, gender, grade, name of current school, preferences for subjects. For the GAF short course, we do not collect all the above information.

When a student applies for admission to the school, we collect the following information: name, address, phone number, e-mail, citizenship, social security number, gender, preferences for courses, payment information, level of education. For short courses, we may not collect all of the above information.

We also ask if there is any specific health information we need to know about. This could be dietary allergies, medical conditions or other conditions that need special consideration. The collection of this information is done with reference to Article 9(a) GDPR. This means that you must consent to us processing the data. In some cases, we also ask about church affiliation, in order to put together teams and groups in a good way. The collection of this information is also done with reference to GDPR Article 9(a).

We also need the CPR number for reporting to the Ministry of Education and the Ministry of Culture in connection with grants and student support, and Statistics Denmark in connection with statutory education statistics.

Once you are admitted as a student and attend the school, we also collect the following information about you during your stay at the school: grades, sick leave, other absences, UNI login, and information about general trivia etc. during student-teacher interviews.

We take photos and sometimes video of public events and happenings at the school. We use these images to showcase the school's everyday life and educational offerings. We may also use images for marketing purposes. This means on printed brochures, on the school's website, and on the school's social media profile. Upon admission, we ask new students for consent to publish images where the student is identifiable.

3.4. Parents and possible cohabitant

When a student applies for admission to a secondary school, we collect the following general information about custodians and any cohabitant: Name, social security number, e-mail, telephone number, citizenship, country of origin, address, number of other children and their names. In some cases, we also collect evidence of refugee status, connection to Denmark and/or income.

In addition, we collect CPR no. and income information in the year two years prior to the start of the course for the purpose of calculating state student aid, cf. student aid decree no. 429 of 10/05/2011. See also point 4 below.

Finally, we process payment data for the purpose of administering the payment for the after-school stay.

3.5. Visitors to the website

We use cookies on the website to manage logins and collect web statistics. A cookie is a text file sent from our server to your browser and stored on your computer's hard drive or mobile device. Cookies allow you to use the website more efficiently and easily. Cookies can recognise your computer on return visits and they cannot contain viruses. We do not process information about user behaviour in a way that can be linked to individuals and no personal information is stored in our cookies.

3.6 How long are cookies stored?

We use different Cookies for different purposes, the full overview you can see here

3.7 How to delete cookies

See instructions here: http://minecookies.org/cookiehandtering

3.8 How to avoid cookies

If you do not want to receive cookies, you can block them. See instructions here: http://minecookies.org/cookiehandtering.

4. Personal data about you that we collect from someone other than you:

According to GDPR Article 14, we must disclose what information we collect about our students and parents from others. We only collect information from others once the person has been admitted as a student to the school. We ask for consent to collect the information in accordance with Article 13. We do not collect information from others on high school students.

4.1. Information from previous or current school and PPR:

In order to give the afterschool student the best start and the best well-being and to ensure the best starting point for educational planning at our school, we obtain information from the current and/or previous school and, if applicable, from the PPR. This includes the education plan, grades from AFP9.

If a pupil has currently or previously been recommended for support by the Educational Psychological Counselling Service in his or her home municipality, we will also obtain this assessment. Parental consent is required.

4.2. Parents and possible cohabitant:

Parents of future pupils and any cohabitants must provide their CPR number for the purpose of obtaining income information for the calculation of state pupil support.

The income information is obtained by the SU-styrelsen on behalf of the Styrelsen for Undervisning og Kvalitet and is done by direct pull in SKAT's registers.

The income information is calculated on the basis of the annual statement from the year two years prior to the date of the start of the course.

5. How we process the data:

5.1. Necessary treatment at school

All the information we process about students is necessary for us to run the school and provide the necessary service and care for each individual.

Most general information and the CPR number are part of the school's financial administration. This is information we share with the Ministry of Education and the Ministry of Culture in connection with reporting grants, student support and the preparation of accounts.

Cohabitant's social security number and income information used to calculate state student aid

Only the school's administrative staff and management have access to information on income and finances.

The educational administration includes e.g. enrolment in classes, lines, electives and including the preparation of assignments and evaluations.

Our educational counsellor processes information about students in connection with the preparation of statutory education plans and reporting on optagelse.dk

The management has access to all information about the students. The management of the school has access to all information about the students of the school. Only the relevant staff, e.g. subject teacher, contact teacher and mentor, have access to information about the pupils for whom they are responsible.

For students who take the 9th or 10th grade school leaving exam with us, we are obliged to keep the exam certificates indefinitely.

5.2. Sharing with others

As mentioned in points 4.2. and 5.1., information relating to the administration of the school is shared with the relevant authorities to the extent that we are legally obliged to do so.

