Privacy Policy

Nanjing International School respects your privacy and we are committed to protecting it.

Introduction  

Nanjing International School (NIS) is dedicated to protecting the privacy rights of our students, parents, and employees. This privacy policy outlines our practices for collecting, using, and safeguarding personal information in accordance with the Chinese Personal Information Privacy Law (PIPL) and the General Data Protection Regulation (GDPR). 

This Privacy Statement applies to the website located at www.nischina.org, its related mobile website, and its applications, which are owned and operated by Nanjing International School, as well as how we collect and use data connected to our school's operation.  

The purpose of the site is to provide visitors with:  

• Knowledge of NIS and the educational experience offered  
• The means to apply for student entrance into our educational programme  
• The means to apply for employment at our school  
• The ability to update contact information and communication preferences as an NIS alumni 

Site Accessibility and Functionality 

NIS strives to maintain consistent and accessible information and functionality across all devices. However, some features available on our main site may not be present on the mobile version, and vice versa. 

Definition and Collection of Personal Information 

For this Privacy Statement, "personally identifiable information" refers to data that identifies you individually, such as your name, address, phone number, or email. On certain site pages, you may provide this information so we can collect details about prospective or alumni families or connect you with third-party data processors for school application purposes (either for employment or enrollment). These parties will seek your consent to collect, process, and retain your information on our behalf. 

Collection of Personal Information  

We collect personal information when you enroll your child in our school, when you apply for a job at our school, or when you interact with us in any other capacity. In line with our commitment to data minimization, we ensure that only the personal information necessary for specific, explicit, and legitimate purposes is collected and processed. We regularly review our data collection practices ensuring ongoing compliance with PIPL and GDPR principles. The personal information we collect may include your name, contact information, educational background, and other information that is relevant to our school's operations. We will only collect personal information necessary for the purposes outlined in this privacy policy and guided by the Nanjing International School Data Protection Impact Policy. 

We may collect and process the following categories of personal information: 

• Student information: This includes student names, ages, addresses, photographs, academic records, health information, and any other information necessary for educational and administrative purposes. 

• Parent/guardian information: We may collect contact details, identification information, and other relevant data to maintain effective communication and support the educational process. 

• Staff information: We collect personal details, employment history, and other necessary information for HR and administrative purposes. 

• Other information: This includes any additional data necessary for school activities, such as extracurricular activities, events, and special programs. 

Purpose of Information Collection 

We collect personal information for the following purposes: 

• Website specific   

  • Fulfill site user requests (e.g., create log in credentials, send application or promotional materials including e-mails, change newsletter preferences, etc.) Create a directory of Nanjing International School alumni  

  • Respond to your comments or requests for information  

  • Contact you about promotional offers, marketing programs, or communications from NIS   

  • Track, measure and analyze your use of and activity relating to the Site, and your engagement with NIS in order to enhance NIS’s and relationships with you  

  • Fulfill a request for or to develop new products or services  

  • Generate analytics that improve our site layout, content, and services  

  • Make inferences and predictions about your potential areas of interest  

  • Comply with legal requirements  

  • Compile aggregate and statistical data to help in website design and to identify popular features  

  • Measure site activity to allow us to update our site to better meet user wants and needs   

  • Sharing your Personally Identifiable Information 

• School operation specific 

  • Facilitating educational activities and providing necessary support for students. 

  • Ensuring effective communication with parents, guardians, and staff. 

  • Complying with legal obligations, including regulatory reporting and record-keeping. 

  • Organizing school events, programs, and extracurricular activities. 

  • Safeguarding the health and safety of all individuals within the school community. 

  • Collection of Non-Personal Information 

This site and its service providers collect non-personal information which does not identify you individually. Instead, we gather information on an aggregate or anonymous basis from all visitors. This includes details like which pages are visited, the duration of visits, and interactions such as clicks and scrolls. We also collect general location data like zip codes and other aggregate data through third-party surveys.  

Tools for Collecting Non-Personal Information 

• Cookies: Cookies are small text files used to enhance your site experience, enabling functions like maintaining login status across sessions and tailoring content to your preferences. We use: 

• Session Cookies: These are temporary and deleted once you close your browser. 

• Persistent Cookies: These remain on your device until they expire or are deleted. 

