This document was reviewed and edited on November 6th, 2023 by Khuloud Hajjiri, Director of Student Information Services and DPO

At ACS, we are determined in our commitment to safeguarding the privacy and personal information of all our community members. This commitment is rooted in our alignment with the principles delineated in the European Union General Data Protection Regulation (GDPR) or any other relevant regulatory framework as determined by the Board of Trustees. We recognize the paramount importance of upholding this commitment, and to this end, ACS has established a comprehensive and robust set of practices and systems that are fully aligned with GDPR provisions and other pertinent regulations. Our overarching goal is to protect data in strict accordance with the law, established data protection best practices, and widely accepted guidelines.

ACS General Guidelines for Data Collection:

  • Lawful, Fair, and Transparent Processing: All data collected by ACS is processed lawfully, fairly, and with complete transparency. We are always available to clarify the specific legal basis for processing, whether it is a statutory or contractual requirement, or a necessity to enter into an agreement. Your privacy and data protection are of utmost importance to us, and we are committed to being transparent in our operations.
  • Specific, Clear, and Legitimate Purpose: Data is collected only for specific, clear, and legitimate purposes that are explicitly defined. We may process your Personal Information based on specific criteria, including:
    • Your explicit consent for one or more specific purposes. It's important to note that, in certain jurisdictions, we may process information until you opt-out without solely relying on consent, particularly in accordance with European data protection laws.
    • The necessity of information provision for the performance of an agreement with you or to fulfill any pre-contractual obligations.
    • Compliance with legal obligations to which you are subject.
    • Processing is required for tasks carried out in the public interest or in the exercise of official authority vested in us.
    • Processing for the legitimate interests pursued by us or by a third party.
  • Data Adequacy, Relevance, and Limitation: We ensure that the data collected is adequate, relevant, and limited to what is strictly necessary for its intended purposes. The information we gather serves multiple purposes, all aimed at enhancing your experience and maintaining the quality of our services. This includes tailoring your experience on our website, enhancing our website's functionality, improving our customer support by promptly addressing inquiries and emails, delivering informative newsletters, and sending essential notification emails like password reminders and updates.
  • Data Accuracy and Regular Updates: Accuracy is a cornerstone of our data handling. We commit to maintaining data accuracy and, when necessary, updating it promptly.
  • Data Retention Period: Data is retained only for the period required to fulfill its intended purposes, and we dispose of it securely when it is no longer needed.
  • Secure Data Processing: ACS employs rigorous security measures to protect data from unauthorized access, breaches, and other security threats.
  • Third-Party Sharing Consent: Personal data is not shared with third parties without the explicit consent of the individuals concerned.
  • No Commercial Data Sharing or Sale: ACS is steadfast in its resolve not to share or sell personal data to third-party vendors for commercial purposes.

It's important to note that personal data includes any information that can identify an individual, such as their name or address. Sensitive personal data encompasses a broader spectrum of details, including but not limited to religious and political views, genetic data, and more.

This Data Protection Policy serves as a foundational pillar of ACS's commitment to privacy and data security, and we will continually review and enhance our practices to stay in compliance with evolving regulations and standards. We are dedicated to ensuring that your personal information remains safe and confidential while under our care.