Privacy Policy Updated in September 2024 Introduction Abdulaziz International School – Al Wadi (AIS- Al Wadi) (collectively referred to as the "School", "we", "us", "our", or "ours") values and takes your privacy rights seriously. We are committed to be transparent about the information we collect about you, why we collect it, how it is used, and with whom it is shared as set forth herein. This Privacy Policy (the “Policy”) applies to the personal data collected when you visit or view this website (the “Website”) and access or use the available services (the “Services”). The recipient and controller of the collected personal data is: Abdulaziz International School – Al-Wadi P.O. Box 68629, Riyadh 11537, Exit 6, Al Wadi, Riyadh, Kingdom of Saudi Arabia The terms "you," "your," and "yours" refer to the user or visitor of the Website. This Policy, together with our Terms & Conditions, sets out the basis on which any personal data we may collect about you, or that you choose to provide to us, and your choices and rights regarding our use of your personal data. It also explains the purpose of processing your data and how we keep it safe. Please read the following sections carefully to understand our views and practices regarding your personal data and how we handle it. We reserve the right to make changes periodically to this Policy at our sole discretion. Changes to the Privacy Policy will be posted on this page. How to Contact Us Questions, comments, and requests regarding this Policy should be addressed via E-mail at privacy@sabis.net or in writing to the following address: Abdulaziz International School – Al-Wadi P.O. Box 68629, Riyadh 11537, Exit 6, Al Wadi, Riyadh, Kingdom of Saudi Arabia Definitions Personal Data: “any data, regardless of its source or form, that may lead to identifying an individual specifically, or that may directly or indirectly make it possible to identify an individual, including name, personal identification number, addresses, contact numbers, license numbers, records, personal assets, bank and credit card numbers, photos and videos of an individual, and any other data of personal nature”. Processing: Any operation performed upon Personal Data, including but not limited to collection, storage, use, erasure, recording, disclosure, transmission, modification, distribution, etc. Data Subject: Any individual whose personal data is being collected, held, or processed, i.e., the individual to whom the Personal Data relates. Information Collected on our Website The type of Personal Data the School collects about prospective students, students and parents and/or guardians ('Parents') before, during, and after the course of a student's enrolment at the School, as well as other individuals/visitors who come into contact with the School include the following: Contact Details (e.g., name, home address, E-mail address, phone number) Content Data (e.g., text input) Identity Verification (e.g., photo, passport number, date of birth) Sensitive/Special Category of Data (e.g., health, religion) Usage Data (e.g., interest in Website’s contents, access time) Online/Technical Identifiers (e.g., device information, IP address) The School collects the Personal Data held about a Data Subject through an "Application Form," "Interest Form," or other forms filled out by Parents, essential to process your application and to contact you. On occasion, the Website’s visitors provide their Personal Data by using the "Contact Us" form. Mandatory details are necessary to contact you and process your enquiry. To improve the way our Website functions for visitors/users, and to monitor, investigate, and report any security breach attempts on our Website, we automatically collect: Information about the browser type and version used The user's IP address The date and time of access This Policy also applies to Personal Data we collect from you via the use of cookies and related technologies to maintain an anonymized user session and provide users with personalized web pages. You can control how you use cookies by adjusting the settings within your browser. For further information, please see our Cookies Policy Children's Privacy We place great importance on protecting the privacy of young children who may use the Website. We do not knowingly solicit or collect Personal Data from individuals who are under the minimum required ages specified herein. You must be of the age of majority in your jurisdiction to use our Services. Individuals under the applicable age may use our Services only through parental or legal guardian supervision and with their involvement. If you are a parent or legal guardian who believes your child has provided Personal Data to us without your consent, you may ask us to delete such information by contacting us at privacy@sabis.net. Purpose of Data Collection Any of the information we collect from you may be used in the following ways: 1. Information You Give to Us Voluntarily The Personal Data submitted via the ‘Interest Form’ about the prospective student and his/her family will be collected and stored for the purpose of evaluating him/her. The School will also use this information to communicate with the family during the admission process. The Personal Data submitted via the ‘Application Form’ will be collected and stored about the student and his/her family to manage the registration/admission process. Sensitive data such as health, medical, and religion information may be collected on the Application Form. However, this sensitive data will not be stored in the Website’s database; instead, it will be securely transferred to the School’s on-premises database. Authorized employees at the School will have access to this data and will use it solely to provide the student with appropriate dietary or medical assistance. The Personal Data submitted via the "Contact Us" form or for our newsletter subscription will be collected and stored in order to contact you and process your inquiry. 