1. Introduction & Scope
International School Rheintal ("ISR", "we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Notice explains how we collect, process, and safeguard your information when you visit our website, inquire about admissions, or use our digital services, in strict accordance with the Swiss Federal Act on Data Protection (nFADP) and the General Data Protection Regulation (GDPR), where applicable.
Identity of the Data Controller: International School Rheintal, Werdenbergstrasse 17, 9470 Buchs, Switzerland. Data Compliance Office, Contact: [email protected]
2. Information We Collect
When you interact with our school, we may collect the following categories of personal data:
Directly Provided Information Name, email address, phone number, postal address, children's names, dates of birth, and any details provided via our admissions or contact forms.
Automated Device & Usage Data: IP address, browser type, pages visited, and geographical location (city/region level).
Photographs, Videos, and Community Sharing Photographs and videos play an important role in the delivery of our teaching, learning, and community building. Class photographs and event media intended for our parent community are shared via secure, non-searchable links accessible exclusively to verified parents/guardians through password-protected school platforms (e.g., ManageBac or SchoolBase).
Liability Disclaimer: While ISR implements strict technical measures to restrict initial access, further sharing or downloading of these media files by recipients is beyond the School's control. Parents are strictly encouraged to exercise discretion and respect the privacy of other minors. Sharing school media containing other students on public social media without explicit consent is done at the parents' own legal liability.
Sensitive Personal Data We do not proactively collect sensitive personal data (such as health or religious information) via this public website. Such data is strictly collected via secure, internal portals following formal admission.
3. Purpose of Processing
We use the information you provide under the lawful basis of contractual necessity, legal obligation, and vital interests to:
- Undertake and manage ISR admissions and enrollment
- Provide a safe learning environment and comply with Swiss child protection requirements
- Provide support and care for emotional and psychological well-being (pastoral and counselling)
- Monitor and report on academic progress, including Special Educational Needs (SEND) and Individual Education Plans (IEPs)
- Enable the children we serve to progress their education at other educational organisations (e.g., university and college applications)
- Ensure campus security, including CCTV video surveillance (retained for a strict maximum of 14 days)
- Monitor the responsible and safe use of IT and communication systems
4. Data Storage & International Transfers
ISR prioritises data sovereignty. Our primary website hosting and data storage operations are located within Switzerland and the European Economic Area (EEA), which are recognised by the Swiss Federal Council as having adequate data protection laws.
Where we utilise third-party processors located outside Switzerland/EEA (e.g., specific US-based educational or communication tools), we ensure data is protected by legally binding safeguards, such as the revised Standard Contractual Clauses (SCCs) approved by the Swiss Federal Data Protection and Information Commissioner (FDPIC).
5. Data Security
ISR implements robust Technical and Organisational Measures (TOMs) to protect your data against unauthorised access, loss, or alteration. All data transmitted through our website is secured using strong cryptographic protocols (SSL/TLS encryption).
6. Cookies and Tracking Technologies
Our website uses cookies to function effectively and improve user experience.
Strictly Necessary Cookies Required for the basic operation of the site. No consent is required.
Analytics & Marketing Cookies Used to analyse traffic and tailor content. These are only deployed if you grant explicit permission via our Cookie Consent Banner. You may withdraw this consent at any time.
7. Automated Data Decisions & Profiling
ISR does not employ fully automated decision-making processes (i.e., decisions affecting data subjects made completely by algorithms or AI without human influence) for admissions, academic grading, or behavioural assessments. Any use of educational technology or AI tools that process student data involves explicit human oversight by ISR faculty.
8. Your Data Subject Rights
Under the Swiss nFADP, individuals possess specific rights regarding their personal data. Students who possess an appropriate level of maturity (typically Middle and High School students) may exercise these data privacy rights independently.
Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may request that we correct inaccurate or incomplete data.
Right to Erasure: You may ask us to delete your data, provided there is no overriding statutory retention requirement (e.g., Swiss archiving or tax laws).
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact our Data Compliance Officer at [email protected]. We will respond to your request within 30 days, free of charge.
9. Complaints & Regulatory Authority
If you are dissatisfied with how we handle your data, we encourage you to contact our DCO first so we can address your concerns directly. However, you also have the right to lodge a formal complaint with the Swiss supervisory authority:
Federal Data Protection and Information Commissioner (FDPIC / EDÖB) Feldeggweg 1 CH-3003 Bern, Switzerland Website: www.edoeb.admin.ch