Privacy Policy

Identity of the Data Controller
While you (hereinafter, the “User”) browse the website or use any of the services we offer on this website, your data may be processed by Colegio SEK Paraguay, S.R.L., with Taxpayer Identification Number (RUC) 80013571-7 (hereinafter, the “Data Controller”). Their contact information is as follows:

Address: Calle Mercedes Grau – Parques del Yacht y Golf Club, Lambaré.

Contact email: dpo@edusek.net

Information and Consent
By reading this Privacy Policy, the User is informed about how the School processes and protects the personal data they provide to the School through the forms available on the Website, as well as data related to their browsing activity and any other data they may provide through any other means or medium.

The User should carefully read this Privacy Policy, which has been written in a clear and simple manner to facilitate understanding, and freely and voluntarily decide whether to provide their personal data to the Center.

Purposes of processing personal data and legal bases
Personal data is collected and processed by the Center for the following purposes:

1) To facilitate, expedite, and fulfill the commitments established between the website and the User.

2) To facilitate, expedite, and maintain the relationship established through the forms completed by the User, which may involve:

a) Managing the admissions process, including any necessary procedures with relevant organizations, and the admissions tests.

The User is informed that conversations during the admissions process may be recorded, solely for the purpose of monitoring the relationship and the corresponding admissions and/or enrollment process.

The legal basis for processing the User’s personal data for this purpose is the User’s consent and the performance of a contractual or pre-contractual relationship between the User and the Center.

b) To manage registration for the corresponding event.
The User is informed that the Center reserves the right to record and broadcast live or on-demand, and to take photographs, during events or initiatives organized by or with the participation of the Center, and to use, reproduce, distribute, and publicly communicate these materials in analog or electronic media such as intranets or social networks, among others, for academic purposes or to promote its activities or those of the event’s sponsors. The Center will provide prior notice and obtain the necessary consents and authorizations for the use of the User’s individual image in each context. If the User does not authorize the recording of their image and/or voice, they will be informed of this possibility so that they can take appropriate action.

c) To respond to a request or inquiry.

The legal basis for processing the User’s personal data for this purpose is the legitimate interest in addressing and responding to the inquiry.

3) To monitor the User’s browsing history in accordance with the Cookie Policy.

The legal basis for processing the User’s personal data for this purpose is consent, as well as the Center’s legitimate interest in the case of essential cookies.

4) To manage User requests related to the exercise of personal data protection rights.

The legal basis for processing the User’s personal data for this purpose is the legal obligation to respond to the corresponding request.

5) To evaluate the application submitted by a User for a job or for the provision of services to the Center.

The legal basis for processing the User’s personal data for this purpose is the User’s consent and the performance of a contractual or pre-contractual relationship between the parties.

6) To assess a candidate’s application and suitability for scholarships and funding offered by the Center or other organizations and institutions with which we have collaboration agreements, and, where applicable, to carry out the necessary actions for awarding them.

The legal basis for processing the User’s personal data is the User’s consent.

7) To manage User requests related to the whistleblowing channel.

The legal basis for processing the User’s personal data for this purpose is the legal obligation to address the corresponding request.

8) To send informational communications and advertising about products, services, events

Information about courses, programs, promotions, and relevant news from the Center will be sent via electronic (newsletters) and traditional mailings.

If the User wishes to stop receiving commercial or promotional communications, they can unsubscribe by sending an email to the following address: dpo@edusek.net or through any of the communications received.

Categories of Personal Data

The categories of data processed by the Center to manage the aforementioned processing may include, depending on the form:

• First and last name.

• Nationality.

• National ID/Passport.

• Address, telephone number, and contact information.

• Qualifications or training of legal guardians.

• Previous academic evaluations of the student.

• Email address of the father, mother, and financial guardian.

• Signature of legal guardians and/or parents and photograph of the student.

• Social circumstances.

• Employment details. • Economic, financial, or insurance data.

• Browsing data collected through cookies, such as your browsing history, IP address, or similar information.
• Other similar data.

Please note that the requested data is essential to provide the requested services. Refusal to provide this data will make it impossible to provide the requested services.

The information that the User provides to the Center through the forms must be accurate and truthful. The User guarantees the authenticity of all data provided and will keep the information given to the Center updated so that it corresponds, at all times, to the User’s current situation. In the event of inaccurate, incomplete, or false statements made by the User, the User will be solely responsible for any damages that may be caused to the Center or to third parties as a result.

If the User provides data of third parties, they represent that they have the consent of those parties and undertake to provide them with the information contained in the Privacy Policy, releasing the Center from any liability in this regard. However, the Center may carry out periodic checks to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.