2. Information We Collect Automatically About You The Personal Data collected automatically through the use of cookies or in the web server logs is used to ensure that content from our Website is presented in the most effective manner for you. This data is also used to administer our Website, and to perform internal statistical and trend analysis to improve the user experience and performance of our Website. No automated or profiling-based decision-making would be performed. You may request to stop receiving any marketing material by sending an E-mail to privacy@sabis.net or by clicking on the "unsubscribe" button. Data Security We will process (collect, store, and use) your Personal Data in a secure manner. We have implemented administrative, technical, and physical security measures to help prevent accidental or unlawful destruction or loss, alteration, unauthorized disclosure, or access. Despite these measures, no data transmission over the Internet can be entirely secure, and we cannot guarantee or warrant the security of any information you transmit via our Website. We make reasonable efforts to restrict access to Personal Data to authorized employees and agents who need access to such information in order to operate, develop, improve, or deliver our programs, products, and services. We value the security of your Personal Data collected for the above-mentioned purposes, and we confirm that we will apply acceptable security measures and procedures to ensure the confidentiality, integrity, and availability of the Data. Links to Our Social Media Portals We maintain an online presence on social media networks and platforms in order to communicate with users and interested parties and inform them about our services. With that, your Personal Data may be processed beyond the country/geographical region in which you are resident. Depending on the social media provider and/or the online video hosting services (Facebook – X – Instagram – LinkedIn –Vimeo), it may be that other data processing is performed by them. For details, refer to the terms of use and data privacy policies of the respective platforms. We are not responsible for third-party links to other websites. We are not responsible for the content or data processing that may be generated on third-party websites and that are accessible by links or hyperlinks on our Website. We will also not be responsible for the Personal Data that they share on other websites or social media platforms. By using our Website, you agree to the terms of our Privacy Policy. Please read the Policy carefully to understand how we collect, use, and protect your Personal Data. External Links Our Website contains links to external websites within the SABIS® Global Network. Please refer to each of these websites’ privacy policies to know more about the processing of data on these external websites. Use of Google Analytics The Website uses Google Analytics – a web analytics service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. ("Google") – to generate reports on the Website activities, which help us improve our services using active IP anonymization For more information about Google Analytics cookies, access the following link: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage To opt out of Google Analytics (relating to your use of our Website), you can adjust your cookies settings, or you can download and install the Browser Plugin available by visiting: https://tools.google.com/dlpage/gaoptout?hl=en Use of Google Maps We use Google Maps on our Website. Google Maps is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The Google Maps plug-in is included by embedding the service on our Website using what is known as iFrames. When loading these iFrames, under certain circumstances, Google may collect and process information (including personal data). We cannot exclude the possibility that Google may also transmit this information to a server in a different country. We do not collect any data when you use Google Maps through our Website. The purpose of having Google Maps on our Website is to display our address and make further information available to you by providing access routes to the respective locations; therefore, making it possible for you to plan your journey independently. Information on Legal frameworks for data transfers and other relevant data on Google’s data processing within the framework of the use of Google services can be found at: https://policies.google.com/privacy and https://policies.google.com/privacy/frameworks. The legal basis for the Processing of Personal Data described herein is for your legitimate interest in benefiting from the great services which Google Maps offers. Personal Data Erasure and Storage Duration We will endeavor to keep your information accurate and up-to-date and not keep it for longer than is necessary to fulfill the purposes outlined in this Policy unless otherwise required by law The Personal Data you submit under the “Contact Us” form will be stored in our databases for one year only in an anonymized format and will be automatically deleted afterward. Also, the Personal Data we collect from you for our newsletter subscription will be deleted once you unsubscribe. The Personal Data you submit through the “Interest Form” and the “Application Form” will be securely stored in anonymized format within our Website’s databases for a period of three years from the date of submission. We have no impact over the duration for which data held by social network operators are stored for their own purposes. For details, please refer directly to the social network operators’ privacy policies. Personal Data Transfer and Sharing The School is part of the SABIS® Global Network. Therefore, your Personal Data will