While you (hereinafter, the “User”) browse the website or use any of the services we offer on this website, your data may be processed by Colegio Internacional SEK-Colombia, S.A.S., with Tax Identification Number 901.154.366-1 (hereinafter, the “Data Controller”). Their contact information is as follows:

Address: Autopista Norte Km 25 Vía Sopo Vereda Yerbabuena, Sindamanoy Urbanization Entrance, Chía Municipality, Cundinamarca, Ecuador
Contact email: dpo@edusek.net

Information and Consent
By reading this Privacy Policy, the User is informed about how the Center processes and protects the personal data provided to the Center through the forms available on the Website, as well as data related to their browsing activity and any other data that may be provided through any other means or medium.

The User should carefully read this Privacy Policy, which has been written in a clear and simple manner to facilitate understanding, and freely and voluntarily decide whether to provide their personal data to the Center.

Purposes of Processing Personal Data and Legal Basis
Personal data is collected and processed by the Center for the following purposes:

1) To facilitate, expedite, and fulfill the commitments established between the website and the User.

2) To facilitate, expedite, and maintain the relationship established through the forms completed by the User, which may involve:

a) Managing the admissions process, including any necessary interactions with relevant organizations and admissions tests.

The User is informed that conversations during the admissions process may be recorded, solely for the purpose of monitoring the relationship and the corresponding admissions and/or enrollment process.

The legal basis for processing the User’s personal data for this purpose is the User’s consent and the performance of a contractual or pre-contractual relationship between the User and the Center.

b) Managing registration for the corresponding event.

The User is hereby informed that the Center reserves the right to record and broadcast live or on-demand, and to take photographs, during events or initiatives organized by or with the participation of the Center, and to use, reproduce, distribute, and publicly communicate these recordings in analog or electronic media such as intranets or social networks, among others, for academic purposes or to promote its activities or those of the event’s sponsors. The Center will provide prior notice and obtain the necessary consents and authorizations for the use of the User’s individual image in each context. If the User does not authorize the recording of their image and/or voice, they will be informed of this possibility so that they can take appropriate action.

The legal basis for processing the User’s personal data for this purpose is the User’s consent and the performance of a contractual or pre-contractual relationship between the User and the Center.

c) To address a request or inquiry.

The legal basis for processing the User’s personal data for this purpose is the legitimate interest in addressing and responding to the inquiry.

3) To monitor the User’s browsing history in accordance with the Cookie Policy.

The legal basis for processing the User’s personal data for this purpose is consent, as well as the Center’s legitimate interest in the case of essential cookies.

4) To manage User requests related to the exercise of personal data protection rights.

The legal basis for processing the User’s personal data for this purpose is the legal obligation to respond to the corresponding request.

5) To evaluate the application submitted by a User for a job or for the provision of services to the Center.

The legal basis for processing the User’s personal data for this purpose is the User’s consent and the performance of a contractual or pre-contractual relationship between the parties.

6) To assess a candidate’s eligibility and suitability for scholarships and financial aid offered by the Center or other organizations and institutions with which we have collaboration agreements, and, where applicable, to carry out the necessary procedures for awarding them.

The legal basis for processing the dataThe legal basis for processing the User’s personal data is the User’s consent.

7) To manage User requests related to the whistleblowing channel.

The legal basis for processing the User’s personal data for this purpose is the legal obligation to address the corresponding request.

8) To send informational communications and advertising about products, services, events, courses, programs, promotions, and relevant news from the Center, through commercial communications via electronic (newsletters) and traditional means.

If the User wishes to stop receiving commercial or promotional communications, they can unsubscribe from the service by sending an email to the following address: dpo@edusek.net or through any of the communications received.

Categories of Personal Data

The categories of data processed by the Center to manage the aforementioned processing may be, depending on the corresponding form:

• First and last name.

• Nationality.

• National ID/Passport.

• Address, telephone number, and contact information.

• Qualifications or training of legal guardians.

• Previous academic evaluations of the student.

• Email address of the father, mother, and financial guardian.

• Signature of the legal guardians and/or parents and photograph of the student.

• Social circumstances information.

• Employment details.

• Economic, financial, or insurance information.

• Browsing data collected through cookies, such as browsing history, IP address, or similar information.
• Other similar data.

Please note that the requested data is essential to provide the requested services. Failure to provide this data will make it impossible to provide the requested services.
The information that the User provides to the Center through the forms must be accurate and truthful. The User guarantees the authenticity of all data provided and will keep the information given to the Center updated so that it corresponds, at all times, to the User’s current situation. In the event of inaccurate, incomplete, or false statements made by the User, the User shall be solely responsible for any damages that may be caused to the Center or to third parties as a result.

If the User provides data belonging to third parties, they represent that they have the consent of those parties and undertake to provide them with the information contained in this Privacy Policy, thereby releasing the Center from any liability in this regard. However, the Center may carry out periodic checks to verify this, adopting the appropriate due diligence measures in accordance with data protection regulations.

