Skip To Main Content

Privacy Policy

Last updated March 29, 2024

  • This privacy notice for Ermitage International School ('we', 'us', or 'our'), describes how and why we might collect, store, use, and/or share ('process') your information when you use our services ('Services'), such as when you:
  • Visit our website at https://www.ermitage.fr, or any website of ours that links to this privacy notice
  • Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at communications@ermitage.fr.

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law. Learn more about sensitive information we process.

Do we receive any information from third parties? We do not receive any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.

In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties. Learn more about when and with whom we share your personal information.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the privacy notice in full.

1. WHAT INFORMATION DO WE COLLECT?

Personal Information you disclose to us. 

In Short: We collect personal information that you provide to us. This includes information voluntarily provided when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or contact us. All personal information provided to us must be true, complete, and accurate, and you must notify us of any changes.

Personal Information Provided by You: The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. It may include the following: Names, Email addresses, Information about your child, Mailing addresses.

Information Automatically Collected: Certain information, such as your IP address and browser/device characteristics, is collected automatically when you visit our services. This data is primarily used to ensure the security and proper functioning of our services, as well as for internal analytics.

  • Log and Usage Data: We collect log and usage data, including your IP address, device information, and activity within the services. This data helps us diagnose issues and improve our services.

  • Device Data: We gather device data, such as your IP address, browser type and settings, and information about your activity within the services. This aids us in providing an optimal experience and resolving technical issues.

  • Location Data: We collect precise or imprecise location data based on your settings and consent. This data may be used to personalize your experience, but you can choose to disable it in your device settings.

In summary, we collect personal information to provide and enhance our services, while respecting your privacy and ensuring the security of your data.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, ensure security and fraud prevention, and comply with the law. We may also process your information for other purposes with your consent.

We process your personal information for various reasons, depending on your interactions with our Services, including:

  1. Facilitating Account Creation and Authentication: We process your information to enable you to create and log in to your account and to maintain its functionality.

  2. Delivering and Facilitating Delivery of Services: Your information is processed to provide you with the requested services.

  3. Responding to User Inquiries/Offering Support: We process your information to address your inquiries and resolve any issues related to the services.

  4. Sending Administrative Information: Your information may be processed to send you details about our products and services, changes to our terms and policies, and similar information.

  5. Fulfilling and Managing Orders: Information processing is conducted to fulfill and manage orders, payments, returns, and exchanges made through the Services.

  6. Enabling User-to-User Communications: Your information may be processed if you choose to utilize features allowing communication with other users.

  7. Sending Marketing and Promotional Communications: We may process personal information for marketing purposes in line with your preferences. You can opt out of our marketing emails anytime.

  8. Delivering Targeted Advertising: Your information may be processed to develop and display personalized content and advertising tailored to your interests and location. For more details, refer to our Cookie Notice.

  9. Determining the Effectiveness of Marketing Campaigns: Information processing may occur to understand how to provide marketing campaigns most relevant to you.

  10. Saving or Protecting an Individual's Vital Interest: We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.

For more information on your privacy rights, refer to 'WHAT ARE YOUR PRIVACY RIGHTS?' below.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We process your personal information only when we believe it's necessary and have valid legal reasons (legal bases) to do so under applicable law. These reasons include your consent, compliance with laws, providing services, protecting rights, or fulfilling legitimate business interests.

For Individuals in the EU or UK: The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. These legal bases include:

  1. Consent: We may process your information if you've given us permission (consent) to use it for a specific purpose. You can withdraw your consent anytime.

  2. Performance of a Contract: We may process your personal information to fulfill contractual obligations, including providing Services or fulfilling requests before entering a contract.

  3. Legitimate Interests: Processing may occur if it's reasonably necessary to achieve our legitimate business interests and those interests don't override your rights and freedoms. For instance, we may process your information for marketing or advertising purposes.

  4. Legal Obligations: We may process your information to comply with legal obligations, such as cooperating with law enforcement or regulatory agencies.

  5. Vital Interests: Processing may be necessary to protect your or a third party's vital interests, such as situations involving potential threats to safety.

For Individuals in Canada: We may process your information if you've given us specific permission (express consent) for a particular purpose or where your permission can be inferred (implied consent). You can withdraw your consent anytime.

In exceptional cases, we may legally process your information without consent, including for investigations, fraud detection, compliance with legal obligations, or other specified scenarios.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share information in specific situations described in this section and/or with the following categories of third parties:

  • Vendors, Consultants, and Other Third-Party Service Providers: We share data with third-party vendors, service providers, or agents who perform services for us or on our behalf.

  • Business Transfers: Information may be shared or transferred in connection with mergers, sales of assets, financing, or acquisitions.

  • Google Analytics: We may share information with Google Analytics for tracking and analyzing service use. Opt-out options are available.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies to collect and store your information. Details on usage and refusal options are outlined in our Cookie Notice.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your information for as long as necessary to fulfill the purposes outlined in this privacy notice, unless otherwise required by law. When no longer needed, we delete or anonymize it, or securely store it if deletion isn't immediately feasible.

7. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect data from or market to children under 18 years of age. If such data is discovered, we take measures to delete it promptly. If you suspect data collection from minors, please contact us.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: In certain regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights granting you greater access to and control over your personal information. You may review, change, or terminate your account at any time.

For Individuals in the EEA, UK, Switzerland, and Canada:

Under applicable data protection laws, you have certain rights, including:

  1. Access and Correction: You can request access to and obtain a copy of your personal information, as well as request rectification or erasure of inaccurate or incomplete data.

  2. Data Portability: You may request to receive your personal information in a structured, commonly used, and machine-readable format, if feasible, and to transmit it to another controller.

  3. Restriction of Processing: You can request the restriction of processing your personal information under certain circumstances.

  4. Withdrawal of Consent: If we rely on your consent for processing your personal information, you have the right to withdraw that consent at any time.

  5. Objection to Processing: You may object to the processing of your personal information under certain circumstances.

  6. Complaints: If you believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection authority.

Withdrawal of Consent: If we process your personal information based on your consent, you have the right to withdraw that consent at any time.

Opting out of Marketing Communications: You can unsubscribe from our marketing communications at any time by following the instructions provided in the communication or contacting us directly.

Account Information: You can review, update, or terminate your account by contacting us using the provided contact information.

Cookies and Tracking Technologies: You have the option to manage cookies and tracking technologies through your browser settings, although this may impact certain features or services.

9. CONTROLS FOR DO-NOT-TRACK FEATURES

At present, we do not respond to Do-Not-Track (DNT) signals or similar mechanisms due to the absence of a uniform technology standard. If such a standard is adopted in the future, we will update our practices accordingly.

10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

California Residents: Under the California Consumer Privacy Act (CCPA), you have certain rights, including the right to request access to your personal information, deletion of your data, and opting out of the sale of your personal information, among others.

Colorado, Connecticut, Utah, and Virginia Residents: Residents of these states have specific rights regarding access to and control over their personal information, including rights related to access, correction, deletion, and opting out of certain data processing activities.

11. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

Australia, New Zealand, and South Africa: Residents of these regions have rights under applicable privacy laws, including the right to access, correct, or delete personal information, and the right to lodge complaints with relevant authorities.

12. DO WE MAKE UPDATES TO THIS NOTICE?

Yes, we may update this privacy notice to stay compliant with relevant laws. Any material changes will be notified to you through prominent notices or direct notifications.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have any questions or comments about this notice, you can contact us via email at communications@ermitage.fr or by post at the provided address.

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on applicable laws, you may request access to, correction of, or deletion of your personal information by submitting a data subject access request.