Privacy Statement

International School Fryslân

Last Updated: 14.09.2025

At International School Fryslân we are committed to protecting the privacy and personal data of all community members. This Privacy Statement explains how we collect, use, store, and share personal data in compliance with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (Uitvoeringswet AVG – UAVG).

1. What Personal Data We Collect

We collect and process personal data only as necessary for educational, administrative, legal, and operational purposes. This may include:

Students: Full Name, date of birth, nationality, contact details, photos & video recordings (e.g., for yearbooks, school promotion, or digital platforms, when consent is provided).
Parents/Guardians: Names, contact details, payment and billing information, relationship to student.
Staff: Employment history, qualifications, payroll data, background checks, emergency contact information.
Website Visitors: IP addresses, cookies, browsing behavior (see our Cookie Policy).
Organisations: Names, contact details, payment and billing information, relationship to student and or parents if there are

2. Why We Collect Personal Data (Purposes)

We use personal data for the following purposes:

Student admission, registration, and academic administration.
Communication with organization representatives, parents and guardians.
Extra-curricular activities, school trips, and events.
School marketing and publications (with consent).

3. Purpose and Legal Grounds for Processing

We only process personal data when we have a valid legal basis under the GDPR. These may include:

Contractual necessity: e.g., enrolment, employment contracts
Legal obligations: compliance with Dutch education and tax laws
Vital interests: safeguarding students and staff
Legitimate interests: school administration and communication
Consent: for specific uses such as promotional materials or optional services

4. Data Sharing and Transfers

We only share personal data with:

Authorized staff and faculty.
Government authorities and educational regulators, where required.
External service providers (e.g., IT support) under strict data processing agreements.
Other third parties with your consent or as legally required.

5. Data Security

We take data security seriously. Our school implements robust physical, administrative, and technical safeguards to protect your personal data, including:

Controlled access to school systems
Encrypted data storage where applicable
Secure email and IT infrastructure
Staff training on data protection

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, or contractual obligations. Retention periods are defined in our internal Data Retention Policy, available upon request.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Access: request a copy of your personal data
Rectification: correct inaccurate or incomplete data
Erasure: request deletion of your data (in certain cases)
Restriction: request limited processing
Objection: object to processing based on legitimate interest
Data portability: receive your data in a structured format (where applicable)
Withdraw consent at any time (where consent was required)
File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

8. Use of Cookies

Our website uses cookies to ensure functionality, improve user experience, and gather anonymous analytics. Cookies are small files that our website store on your device to remember your preferences and improve your browsing experience. You may control cookies through your browser settings; however, this may affect your ability to access certain parts of our website. Here you can read more about the cookies used on the ISF website.

9. Changes to This Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in legal requirements or school practices. When we do, we will revise the “Last Updated” date and post the new version on our website. We encourage you to review this statement regularly.