Legal basis for the processing of personal data
The legal basis for the processing of personal data is the express and explicit consent given by the User in each case, which may be withdrawn at any time, as well as the specific legal basis applicable to each purpose of the processing, as described above.

Regarding the management of service contracts, payments, and invoicing, the legal basis for processing your personal data is the necessity of such processing for the execution of the contract.

As for the processing of personal data for sending information related to the services provided by the Center, the legal basis will be legitimate interest.

Personal Data Retention Periods
Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in any case, for the period necessary for the establishment, exercise, and defense of legal claims, or until the User requests its deletion.

Recipients of Personal Data
The User’s personal data will be shared with the following recipients or categories of recipients:

– To suppliers for the proper provision of services or any procedure required by the competent administrations or entities.

– To other entities of the SEK International Institution.

If the Data Controller intends to transfer personal data to a third country or international organization, the User will be informed of the third country or international organization to which the data is intended to be transferred, as well as the existence or absence of an adequacy decision by the Commission.

Personal Data of Minors
Only those over 14 years of age may lawfully consent to the processing of their personal data by the Center. For minors under 14 years of age, parental or guardian consent is required for processing, and such consent may only be obtained from a person under 14 years of age.

It will be considered lawful to the extent that the data subjects have authorized it.

Secrecy and Security of Personal Data
The Center undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, in order to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or the unauthorized disclosure of or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and ensure, through a legal or contractual obligation, that such confidentiality is respected by its employees, associates, and any person to whom the information is made accessible.

Rights arising from the processing of personal data
The User may exercise the following rights against the Data Controller:

● Right of access: This is the User’s right to obtain confirmation as to whether or not the Center is processing their personal data and, if so, to obtain information about their specific personal data and the processing that the Center has carried out or is carrying out, as well as, among other things, information available on the origin of said data and the recipients of any communications made or planned regarding it.

● Right to rectification: This is the User’s right to have their personal data corrected if it is inaccurate or, taking into account the purposes of the processing, incomplete.

● Right to erasure: This is the User’s right, provided that current legislation does not establish otherwise, to obtain the erasure of their personal data when it is no longer necessary for the purposes for which it was collected or processed; the User has withdrawn their consent to the processing and there is no other legal basis for it; The User objects to the processing and there is no other legitimate reason to continue with it; the personal data has been unlawfully processed; the personal data must be erased to comply with a legal obligation; or the personal data has been obtained as a result of a direct offer of information society services to a child under 14 years of age. In addition to erasing the data, the Data Controller, taking into account available technology and the cost of implementation, must take reasonable steps to inform controllers processing the personal data of the data subject’s request to erase any links to that personal data.

● Right to restriction of processing: This is the User’s right to restrict the processing of their personal data. The User has the right to obtain restriction of processing when they contest the accuracy of their personal data; the processing is unlawful; the Data Controller no longer needs the personal data, but the User needs it to establish, exercise, or defend legal claims; and when the User has objected to the processing.

● Right to data portability: If processing is carried out by automated means, the User has the right to receive their personal data from the Data Controller in a structured, commonly used, and machine-readable format, and to transmit it to another data controller. Where technically feasible, the Data Controller will transmit the data directly to that other controller.

● Right to object: This is the User’s right to object to the processing of their personal data or to have the Center cease processing it.

● Right not to be subject to a decision based solely on automated processing, including profiling.

● Right to withdraw consent: The User has the right to withdraw their consent to the processing of personal data at any time; however, please note that this may prevent the Center from providing the corresponding services.

● The User may exercise their rights by sending a written communication to the Data Controller at the following address and/or email, along with a scanned copy of their national identity card/passport:

Postal address: Autopista Norte Km 25 Vía Sopo Vereda Yerbabuena, Entrada Urbanización Sindamanoy, Chía, Cundinamarca, Ecuador.

Email: dpo@edusek.net

Links to third-party websites
The website may include hyperlinks or links that allow access to third-party websites other than the Center’s and which are therefore not operated by the Center.

The owners of these websites will have their own data protection policies, and they themselves will be responsible in each case.

of their own files and their own privacy practices.

Complaints to the supervisory authority
If the User believes there is a problem or violation of current regulations regarding the processing of their personal data, they have the right to effective judicial remedy and to file a complaint with a supervisory authority, in particular, in the Member State of their habitual residence, place of work, or place of the alleged infringement.

Acceptance and changes to this privacy policy
The User must have read and agreed to the conditions regarding the protection of personal data contained in this Privacy Policy, and must also accept the processing of their personal data so that the Data Controller can proceed with said processing in the manner, for the periods, and for the purposes indicated. Use of the website implies acceptance of the Privacy Policy.

The Center reserves the right to modify its Privacy Policy at its own discretion, or due to legislative, jurisprudential, or doctrinal changes.