At the ISM Education ("ISM EDUCATION") we are firmly committed to protecting and enhancing the rights afforded to clients by the new EU General Data Protection Regulation ("GDPR"). With the introduction of GDPR, this strengthens our obligations and commitment to responsibly obtain, process and protect your data.

GDPR has been introduced to provide a comprehensive and modern framework relating to data protection across the EU. GDPR establishes a set of principles, implementation requirements and rights for individuals that apply to any organisation operating in Guernsey that collects and processes personal data. At ISM Education we have undertaken extensive preparation for the introduction of the Law on the 25th of May 2018 and we are informing our clients of the key aspects of GDPR together with its impacts relating to our obligations to you, your data and your rights.

Our GDPR Commitments & Obligations

Under GDPR and with respect to your personal data, ISM EDUCATION is designated as both a Data Processor and Data Controller. With this, it places specific obligations on ISM EDUCATION to ensure that any Personal Data e.g. personally identifiable information and any Sensitive Personal Information such as political affiliation is always processed fairly, lawfully and in a transparent manner in relation to you.

Personal Data We Capture

ISM EDUCATION will collect personal data in order to conduct compliance activities and contractual business with you in accordance with GDPR. ISM EDUCATION will limit the type and amount of data captured to obtain only what is required to accurately complete and process the business activities carried out on your behalf.

In order for us to fulfil any contractual obligation with regard to the services we provide to you, it is possible that we may share your personal data across our group and to authorised, third parties in different geographic locations.

ISM EDUCATION GDPR Commitments

At ISM Education, our continued commitment to operate responsibly with your personal data under GDPR specifically reaffirms that:

• We will ensure processes and robust security controls are in place to protect your data against unauthorised access, processing, loss or accidental destruction
• We will process your data in a manner that is consistent with the original purposes for its collection
• We will maintain the accuracy of any personal data captured and ensure our processes can rectify inaccurate data without undue delay
• We will establish robust governance, operational procedures and staff training to maintain compliance with all data protection legislation.
  

GDPR - Your Rights

GDPR provides you with enhanced rights to access the data that we hold on you and greater control on how your personal data is used. As an individual whose personal data we process, you are specifically provided with and can exercise the following rights:

• To be informed about what data we hold on you
• To access the data that we hold on you
• To rectify any inaccurate data that we hold on you
• To have any data that we hold on you to be erased
• To restrict us processing data held on you
• To move your data to another organisation - data portability
• To object to your data being collected or used
• To opt out of automated decision making and profiling
  

Further Information

For more information on GDPR and what this means for you, please contact your normal ISM EDUCATION representative or us directly at:

Data Protection
ISM Education
Amba House, 15 College Road,
London
HA11BA

Email: dataprotection@ismeducation.com

Specific data protection and GDPR regulatory information can also be obtained from the Information Commissioners Office – www.ico.ork.uk