DATA PROTECTION AND PROCESSING

Why do we process data?

We need to be able to collect data on our customers and users in order to facilitate their use of the Flex Montessori system. IP addresses are monitored for the safety of our software and network. Data will not be used for any purpose other than stated and will not be sold or given to third parties.

What data do we collect / process?

Subscribers and users with administrative privileges:

• Name
• Name of school
• Email address
• IP address
• Billing information

The above data is stored on Flex Montessori and is accessible to Flex Montessori employees.

Users without administrative privileges (students):

Flex Montessori Subscribers may enter the personal data of employees and students on their school’s Flex Montessori account. This information may include but is not limited to:

• Name
• Address
• Date of birth
• Gender

Flex subscribers may also create their own personal data fields in order to collect the data they require. Flex subscribers use the Software to keep educational activity records for pupils in their schools. These are not official records and Flex Montessori does not take responsibility for the accuracy of student records entered on the Software. Maintaining the confidentiality of student records is the responsibility of the Subscriber. Flex Montessori agrees not to view or edit such records without a written request from the Subscriber.

Flex Montessori does not accept responsibility for the protection or processing of data relating to minors. Subscribers must adhere to their own countries’ regulations on the processing and storage of educational data for minors. Identifying personal data for Flex ‘student users’ is not required by Flex Montessori.  The Subscriber is obliged to obtain the consent of parents/guardians before entering any personal or sensitive data on to the Flex system.

While administrators of the Flex Montessori platform have the ability to view and edit personal data, all Flex employees are bound by confidentiality and data is not shared with third parties.

Any personal data stored on Flex Montessori and servers is processed lawfully and transparently, with high regard to data security. Personal data is only used by Flex Montessori for the purpose intended. Flex Montessori agrees to only store data on servers that comply with GDPR regulations.

• you must have specific purposesfor processing the data and you must indicate those purposes to individuals when collecting their personal data. You can’t simply collect personal data for undefined purposes (‘purpose limitation’).
• you must collect and process only the personal data that is necessary to fulfill that purpose(‘data minimisation’).
• you must ensure the personal data is accurate and up-to-date, having regard to the purposes for which it’s processed, and correct it if not (‘accuracy’).
• you can’t further use the personal data for other purposes that aren’tcompatible with the original purpose of collection.
• you must ensure that personal data is stored for no longer than necessaryfor the purposes for which it was collected (‘storage limitation’).
• you must install appropriate technical and organisational safeguardsthat ensure the security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technology (‘integrity and confidentiality’).
• Breach of data notification process https://www.dataprotection.ie/docs/forms/k/1729.htm

1*‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.