GDRP Information
AMADEUS International School Vienna is committed to the security of our communities data. Find more information about the General Data Protection Regulations and how they relate to schools here.
General Data Protection Regulations
As of 25 May 2018, the new General Data Protection Regulations (GDPR) came into effect in Europe and for any institutions doing business in Europe. This law brings with it improved transparency, enhanced data security, and increased accountability for the processing of personal data. All schools have the legal obligation to be in compliance with the GDRP by informing parents and stakeholders about how students’ data is being used and who is using it.
Most data processed by schools will fall under a specific legal basis, ‘in public interest’. This means that, as it is in the public interest for schools to operate, specific consent will not be needed in most cases in schools.
GDPR will make sure data is protected and will give individuals more control over their data. This means schools will have greater accountability for the data and must:
- under GDPR, consent must be explicitly given for anything that isn’t within the normal business of the school, especially if it involves a third party managing the data. Parents (or the pupil themselves depending on their age) must express consent for their child’s data to be used outside of the normal business of the school.
- ensure that their third party suppliers who may process any of their data is GDPR compliant and must have legally binding contracts with any company that processes any personal data. These contracts must cover what data is being processed, who it is being processed by, who has access to it and how it is protected.
Please find the AV Data Privacy Statement here.
We welcome the opportunity for prospective students and their families to visit AMADEUS Vienna and learn more about our unique programme and inspiring school environment.