The International Baccalaureate Organization, a Swiss foundation, with a registered address at Route des Morillons 15, 1218 Le Grand-Saconnex, Geneva, Switzerland on behalf of itself and/or via its affiliates or branches worldwide (the “IB” or “we” or “us”) owns and operates several websites, including www.ibo.org.
I. COLLECTION OF PERSONAL DATA
“Personal data” is any data or information that personally identifies a person or that, together with any other available data, makes any person identifiable to another.
Some of the IB’s Services do not require any personal data from you. However, in many cases, the IB may require personal data directly from you when accessing and/or using the Services. It is voluntary and up to you whether to provide the personal data requested by us. However, if you do not choose to give us that information, you may be unable to access or use certain features or areas of our websites and Services.
The type of personal data you will be asked to provide depends on the type of Service you use. Personal data may include, without limitation, your name, address, email address, phone numbers, exam/assessment results, language proficiency, date of birth, education records, free and reduced-cost lunch eligibility status. In some cases, the IB may collect financial information, such as bank details and credit card information, as well as travel information (including passport or contact information for next of kin).
The IB may also collect sensitive personal data such as gender, race/ethnic origin, medical or other information regarding disabilities or other conditions requiring assessment accommodations. Sensitive personal data will not be collected unless it is for a legitimate purpose.
Special Considerations for Minors/Students
The IB has special concerns about the privacy of all IB students, but in particular, children 1) who are under the age of 13 and 2) who over the age of 13 but are under the age of majority (in many jurisdictions, this age is 18). Because the age of majority and consent can vary depending on a student user’s country of residence, the IB has adopted this age (18) as a uniform requirement. In other words, consent from both the student and parent or legal guardian may be required in order for users under 18 years of age to use some of the IB’s Services. Also, we abide by laws designed to protect children.
With respect to children under the age of 13: We do not knowingly collect, maintain or use personal data from anyone under the age of 13 through the Services. If you are under the age of 13, you are not allowed to subscribe to any of the Services or to create an account without the permission of your parent, guardian or teacher. Please do not submit any personal data or information about yourself to us. If a child whom we know to be under age 13 sends personal data or information to us online through the Services, we will only use that information to respond directly to that child, notify parents, or seek parental consent.
Special Considerations for Personal Data Provided by IB Teachers, Coordinators, School Administrators and Other Third Parties
For some Services, IB coordinators, teachers and school administrators may submit personal data about IB students to the IB’s Services (e.g. registration for IB diploma programme exams on the IBIS Service). For such Services, the IB does not have a direct relationship with the individuals (e.g. students) whose personal data may be processed in connection with providing the Services. In these circumstances, the IB coordinators, teachers, and/or school administrators are responsible for ensuring that any such sharing or transfer of personal data to the IB is done accordance with applicable local law and without violating any privacy or data protection rights of any individuals, including, without limitation, providing appropriate notice to the individuals and obtaining any required consents.
As a parent, you should consult your school's policy for more information about the ability of IB coordinators, teachers and school administrators to provide personal data or consent on behalf of parents and students.
As an IB coordinator, teacher or school administrator, you hereby confirm that you have authority to consent and/or provide personal data on behalf of your students and/or student’s parents (as the case may be).
II. PURPOSES FOR PROCESSING AND USE PERSONAL DATA
Your personal data may be collected, processed and/or stored by the IB for the following purposes:
- To register you for IB examinations and assessments;
- To provide assessment accommodations and/or inclusive education arrangements;
- To deliver IB programmes and/or courses in on-line format;
- To upload coursework to the IB;
- To carry out on-line assessment of IB MYP and DP examinations;
- To transmit an IB Diploma Programme or IBCP student’s data or education records to universities, colleges, ministries of education and other institutes of higher education when such student specifically requests the IB to do so or the IB is requested by ministries of education or other governmental authorities;
- To facilitate connections between and recruitment of IB students by higher educational institutions on a registry service;
- To provide information on higher educational institutions’ policies on the recognition of IB programmes and facilitating connections with IB schools.
