GDPR Policy

Introduction
C.School is committed to protecting the privacy and personal data of our employees, clients, and collaborators in compliance with the General Data Protection Regulation (GDPR). This policy outlines how we collect, use, store, and protect personal data.

Scope
This policy applies to all personal data processed by C.School in connection with our training, facilitation, and research activities.

Principles of Data Protection
We adhere to the following principles when processing personal data:
– Lawfulness, Fairness, and Transparency: Personal data is processed lawfully, fairly, and transparently.
– Purpose Limitation: Data is collected for specific, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
– Data Minimization: Only the data necessary for the purposes stated is collected and processed.
– Accuracy: Personal data is kept accurate and up to date.
– Storage Limitation: Data is retained only for as long as necessary for the stated purposes.
– Integrity and Confidentiality: Data is processed securely to protect against unauthorized access, alteration, or destruction.

Data Collection
We collect personal data through:
– Training and Workshop Enrollments: Information such as name, contact details, and professional background.
– Surveys and Research: Responses may include personal or demographic data, collected with consent.
– Communications: Emails, phone calls, or other correspondence.

Legal Basis for Processing
We process personal data based on:
– Consent: When individuals provide explicit consent for specific purposes.
– Contractual Obligations: Data required to fulfill agreements with clients or collaborators.
– Legal Obligations: Compliance with applicable laws and regulations.
– Legitimate Interests: Processing necessary for the legitimate interests of C.School, balanced against individual rights.

Rights of Data
Subjects Individuals have the following rights regarding their personal data:
– Access: Request access to their personal data.
– Rectification: Correct inaccurate or incomplete data.
– Erasure: Request deletion of data (“right to be forgotten”) under certain conditions.
– Restriction: Request restriction of data processing.
– Portability: Receive their data in a structured, commonly used format.
– Objection: Object to data processing based on legitimate interests.
– Withdraw Consent: Withdraw consent at any time for processing based on consent.

Data Security
We implement appropriate technical and organizational measures to ensure data security, including:
– Access Controls: Restricting access to personal data to authorized personnel only.
– Encryption: Protecting sensitive data during storage and transmission.
– Regular Audits: Periodically reviewing data protection practices and compliance.

Third-Party Sharing
We do not sell or rent personal data. Personal data may be shared with:
– Service Providers: Third parties assisting in delivering services, under strict confidentiality agreements.
– Legal Authorities: When required by law or in response to legal requests.

Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Data no longer needed is securely deleted or anonymized.

Data Breach Response
In the event of a data breach, C.School will:
– Notify Authorities: Inform the relevant supervisory authority within 72 hours, if required.
– Communicate with Affected Individuals: Notify affected individuals if their rights or freedoms are at risk.
– Take Corrective Action: Implement measures to address the breach and prevent recurrence.

Contact Information
For questions or concerns about this policy or data protection practices, please contact us at: Email: contact@c-school.io

Policy Review
This GDPR Policy is reviewed regularly to ensure compliance with GDPR requirements and reflect any changes in our data processing activities.

Acknowledgment
All employees and collaborators are required to familiarize themselves with this policy and adhere to its principles as part of their engagement with C.School.