What personal data does SRT collect?
We collect a variety of data on an institutional and individual level to provide you with services and information. We collect student data through event registration (e.g., university fairs and recruitment tours) and online forms to connect high school students with universities.
The personal information we collect from you is the following:
Apart from the abovementioned we collect the following personal data from the students taking part in online events organized by us:
Any student participating in an online event organized by SRT is informed and expressly agrees to this personal data being shared with the following recipients:
How do we collect personal data?
We collect information about you when you:
Personal data may be provided to SRT by third parties as well (universities, high schools, other educational institutions, etc.). When we obtain personal data from third party sources, we will look to ensure that the third party has lawful authority to provide us with your personal data.
How does SRT use and share your information?
We collect student data through event registration (e.g., university fairs and recruitment tours) and online forms to connect high school students with universities. If you have opted-in to be included in our list, SRT partner universities taking part in the event/webinar you register for will have access to your personal data, and may contact you regarding global study options. These communications may be sent electronically by email.
We may use an event app or share materials to promote networking at our events. If you are registered to attend an event, your name, email and school will be shared with other participants attending the event.
We send regular communications to inform you of services available as part of your membership, and to conduct SRT association business as noted in the membership agreement. You can manage your email preferences to opt in and out of specific communications according to your interests. This option can be found at the end of each communication under Manage your preferences.
SRT will not share your personal data with third parties except:
Lawful basis for processing your information
SRT needs your contact details in order provide some of the Services included on or otherwise made available to you through the Website (“Services”) (https://srtfairs.com/services/ ). Where applicable, we indicate whether and why you must provide us with your personal data, as well as the consequences of failing to do so. If you do not provide personal data when requested, you may not be able to benefit from our Services if that information is necessary to provide you with the Services or if we are legally required to collect it.
Receiving and processing your personal data as a prospective student, as listed above, when you participate in school visits, educational fairs in Bulgaria and abroad, is based on your consent – Art. 6 (1) (a) of GDPR, and is exclusively used in the recruitment and application cycle.
We may process your personal data because it is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract. In this respect, we use your personal data for the following:
Apart from the abovementioned grounds, most commonly personal data will be processed in the following circumstances:
We may also process your personal data in relation to compliance with our legal obligations. In this respect, we may use your personal data for the following:
Retention of your personal data
Retention periods vary depending on the category of data. Our policy is to keep data for as long as necessary to fulfill the originally intended purpose.
We take measures to delete your Personal Data or keep them in a form that does not permit identifying you when these Personal Data are no longer necessary for the purposes for which we process them, unless we are required by law to keep them for a longer period.
Subject to any other notices that we may provide to you, we may retain your personal data for a maximum period of five years after your association with us has come to an end.
To review SRT’s website cookies policy, please check the following https://edu.srtfairs.com…
Cookies we use
|Google Analytics||_utma, _utmb, _utmc, _utmz||These cookies are used to collect information about how visitors use our website, which we use to help improve it. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. Find out more about Google Analytics privacy
You can opt-out from being tracked by Google Analytics by clicking here
|CloudFlare||_cfduid||The __cfduid cookie is used to override any security restrictions based on the IP address the visitor is coming from. For example, if the visitor is in a coffee shop where there are a bunch of infected machines, but the visitor’s machine is known trusted, then the cookie can override the security setting. It does not correspond to any user id in the web application, nor does the cookie store any personally identifiable information.|
|SRT Session||www.srt||This cookie only exists while your browser is open, it will be removed automatically at the end of your session. Without this cookie you cannot start, nor finish the online booking process.|
|Cookie Consent||cc_cookie_accept, cc_cookie_decline||These cookies are used to remember your choice of allowing or disallowing us to place cookies on your device.|
How does SRT store and secure information?
We have implemented technology and policies with the objective of protecting your data from unauthorized access and improper use and will update these measures as new technology becomes available. We restrict access to your personal data to those employees who need to know that information to provide benefits or services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our employees’ privacy responsibilities.
You rights in relation to the personal data we hold
GDPR outlines six rights for individuals in relation to their data. If you would like to exercise one of these rights, the actions you can take are listed below.
We will respond to all requests within 30 days, however it may take longer to fulfill your request. If you are unsatisfied with how we handle your request you can contact your local data authority.
You have rights in respect of the way your personal data shall be managed, including the right to:
You may address your concerns or inquiries to e-mail: email@example.com
Generally we do not knowingly collect, maintain, or use personal data from children under 16 years of age, and no part of the Service is directed to children under the age of 16.
Where it is necessary to collect, maintain, or use personal data from children under 16 years of age, for the legitimate purpose of providing Services to such a person, we do not proceed unless consent is given or authorized by the holder of parental responsibility over the child.
If you learn that your child has provided us with personal data without your consent, then you may alert us at firstname.lastname@example.org. If we learn that we have collected any personal pata from children under 16, then we will promptly take steps to delete such information and terminate the child’s account.
International data transfers
Data we collect will (occasionally) be transferred to selected third parties, which may be located outside of the European Union as part of the services offered to you. For example, some educational institutions we work with are located in countries outside of the EU.
In these circumstances, your personal data will only be transferred on one of the following bases:
SRT is an organization that engages in activities worldwide. SRT staff, affiliates or contractors may access, store or process personal data you submit to us in countries that do not afford a level of data protection equivalent to the EU. By submitting personal data to us you irrevocably agree to the export of your data to such countries.
Other important information
When we are onsite for a school visit, we respect and adhere to local school policies including those related to data protection, including the distribution, use and storage of data, the rights of the individual, safeguarding and child protection, as well as statutory governmental policies and practices.
Links to other web sites
DECLARATION OF ACCEPTANCE
I hereby declare:
I am informed and I agree that:
1.1. my personal data might be provided to third parties – online events hosting platforms, administrative institutions and jurisdictional authorities, empowered by low to require and collect such personal information.
1.2. the personal data I provided might be processed and stored by the company for a maximum period of five years after your association with us has come to an end time, unless I send an email to email@example.com and declare my wish all personal data to be deleted from the company data base.
1.3. my personal data will be transferred to other countries – EU and NON EU Members , as long as this concerns the services I requested and the company has the assurance that the transferred data will be handled and administrated in accordance with the General Data Privacy Regulation.
I am informed and I agree that any email correspondence between me and the company related to the requested services is considered information freely accessible by the company and its employees and the company can process, transfer to third parties (suppliers, partners) and store this information for an unlimited period of time.
I am informed by the SRT about my rights:
2.1. I have the right to access to my personal data, processed by the SRT. I need to send a written request to : firstname.lastname@example.org, in order this access to be granted.
2.2. I am entitled to send a request for deleting, correcting and blocking of my personal data, if its processing does not comply with the applicable data protection legislation.
2.3. I have the right to demand that the SRT informs third parties about the deletion, correction and ban of my personal data, that has been disclosed, unless it is impossible for SRT or it requires extraordinary efforts.
2.4. I have the right to be informed, that my personal data is being disclosed to third parties for marketing purposes and I can disagree at any time.
2.5. I have the right to disagree against the processing of my personal data for marketing purposes at any time and absolutely free of charge.
2.6. I have the right to disagree against the processing of my personal data at any time, if I consider our actions non -compliant to the data privacy legislation.
2.7. If there is a security issue, despite our strict internal security measures and procedures, I have the right to be informed within 72 hours.
2.8. If I am an individual at the age of 16 or less, my personal data will be provided only with the acceptance of my parent/legal guardian.
Amended 1 July 2021