OMNI TUTORING (UK) LIMITED with registered office at 325 - 327 Oldfield Lane North, Greenford, Middlesex, United Kingdom, UB6 0FX (Company number 12798805) (“us”, or “we”), is Data Controller in respect of your personal data. This Privacy Notice provides detailed information on the collection, processing and storage of your personal data operated by us. If you have any questions about this Privacy Notice, you can contact us via email@example.com.
We have appointed a representative based in the EU, who you may address if you are located in the EU to raise any issues or queries you may have relating to the processing of your personal data. Our EU representative is: OMNI ADMISSIONS S.R.L., with registered office in Milan (MI), via Vincenzo Monti n. 34 (vat / tax code 08183980963). Our EU representative can be contacted directly by emailing them at the following email address: firstname.lastname@example.org.
Please read the following carefully to understand our practices regarding your personal data and how it will be treated.
- "Users": any person to whom we provide consultancy work to pursuant to the Contract.
- "personal data": any information concerning a person that makes that person identifiable.
- "Contract": the contract under which we provide consultancy work in favour of Users.
3. WHAT PERSONAL DATA WE COLLECT ABOUT YOU
We acquire, process and store the personal data of potential, current and previous Users and their respective parents as well as anyone exercising parental responsibility over the Users and, in any case, of anyone who consents to the processing of their personal data by us for the purposes set out in paragraph 8. Personal data which is submitted to us may include:
- names, surnames, places of birth, nationalities, social security numbers, addresses, email addresses, telephone numbers, Skype contacts or other videoconferencing platforms, static copy of identity documents and / or passports;
- schools attended, school assessments, documentation relating to education, language certifications, exams taken, school subjects of excellence, academic or sports qualifications, experiences at summer schools or voluntary associations, curricula, interests, internships and professional internships brought to term, preferred university path, chosen university path, results obtained in the admission and assessment tests, result obtained in the Morrisby test, interviews sustained or to be sustained with universities, information on the profession of parents or anyone exercising parental responsibility over Users;
- your marketing preferences;
- any payment methods and other financial and/or credit information.
Other types of data acquired, processed and stored by us may include special category data such as:
- medical and health information, demographic information, any certified learning disabilities, any handicaps, the state of health, any insurance coverage, any criminal records, biometric data or ethnicity data.
Such special category data will only be acquired, processed and stored by us where we have your explicit consent.
If you contact us with a complaint or query, we may keep a record of any phone number used to call us as well as the correspondence and the period of time it took for us to deal with a query or any request you had. We may also record your levels of satisfaction with the services we have provided.
When you visit our website, we may also collect information from you automatically, for example by using cookies and other similar technologies. A cookie is a small file of letters and numbers that we may set on your device. This type of information may include the following:
- information about your device operating system and IP address;
- your login information;
- browser type and version; and
- information about your visit on our website, including URL, clickstream (i.e. your journey to, through and from our site), length of visits to certain pages, and page interaction information.
The cookies we use fall into the following categories:
- Session cookies: These allow our site to link your actions during a particular browser session. These expire each time you close your browser and do not remain on your device afterwards.
- Persistent cookies: These are stored on your device in between browser sessions. They allow your preferences or actions across the site to be remembered. These will remain on your device until they expire, or you delete them from your cache.
- Strictly necessary cookies: These cookies are essential for you to be able to navigate the site and use its features. Without these cookies, the services you have asked for could not be provided.
- Performance cookies: These cookies collect information about how you use our site, e.g. which pages you go to most often.
- Functionality cookies: These cookies allow the site to remember the choices you make (such as your user name, language, last action and search preferences) and provide enhanced, more personal features.
If you do not wish for cookies to be installed on your device, you can change the settings on your browser or device to reject cookies. For more information about how to reject cookies using your internet browser settings please consult the “Help” section of your internet browser (or alternatively visit http://www.aboutcookies.org). Please note that, if you do set your internet browser to reject cookies or otherwise withdraw your consent in relation to cookies, you may not be able to access all of the functions of the site.
4. METHODS OF PERSONAL DATA COLLECTION
We collect your personal data in various ways, including:
- when you contact us;
- by electronic and paper documentation, including contact emails, registration forms, contracts entered into with us, contact forms completed on our website or on other sites that collaborate with us, digital apps, social media, emails, paper letters, consent forms, via our website, invoices or accounting documents;
- by producing static copies of identity documents, passports or other personal documents required if necessary;
- by means of surveillance cameras installed in our premises or webcams;
- through third parties, such as contact persons, schools or professionals; and
- by means of publicly available resources.
5. LEGAL BASIS FOR PROCESSING
We will only process your personal data where we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and used your personal data. In almost every case the legal basis will be one of the following: - Consent: For example, where you have provided your consent to receive the services or other information (including marketing) from us. You can withdraw your consent at any time.
- Our legitimate business interests: Where it is necessary for us to understand our customers, promote our services and operate effectively, provided in each case that this is done in a legitimate way which does not unduly affect your privacy and other rights.
- Performance of a contract with you (or in order to take steps prior to entering into a contract with you): For example, where you have decided to engage our services and we need to use your contact details and payment information in order to provide the services to you.
- Compliance with law: Where we are subject to a legal obligation and need to use your personal data in order to comply with that obligation.
6. METHODS OF DATA PROCESSING
We process your personal data in accordance with the provisions of the GDPR. The processing will be carried out using automated, manual, paper-based methods and will take place using suitable tools to guarantee adequate security and confidentiality through internal procedures and security software that avoid the risk of loss, unauthorized access and accidental dissemination of the same.
