Data Protection Information Form

The Data Protection Information Form is intended to provide you with information regarding the processing of your personal data inquired by ASSIST through the Student Preferences Form, pursuant to Art. 13 of the EU General Data Protection Regulation, Regulation 679/2016 ("GDPR"). Some of the data inquired by ASSIST through our electronic forms concerns your personal data and health. The processing of your personal and health data by ASSIST requires your consent. We ask that you provide your consent by ticking the box titled "Consent" at the end of each of our forms.

Which personal data is processed by ASSIST, for which purpose, for how long and underwhich legal basis?

The information ASSIST requests from you through our electronic forms constitutes personal data under the GDPR. ASSIST needs to process that personal data to place you at the right school and host family, and in particular needs to transfer your personal data to US schools and US host families. As such, the processing of your personal data is necessary to perform the contract concluded with ASSIST regarding your participation in the ASSIST program, or in order to take steps at your request prior to entering into a contract (Art.

6(1)(b) and Art. 49(1)(b) of the GDPR). We do not need your consent for such processing as long as no health data is processed. However, the information ASSIST inquiries from you comprises health data as far as it concerns your allergies, food allergies and dietary requirements. In order to place you at the right school and family, we also need to process this health data of yours, and in particular transfer this health data to US schools and US host families. Since a special protocol applies to the processing of health data under the GDPR, ASSIST needs your consent to process such health data (Art. 9(2)(a) GDPR). Such information will be treated by ASSIST as strictly confidential and will of course only be used for the purposes indicated herein. Please read the Student Preferences Form and the present Data Protection Information Form and if you agree with the processing of your health data by ASSIST, US schools and US host families, please tick the box titled "Consent". Your personal data will be kept for no longer than 2 years, health data will be kept for no longer than 1 year, and will be deleted without delay thereafter. However, data may be kept longer if there are any issues with your health status that require ASSIST to keep your data for the exercise or defense of legal claims. ASSIST would then have a legitimate interest in keeping the data (Art. 6(1)(f) and Art. 9(2)(f) of the GDPR).

Who will process my data? Who is responsible for the processing ("Controller"), how can I contact the Controller, and are there other recipients of my personaldata?

ASSIST, Inc. is responsible for the processing of your personal data ("Controller" in the sense of the GDPR). Please find below its identity and contact details to exercise your rights:

American Secondary Schools for International Students and Teachers, Inc. (ASSIST)

P.O. Box 969 • Suffield, CT 06078 • USA

Tel.: 001-860-668-5706 • Fax: 001-860-668-5726

e-mail: privacy@assistscholars.org

ASSIST will receive, consult and store the personal data inquired through the Student Preferences Form. ASSIST uses Formstack LLC to process the data inquired through the Student Preferences Form. ASSIST has obliged to comply with GDPR principles.

ASSIST will transfer that data to US schools and US host families to find the right school and family for you. The US schools and US host families will also be controllers of your personal data.

Is my personal data going to be sent to the US? Are there any risks? Does ASSIST need my consent for that?

Accordingly, all personal data inquired through the Student Preferences Form will be sent to the US. In the US, data protection rules are less stringent than those in the European Union. For this reason, the European institutions are of the opinion, that the US legislation does not grant an adequate level of protection to personal data. However, ASSIST takes data protection very seriously and has taken a number of steps to assure personal data handled by it respects GDPR principles and standards. Technical and organizational measures have been taken to assure confidentiality and security of data, and we respect your rights as described.

The sending of the personal data inquired through the Student Preferences Form to the US is necessary, as indicated above, to find the right school and family for you. As such, the transfer of your personal data is necessary for the performance of the contract concluded with ASSIST regarding your participation in the ASSIST program, and we do not need your consent for such transfer (Art. 49(1)(b) of the GDPR).

What are my rights regarding my personal data?

You have the right to request access to your personal data from ASSIST and to request rectification of incorrect personal data as well as the right to request the deletion of your personal data. You furthermore have the right to restrict the processing of your data, if one of the legal prerequisites of Article 18 of the GDPR applies, and the right to data portability, if one of the legal prerequisites of Article 20 of the GDPR applies. If the processing of your personal data is based on your consent, you can withdraw your consent at any time. The lawfulness of the data processing up to the withdrawal is not affected by your withdrawal. To enforce your legal rights or to withdraw your consent, please use the street address or e-mail address indicated above.

If you are of the opinion that the processing of your personal data violates applicable data protection laws, you have the right to file a complaint with the competent supervisory authority. The following link leads to a webpage of the European Commission listing the competent supervisory authorities in each European country: https://commission.europa.eu/law/law-topic/data-protection/reform/rights-citizens_en.