Data Privacy Policy Statement Feu Group of Schools

DATA PRIVACY POLICY STATEMENT: FEU GROUP OF SCHOOLS

1. DOCUMENT PREAMBLE & RECITALS

This Data Privacy Policy Statement (the "Agreement") is entered into as of [Effective Date] (the "Effective Date") by and between the FEU Group of Schools, including its constituent institutions, affiliates, and subsidiaries (collectively, the "Institution"), and the individual data subject, whether a student, parent, guardian, employee, or contractor ("Data Subject").

RECITALS: WHEREAS, the Institution collects, processes, and stores Personal Data in the course of its educational and administrative operations; WHEREAS, the Parties intend for this Agreement to govern the collection, processing, and protection of such Personal Data in compliance with the [Applicable Data Privacy Law, e.g., Data Privacy Act of 2012 / GDPR] and other relevant jurisdictional statutes; NOW, THEREFORE, in consideration of the mutual covenants contained herein, the Parties agree to the terms set forth below.

2. OPERATIONAL DEFINITIONS

1. "Data Subject" refers to the individual to whom the Personal Data refers.
2. "Personal Data" refers to any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the Institution.
3. "Sensitive Personal Data" refers to information regarding an individual’s race, ethnic origin, marital status, age, color, religious/philosophical affiliations, health, education, genetic or sexual life, or any government-issued identification numbers.
4. "Processing" refers to any operation or set of operations performed upon Personal Data, including collection, recording, organization, storage, updating, modification, retrieval, consultation, use, consolidation, blocking, erasure, or destruction.
5. "Personal Information Controller" (PIC) refers to the Institution, which controls the collection, holding, processing, or use of Personal Data.

3. SUBSTANTIVE TERMS & OBLIGATIONS

1. Lawful Basis for Processing: The Institution shall only process Personal Data based on the express consent of the Data Subject, contractual necessity, legal obligation, or the protection of the vital interests of the Data Subject.
2. Collection Limitation: The Institution shall collect Personal Data only for specified, explicit, and legitimate purposes directly related to the provision of educational services.
3. Data Security: The Institution shall implement robust organizational, physical, and technical security measures—including, but not limited to, encryption, firewalls, and restricted access protocols—to protect against unauthorized access, alteration, or disclosure.
4. Data Retention: Personal Data shall be retained only for the duration necessary to fulfill the purposes for which it was collected or as required by [Jurisdiction] educational record-keeping statutes.
5. Rights of the Data Subject: The Data Subject reserves the right to: (i) be informed of data collection; (ii) object to processing; (iii) access data; (iv) rectify inaccuracies; and (v) request erasure or blocking of data, subject to legal limitations.

4. DEFAULT, TERMINATION, AND REMEDIES

1. Breach Classification: A breach of this Agreement includes any unauthorized disclosure, misuse of Personal Data, or failure to implement stipulated security measures.
2. Notice and Cure: In the event of a breach, the non-breaching party shall provide written notice to the breaching party. The breaching party shall have [30] business days from the receipt of such notice to cure the breach to the reasonable satisfaction of the aggrieved party.
3. Termination: Continued failure to cure a material breach within the notice period shall grant the non-breaching party the right to terminate this data processing relationship immediately, without prejudice to any other legal remedies available under [Jurisdiction] law.
4. Liquidated Damages: If applicable, the breaching party may be liable for damages in the amount of [Dollar Amount] per occurrence of willful negligence, to the extent permitted by law.

5. BOILERPLATE LEGAL PROVISIONS

1. Severability: If any provision of this Agreement is held to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.
2. Entire Agreement: This document constitutes the entire agreement between the Parties concerning the subject matter hereof and supersedes all prior agreements or understandings.
3. Force Majeure: Neither party shall be liable for failure to perform its obligations under this Agreement due to events beyond its reasonable control, including acts of God, war, terrorism, or systemic infrastructure failure.
4. Governing Law: This Agreement shall be governed by and construed in accordance with the laws of [Jurisdiction].
5. Dispute Resolution: Any dispute arising from this Agreement that cannot be settled amicably shall be submitted to [Binding Arbitration / Courts of Jurisdiction] in [City/State].

6. FORMAL EXECUTION BLOCK

FOR THE INSTITUTION:

Signature: __________________________ Name: _____________________________ Title: Data Privacy Officer / Authorized Representative Date: ______________________________

FOR THE DATA SUBJECT:

Signature: __________________________ Name: _____________________________ Date: ______________________________