We use UNI-Login for the school intranet (ViGGO) as well as for logging in to a number of platforms for digital educational resources. Our suppliers here include e.g. Ordbogen.com, Gyldendal, Matematikbanken, Clio.

Personal data linked to UNI-Login are: Name, grade, age, school name, e-mail.

We have signed data processing agreements with all providers using Uni-login. They have committed to take appropriate measures to protect the personal data of our students. In some cases, data is transferred to servers in third countries.

All interested parties can contact the school administration for review of data processing agreements We also use UVM's nationaltrivlsel.dk as the school's student satisfaction survey.

For study trips, we share personal data about you with the tour operator. This information includes your name, address, gender, age, passport number, insurance details, nationality, travel dates and payment details.

5.3. Deletion

When the pupil leaves the school, we will delete all data that is not necessary to keep for documentation purposes in connection with accounting, in accordance with the Accounting Statutory Order, within one year.

Data for accounting purposes are deleted six years after the end of the student's stay.

In the event that a student becomes a student on the same or another course at the same school at a later date, the data that has not been deleted is retained and the deletion dates are moved to one and six years respectively after the end of the current course.

Information on persons on the waiting list for the current school year is deleted at the latest at the end of the school year. You can see when we delete cookies in section 3.6.

Certificates are kept indefinitely, see point 5.1.

A limited and logical amount of data is stored for archival reasons. For example, if you ask us to stop contacting you, we need to store some information to be able to respond to your request.

6. The rights of data subjects

6.1. Insights

As a data subject, you have the right to access the personal data that we process about you. By writing to us (at the above address - see under point 1), you can request access to the Personal Data that we have recorded about you, including the purposes for which the data has been collected. We will comply with your access request as soon as possible.

The school will charge a fee of 100 DKK for this work, up to a maximum of 200 DKK.

During your stay, you can also log in to the school intranet: https://mariager.viggo.dk and access your profile under my details. This will also show the master data that we have registered about you.

6.2. Rectification and erasure

You have the right to request the rectification, additional processing, erasure or blocking of the personal data we process about you. We will comply with your request as soon as possible, to the extent necessary. If we are unable to comply with your request, we will contact you.

6.3. Limitation of processing

In exceptional circumstances, you have the right to restrict the processing of your personal data. Please contact us if you wish to restrict the processing of your personal data.

6.4. Data portability

You have the right to receive your personal data (only information about yourself that you have provided to us) in a structured, commonly used and machine-readable format (data portability).

6.5. Right of objection

You have the right to ask us not to process your personal data in cases where the processing is based on Article 6(1)(e) (task carried out in the public interest or in the exercise of official authority) or Article 6(1)(f) (legitimate interest). You can exercise your right to object at any time by contacting us.

6.6. Withdrawal of consent

If the Processing of personal data is based on consent, you have the right to withdraw your consent at any time. Your withdrawal does not affect the lawfulness of the Processing that was carried out before you withdrew your consent. Please contact us if you wish to withdraw your consent. Please be aware that in some cases this may mean that you cannot continue as a student at the school, for example if we are not allowed to process information about your health or academic support needs, etc.

6.7. Possible consequences of not providing personal data

If you are required to provide information about yourself to us, it will be disclosed where we collect the information. If you do not want to provide the personal data we ask for, this may have the consequence that state student support cannot be calculated or that we cannot admit you as a student at the school, see above under point 6.6.

7. Security

The school's processing of personal data is subject to our IT and Security Policy. Our IT and Security Policy also contains rules for conducting risk assessment and impact analysis of existing, as well as new or modified processing activities. We have implemented internal policies and procedures to maintain appropriate security from the time we collect personal data until deletion, and we only entrust our processing of personal data to data processors who maintain an equivalent appropriate level of security.

8. Complaints to the supervisory authority

If you are dissatisfied with our processing of your personal data, you can complain to the Danish Data Protection Authority: Datatilsynet, Borgergade 28, 5. sal, 1300 Copenhagen K., telephone 3319 3200, e-mail: dt@datatilsynet.dk

9. Updating of this Policy

Mariager Høj- & Efterskole is committed to complying with the fundamental principles of personal data protection and data privacy. We therefore regularly review this policy to keep it updated and in line with applicable principles and legislation. This policy is subject to change without notice. Material changes to the policy will be published on our website along with an updated version of the policy.

The date of the last update of the Personal Data Policy is indicated at the top of the document.

You have the option to choose that this website does not collect or analyse the actions you take here. If you do, you protect your privacy, but you also prevent the website owner from learning from your actions and thus being able to improve the user experience for you and other users.

Thank you for signing up!