- To register you for IB event(s) (such as workshops or conferences) that you have chosen and process any required payments; provide you with information relating to the particular IB event(s) for which you have registered;
- To conduct IB run or IB-sponsored research and, support independent research or journalistic work, related to IB programmes, exam results, services and student outcomes, whether using personal data, aggregate or anonymous-, individual-level data;
- To conduct surveys about the Services and related activities to get feedback about the Services and related activities;
- To promote and market the IB and the Services (including IB events or topics that the IB believes would be of interest to you), 1) if you expressly agree and opt-in to receive IB promotional and marketing materials or 2) unless you expressly opt-out of receiving such materials, as may be required under local law.;
- To conduct internal IB reporting on Services and analysis of its Services and activities;
- To identify you when you apply for a password, access password-protected websites or areas of a website, post information to a website )or when you send information to the IB in any form;
- To create your account, password and profile for a Service;
- To fulfill contractual duties toward you, for example, for billing and shipping purposes when processing purchase orders or requests for documents;
- To enforce contractual claims against you (including those that might arise out of your breach of the terms and conditions); and
- To conduct statistical analysis of the IB websites’ user structure, IB programmes, assessment results and other Services.
Accuracy of Personal Data – Self Reported
By using the Services, you agree to provide accurate, complete and up-to-date personal data. Each user of the Services is solely responsible for the personal data he or she provides and agrees that he or she conforms to all local data protection laws.
III. THIRD PARTIES, DISCLOSURE and CROSS-BORDER TRANSFERS
The IB has databases in different countries and your personal data may be used and processed by IB staff, affiliates or contractors in any of the countries in which they are located, including without limitation, the United States. They are obligated to treat your personal data in accordance with IB’s internal global data protection policy.
In addition, as part of operating the Services, the IB may transfer your personal data to third-parties who provide business-related services to the IB (such as providers of cloud hosting solutions; event management services; client relationship management services; travel booking services; payment processing services; registry service providers; assessment service providers, such as examiners, moderators, eMarking service providers; on-line course providers ). Accordingly, your personal data may be transferred to, and further processed by, these third party service providers in connection with their performance of such functions. However, these third parties may not use it for other purposes and have contractual arrangements with the IB that address the privacy and security of such information.
These parties, as well as the IB, may process your personal data worldwide, including, without limitation, Argentina, Australia, Canada, the Netherlands, Singapore, Switzerland, the United Kingdom, and the United States. These countries may have different privacy laws, which, in some cases, may be less adequate or protective, than the privacy laws in your home country. By using the Services, you agree to the worldwide transfer of your personal data and to the transfer to third-parties for the purposes as described above.
Your personal data will not be sold, rented or otherwise made available to third-party marketers or advertisers under any circumstances unless you have expressly consented.
The IB may disclose personal data if it believes, in good faith, that such disclosure is necessary to comply with applicable law, regulatory investigation or inquiries (including economic sanction regulations), to enforce or apply the Terms and Conditions, or to protect the property, rights, or safety of the IB, users of Services, or other third parties.
IV. DATA SECURITY AND STORAGE
To ensure the security and confidentiality of person data that we collect online, we use strong, industry standard security controls throughout our infrastructure and continually monitor the security status of our systems. In the course of handling your personal data, we take measures reasonably designed to ensure secure transmission of information from your computer to our servers when required and to protect that information from loss, misuse, unauthorized access, disclosure, alteration or destruction. Although the IB endeavors to provide a safe environment, please be aware that no security measures are absolute and no data transmission over the Internet can be guaranteed secure.
V. USAGE DATA, INTERNET TAGS, COOKIES and GOOGLE ANALYTICS
For Services that are provided via websites, the IB will automatically collect certain data from users, including but not limited to the date and time of visit, type of browser used, type of Operating System used, Internet Protocol (IP) Address, and aggregate information regarding what pages users of the site access or visit. By accepting this policy and using the Services, you agree to this use.
Cookies are used to personalize the Services for you and make it easier to use. Cookies remember the language you choose when viewing the IB’s websites and make it easier for you to sign in to and navigate the sites. Cookies also allow the IB to record session information to provide better service to users. This information may be used to help improve the design and performance of the Services site and to help analyze and report on IB site usage.
The IB uses a web analytics tool, Google Analytics, to monitor and evaluate site usage.
. Please email the same address to find out what personal data the IB holds about you (or your child). A request of a copy of the personal data we keep about you, depending on the laws of your country, must be made in writing giving details with which the IB can identify you. The IB will assist you with your request in accordance with applicable law and there may be an administrative charge for this service. Personal data provided by email may not be secure, and by requesting a copy of your (or your child's) personal data, you assume the risks associated with the email transmission of our reply.
30 March 2015