Legal basis for processing personal data
The legal basis for processing personal data is the express and explicit consent given by the User in each case, which may be withdrawn at any time, as well as the specific legal basis applicable to each processing purpose, as described above.

Regarding the management of service contracts, payments, and invoicing, the legal basis for processing your personal data is the necessity of such processing for the performance of the contract.
As for processing personal data for sending information related to the services provided by the Center, the legal basis will be legitimate interest.

Personal Data Retention Periods
Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in any case, for the period necessary for the establishment, exercise, and defense of legal claims, or until the User requests its erasure.

Recipients of Personal Data
The User’s personal data will be shared with the following recipients or categories of recipients:

– To service providers for the proper provision of services or any procedure required by the competent authorities or entities.

– To other entities of the SEK International Institution.

If the Data Controller intends to transfer personal data to a third country or international organization, the User will be informed of the third country or international organization to which the data is intended to be transferred, as well as the existence or absence of an adequacy decision by the Commission.

Personal Data of Minors
Only those over 14 years of age may lawfully consent to the processing of their personal data by the Center. If the data subject is under 14 years of age, parental or guardian consent will be required for processing, and such processing will only be considered lawful to the extent that such consent has been given.

Secrecy and Security of Personal Data
The Center undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, in order to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss, or alteration of personal data transmitted.

s, stored or otherwise processed, or the unauthorized disclosure of or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and ensure, through a legal or contractual obligation, that such confidentiality is respected by its employees, associates, and any person to whom the information is made accessible.

Rights arising from the processing of personal data
The User may exercise the following rights against the Data Controller:

● Right of access: This is the User’s right to obtain confirmation as to whether or not the Center is processing their personal data and, if so, to obtain information about their specific personal data and the processing that the Center has carried out or is carrying out, as well as, among other things, information available on the origin of said data and the recipients of any communications made or planned regarding said data.

● Right to rectification: This is the User’s right to have their personal data corrected if it is inaccurate or, considering the purposes of the processing, incomplete.

● Right to erasure: This is the User’s right, unless otherwise provided by applicable law, to obtain the erasure of their personal data when it is no longer necessary for the purposes for which it was collected or processed; the User has withdrawn their consent to the processing and there is no other legal basis for it; the User objects to the processing and there is no other legitimate reason to continue it; the personal data has been unlawfully processed; the personal data must be erased to comply with a legal obligation; or the personal data has been obtained as a result of a direct offer of information society services to a child under 14 years of age. In addition to deleting the data, the Data Controller, taking into account available technology and the cost of implementation, must take reasonable steps to inform other controllers processing the personal data of the data subject’s request to erase any links to that personal data.

● Right to restriction of processing: This is the User’s right to restrict the processing of their personal data. The User has the right to obtain restriction of processing when they contest the accuracy of their personal data; the processing is unlawful; the Data Controller no longer needs the personal data, but the User needs it to establish, exercise, or defend legal claims; and when the User has objected to the processing.

● Right to data portability: In cases where processing is carried out by automated means, the User has the right to receive their personal data from the Data Controller in a structured, commonly used, and machine-readable format and to transmit it to another controller. Where technically feasible, the Data Controller will transmit the data directly to that other controller.

● Right to object: This is the User’s right to prevent the processing of their personal data or to have such processing ceased by the Center.

● Right not to be subject to a decision based solely on automated processing, including profiling.

● Right to withdraw consent: The User has the right to withdraw their consent to the processing of their personal data at any time. However, please note that this action may prevent the Center from providing the corresponding services.

The User may exercise their rights by sending a written communication to the Data Controller at the following address and/or email, along with a scanned copy of their identity card/passport:

Postal address: Calle Mercedes Grau – Parques del Yacht y Golf Club, Lambaré.

Email: dpo@edusek.net

Links to third-party websites
The website may include hyperlinks or links that allow access to third-party websites other than the Center’s and which are therefore not operated by the Center.

The owners of these websites will have their own data protection policies, and they themselves will be responsible, in each case, for their own files and their own privacy practices.

Complaints to the supervisory authority
If the User believes that there is a problem or infringement of current regulations in the way their personal data is being processed, they will have the right to effective judicial remedy and to file a complaint with a supervisory authority, in particular, in the Member State of their habitual residence, place of work, or place of the alleged infringement.

Acceptance of and changes to this privacy policy
Required

The User acknowledges having read and agreed to the terms and conditions regarding the protection of personal data contained in this Privacy Policy, and consents to the processing of their personal data so that the Data Controller may process it in the manner, for the periods, and for the purposes indicated. Use of the website implies acceptance of the Privacy Policy.

The Center reserves the right to modify its Privacy Policy at its own discretion, or due to legislative, jurisprudential, or doctrinal changes.