be transferred to SABIS Educational Systems, Inc., Eden Prairie, Minnesota, USA, which works together with the processor Lumen Technologies, Inc., USA, on the provisioning of IT systems. SABIS Educational Systems Inc. maintains our Website and databases where the Personal Data of Data Subjects covered by this Policy is stored in an anonymized format. The Personal Data collected through the ‘Interest Form’ and the ‘Application Form’ will be securely transferred to the School’s on-premises database. This data transfer is necessary to facilitate the provision of essential services to both students and parents. The Personal Data stored in the Website’s database hosted in SABIS Educational Systems, Inc. is backed up locally in the US Data Center and online using the Barracuda Cloud Backup service. The latter is a cloud backup solution that utilizes Azure and Amazon AWS cloud infrastructure in the US. In addition, authorized employees from SABIS Educational Services S.A.L., Adma, Lebanon, access your Personal Data to operate, develop, improve, deliver, and support the Website and provide academic, administrative, and marketing support services. If you choose to register to receive our newsletter, your E-mail address will be stored in our databases in anonymized format and shared with SABIS Educational Services, Adma, Orange Zone, Lebanon, which provides this service on our behalf. Disclosure to Third Parties Without Prejudice to the Previous Clause We do not share the Personal Data collected on this Website with third parties without first obtaining your consent. However, we may be required or need to disclose your Personal Data in the following circumstances: If we receive a valid request from the police, law enforcement agencies, regulatory bodies, or government authorities in the country of origin or elsewhere. We may share your Personal Data with other schools and companies within the SABIS® Network for academic and technical support purposes. We may share your Personal Data with our service providers in order to provide you with the necessary services. A list of these service providers can be provided upon request and when applicable. We may also share your data with relevant service providers for contract execution and business development. Legal Basis for the Processing of Your Personal Data Our legal basis for processing your Personal Data is dependent on the purpose for processing and may vary as described in this Policy and the service you are using. In general, we process your Personal Data under the following legal bases: Your Consent We process your Personal Data if you have consented to the processing activity. You may revoke your consent at any time by sending an E-mail to privacy@sabis.net . Doing so will bar us from further processing your Personal Data based on your consent, but will not impact the lawfulness of processing based on your consent before it was withdrawn. Legal Obligations We process your Personal Data as needed to comply with laws and regulations. Legitimate Interests We process your Personal Data for our legitimate interests to provide you with the Services, such as connection with managing, developing, testing, securing, and, in limited circumstances, marketing, advertising, and making recommendations regarding our products and services. Any of such processing is conducted subject to appropriate measures to protect your fundamental rights and freedom related to your Personal Data, and in any event, will be subject to the restrictions provided in this Policy. Data Subject Rights In certain circumstances, you have certain rights regarding your Personal Data. A summary of each right and how you can exercise it is set out below. To exercise any of these rights, please contact us by sending an E-mail to privacy@sabis.net Right of access – you have the right to request a copy of the Personal Data we hold about you. Right of rectification – you have the right to ask us to correct inaccurate or incomplete data we hold about you. Right to request deletion – in certain circumstances, you can ask for the data we hold about you to be erased from our records. Right to restriction of processing – under certain conditions, you have the right to ask us to restrict the processing of your Personal Data. Right of portability – you have the right to have the data we hold about you in a structured, commonly used, and machine-readable format. Right to object – you have the right to object to certain types of processing, such as direct marketing. Right to object to automated processing, including profiling – profiling-based activities are not carried out under any circumstances. Right to withdraw your consent for Personal Data Processing – you shall inform us of this through any available means in accordance with Law provisions. Right to lodge a complaint – if you object to our processing of your Personal Data, you have the right to complain to the Data Protection Authority (DPA) in the country where you reside or the alleged infringement of data protection laws has taken place. If you are a resident of the Kingdom of Saudi Arabia and submit a request concerning your rights under the Personal Data Protection Law (PDPL), we will respond within 30 days without delay. This period may be extended according to PDPL provisions, but the extension will not exceed an additional 30 days. Additional Information For any concerns or questions, you may contact us by: Using the “Contact us” page on this Website Emailing us at: info@aisalwadi.sabis.net Writing us at: Abdulaziz International School – Al-Wadi, P.O. Box 68629, Riyadh 11537, Exit 6, Al Wadi, Riyadh, Kingdom of Saudi Arabia Acceptance and Changes to the Policy By visiting our Website and using our Services, you agree to and consent to this Privacy Policy. Any changes we may make to this Policy in the future will be posted on this page.