• Web Beacons and Pixels: These tools help track activities such as email interaction and site usage patterns. 

• Session Logs: Generated during your visit, these logs help us optimize site navigation based on how users browse our site. 

Third-Party Integration 

We may integrate with third-party social media platforms that allow tracking of aggregated engagement metrics like the number of items liked or shared. Additionally, if accessed through a mobile device or QR code, we collect data that may include the device’s operating system, unique device identifiers, and geolocation to enhance site functionality. 

User Interactions 

Visitors may be directed to our site via ads, links, or QR codes, which utilize cookies or web beacons to measure their effectiveness. These tools do not collect personally identifiable information. 

Most browsers allow you to block cookies, but doing so may affect your ability to use certain features of the site.   

Data Security and Retention 

We maintain appropriate technical and organizational measures to safeguard personal information from unauthorized access, disclosure, alteration, or destruction. We retain personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy and as required by law. 

International Data Transfers 

For any personal information transferred outside of China, we take stringent measures to ensure that the data is handled with the same level of security and confidentiality as within China. We comply with PIPL’s requirements for cross-border data transfers by implementing standard contractual clauses approved by authorities, ensuring that all data recipients adhere to our data protection standards.  

Data Retention 

We retain personal information only for as long as is necessary for the purposes for which it was collected, as outlined in our privacy policy, or as required by law. Specific retention periods are determined based on the nature of the information and the reasons for its collection. Our Data Protection Impact Policy is regularly reviewed to ensure compliance with legal obligations and industry best practices. 

Incident Response Plan 

In the event of a data breach or security incident, we have established procedures to promptly address and mitigate any potential damage. This includes notifying affected individuals and relevant authorities within the timeframes prescribed by law. Our response team is trained to handle incidents effectively, ensuring minimal impact on the individuals and our operations. 

Protection of Personal Information  

We take the protection of personal information very seriously and have implemented appropriate technical and organizational measures to protect against unauthorized access, disclosure, alteration, or destruction of personal information. 

Sharing of Personal Information  

We do not share personal information with third parties unless we have obtained your consent or are required to do so by law. If we do share personal information with third parties, we will ensure that they are bound by appropriate confidentiality obligations.  

Consent to Processing  

• Website specific 

This Site is managed from the People’s Republic of China. By visiting this site and by providing your personally identifiable information to us, you understand and consent to the collection, use, processing, transfer, and disclosure of your personally identifiable and non-personally identifiable information globally — including to the People’s Republic of China – in accordance with this Privacy Statement. Therefore, by visiting this site and by providing such information, you consent to the transfer of such information across country borders, and to the use, processing, and disclosure of such information in global locations. Your consent shall be deemed to include your consent to transfer personally identifiable or non-personally identifiable information to locations that may have different levels of privacy protection than in your own country.   

• School operation specific 

Initial consent is given when parents apply to NIS. Consent will be taken annually during the re-enrolment process each year for returning families. The “Minors’ Protection Law” states that a minor is a person under the age of 18 years. Hence, parental consent is advised for processing personal data of children under 18. According to the PIPL Where personal information handlers handle the personal information of minors under the age of 14, they shall obtain the consent of the parent or other guardian of the minor. In both instances parental consent is needed.  

Access to Personal Information 

You have the right to access the personal information that we hold about you and to request corrections if necessary. Please contact us if you would like to access or correct your personal information. 

Right to Erasure  

You have the right to request that we delete your personal information. We will consider all such requests on a case-by-case basis and will only refuse your request if we are required to retain your personal information for legal or regulatory reasons. 

For any concerns or inquiries regarding our handling of personal information, or if you wish to exercise any of your rights under the PIPL or GDPR, please contact us at dpo@nanjing-school.com. Our Technology Director is responsible for overseeing data protection strategy and implementation to ensure compliance with privacy law requirements. 

Changes to the Privacy Policy  

We may update this privacy policy from time to time to reflect changes in our privacy practices or legal requirements. We encourage you to review this policy periodically for any updates. 

Contact Us  

If you have any questions about this privacy policy, please contact us at  

Nanjing International School  

Xueheng Lu 8, Xianlin University City 

Qixia District, Nanjing PRC 210023 

+86 25 8589 9111 

Email: dpo@nanjing-school.com

Date of Last Revision: May 14, 2024