7. DATA RETENTION
Your personal data may be kept by us for ten (10) years from the last activity carried out or in any case for all the time necessary to carry out the purposes referred to at paragraph 8 below. After this period, we will delete your personal data or may keep the data in anonymous form and for statistics.
The personal data will be stored on paper and computer media suitable for preventing or minimizing the risks i) of accidental destruction or loss of the personal data, ii) any unauthorized access, iii) a processing that does not comply with the purposes set out at paragraph 8 below or in any case not allowed or contrary to the consent given by you.
8. PURPOSE OF PROCESSING
We may process your personal data mainly for the purpose of carrying out consultancy work and all the other obligations referred to in the Contract.
In particular, personal data will be processed by us in order to:
- Contact you personally, by telephone, email, social media and any other means of communication as part of our services to you.
- Express an evaluation on the academic and extracurricular profile of the Users.
- Arrange all activities for Users to take the Morrisby Test and to evaluate the Morrisby Profile.
- Search and select summer activities for Users in order to enhance their curriculum.
- Evaluate the preparation for any university entrance tests (SAT / ACT / SAT Subject Test), through diagnostic tests.
- Create an activity plan that allows Users to fill any gaps in the profile and support them in the final choice of study area (UCAS).
- Research and select universities in the United States, in the UK (non-selective universities) and in the rest of Europe with the aim of identifying the ideal matching between the specific requirements of each course and the profile of the Users.
- Draw up a preparation plan for any language and entry tests with the selection of the most suitable offer for Users by specialized tutors.
- Collaborate with Users in the drafting of the CV in English.
- Offer support to Users in filling out online applications (UCAS application for UK non-selective / 8 application USA with supplement in Common App / direct application at Bocconi) and supervise the submission procedure and the post-submission procedure.
- Help with the organization of any visits to universities, including international ones.
- Support Users in analysing the offers received and managing the selected offers.
- Support Users in choosing the university as well as any further necessary activities, not expressly provided herein, aimed at this purpose.
- Inform parents or anyone exercising parental responsibility over Users about the progress of the advice put in place by us.
- Make reasonable adjustments and provide support to Users with special needs.
- Provide a safe and secure working environment.
- Promote us through the website, social media, radio, television or any other suitable means of communication (in case of use of the personal image, a specific release will be required).
- Propose commercial offers, send newsletters, invite to events, presentations, open days, meetings.
- Manage invoices, fees and accounts, as well as the management of security provisions, management planning and forecasting, research and statistical analysis, the conservation of historical archives and further operational purposes related to the above.
9. WHERE WE STORE YOUR PERSONAL DATA
The personal data that we collect may be transferred to, and stored at, a destination outside the EEA or the UK, including countries, which have less strict, or no data protection laws, when compared to those in the EEA or the UK.
Whenever we transfer your information as described in the paragraph above, we will take steps which are reasonably necessary to ensure that adequate safeguards are in place to protect your personal information and to make sure it is treated securely and in accordance with this Privacy Notice. In these cases, we rely on approved data transfer mechanisms (such as standard contractual clauses) to ensure your information is subject to adequate safeguards in the recipient country. If you are located in the UK or the EEA, you may contact us for a copy of the safeguards which we have put in place to protect your personal information and privacy rights in these circumstances.
10. COMMUNICATION OF PERSONAL DATA TO THIRD PARTIES
We may share your personal data with third parties where they are helping us provide the services to you such as to our tutors or we may share your personal data with Universities.
We may disclose your personal information to other third parties in the following cases:
- for the purposes of research, evaluation, and analysis;
- in the event that we sell any business or assets, in which case we may disclose your personal information to the prospective buyer of such business or assets;
- if we or substantially all of our assets are acquired by a third party, in which case personal information held by us about our customers and visitors to our websites will be one of the transferred assets;
- if we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation or request; or
- to protect the rights, property or safety of us or our users, or others, and in order to enforce or apply our terms and conditions (this includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction).
11. YOUR RIGHTS
Under the GDPR, you have certain rights in relation to your personal data. These include rights to:
- access your personal data;
- request your personal data to be rectified, integrated and updated;
- request that your personal data be deleted;
- request data portability;
- request to object or limit the processing of your personal data; and
- lodge a complaint to the relevant data protection authority. We will handle any request to exercise your rights in accordance with applicable law and any relevant legal exemptions. If you wish to exercise any of these rights please contact us at email@example.com. As above, you have the right to complain to a data protection authority if you think we have processed your personal information in a manner which is unlawful or breaches your rights. If you have such concerns we request that you initially contact us (at firstname.lastname@example.org) so that we can investigate, and hopefully resolve, your concerns.
If you are a parent or guardian, you have the right to request information relating to you or the relevant User however we may require the consent of the Users themselves in the event that they are of an age for which it is possible to understand the implications of such a request. We will handle any such request in accordance with applicable law and any relevant legal exemptions.
We cannot disclose confidential information that is related to the purpose of providing education, examinations or providing examination papers to external entities or individuals. We are not authorized to disclose the confidential information of staff or tutors.
12. UPDATING THIS PRIVACY NOTICE AND CONTACTING US
We may update this Privacy Notice from time to time. Any substantial change that may affect you and the processing of your personal data will be notified on the website or through a specific newsletter. This Privacy Notice must be read in conjunction with our other policies and any contractual terms and conditions. Questions and comments regarding this Privacy Notice should be sent to: email@example.com.
This Privacy Notice was last updated in April 2021.