个人资料保护法令

HCIS Personal Data Protection Policy
1.0 Introduction
We, at Hwa Chong International School (“HCIS”), take our responsibilities under the Personal Data Protection Act 2012 (the “PDPA”) seriously. We also recognize the importance of the personal data you have entrusted to us and believe that it is our responsibility to properly manage, protect and process your personal data.
This Data Protection Policy is designed to assist you in understanding how we collect, use and/or disclose the personal data you have provided to us, as well as to assist you in making an informed decision before providing us with any of your personal data.
If you, at any time, have any queries on this policy or any other queries in relation to how we may manage, protect and/or process your personal data, please do not hesitate to contact our Data Protection Officer (the “DPO”) at:
  • Telephone number : (65) 6427 4087
  • Email Address : dp@hcis.edu.sg
2.0 Introduction to Personal Data Protection Act
“Personal Data” is defined under the PDPA as data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which an organization has or is likely to have access. Common examples of personal data could include names, NRIC, FIN or Passport number, contact information, medical records, thumbprint, photographs and video images.
We will collect your personal data in accordance with the PDPA. In general, before we collect any personal data from you, we will notify you of the purposes for which your personal data may be collected, used and/or disclosed, as well as obtain your consent for the collection, use and/or disclosure of your personal data for the intended purposes.
3.0 Purpose of Collection, Use & Disclosure of Personal Data
3.1 Depending on your relationship with us (e.g. as an applicant, student, parent, guardian, staff, vendor, service provider, or other person relating to our organisation), the personal data which we collect from you may be used and/or disclosed for the following purposes:
  1. Evaluating suitability for admission or employment, enrolment or employment, providing educational services and teaching, including sending materials on course / study / assignment / study notes, information on time tables and examination details via postal mail, electronic mail, WhatsApp, SMS or MMS, fax and/or voice calls, or any mode of communication platform or media.
  2. Administering and/or managing relationships with HCIS (including responding to enquiries, the mailing of correspondence, statements or notices which could involve the disclosure of certain personal data to bring about delivery of the same);
  3. Carrying out due diligence or other screening activities (including background checks) in accordance with legal or regulatory obligations or risk management procedures that may be required by law or put in place by HCIS, including the obtaining of references and/or other information from prior educational institutions and employers;
  4. Processing application(s) for scholarships and administering and managing scholarship and/or financial aid, and bursary, and other support programmes, which may include use of personal data for development and disclosure of personal data to external organisations for purposes of periodic reports, event invitations, surveys and/or publicity of HCIS’ related programmes;
  5. Investigating possible fraud, misconduct, unlawful action or omission, and utilizing electronic access and video systems to maintain campus security of persons or property, control access and investigate suspicious or inappropriate activities;
  6. Responding to requests for information from government or public agencies, ministries, statutory boards or other similar authorities or non-government agencies authorised to carry out specific Government services or duties;
  7. Carrying out market-related, evaluative or similar research and analysis for HCIS’ operational strategy and policy planning purposes, including providing data to external parties for school programme evaluation;
  8. Supporting HCIS functions including, but not restricted to, the teaching and personal and professional development of students, and administration of HCIS;
  9. Processing and administering applications for overseas exchange programmes, and other overseas activities and administering such programmes including disclosure of information to overseas universities, employing and training organisations;
  10. Processing, administering and conferring awards of prizes, medals, scholarships, school topper and other marks of distinction, and student or graduation status, and publication or releasing of information on the same;
  11. Processing applications and enrolment activities related to medical insurance and service provision, home stay or boarding and administering matters related to use of these services;
  12. Processing applications for and administering local and overseas study related activities, events, programmes, and career coaching, and sharing information with companies (whether local or overseas) for purposes of recruitment;
  13. Taking of photographs and/or videos (whether by HCIS staff or third party photographers and/or videographers) during events or seminars organised by HCIS or its affiliates for publicity purposes;
  14. If consented to in the registration form and/or other methods of consent notification, providing marketing, advertising and promotional information via postal mail, electronic mail, SMS or MMS, fax and/or voice calls or any mode of communication platform or media.
  15. Any other purposes which HCIS may inform you of in writing from time to time, but for which HCIS will seek your separate consent.
3.2 In order to conduct our operations more smoothly, we may also be disclosing the personal data you have provided to us to our third party service providers, agents and/or our affiliates, which may be sited locally or outside of Singapore, for one or more of the above-stated Purposes. This is because such third party service providers, agents and/or affiliates would be processing your personal data on our behalf for one or more of the above-stated Purposes.
4.0 Specific Issues for the Disclosure of Personal Data to Third Parties
4.1 We respect the confidentiality of the personal data you have provided to us.
4.2 In that regard, we will not disclose any of your personal data to any third parties without first obtaining your consent permitting us to do so. However, please note that we may disclose your personal data to third parties without first obtaining your consent in certain situations, including, without limitation, the following:
  1. the disclosure is required based on the applicable laws and/or regulations;
  2. the purpose of such disclosure is clearly in your interests and consent cannot be obtained in a timely way;
  3. the disclosure is necessary to respond to an emergency that threatens the life, health or safety of yourself or another individual;
  4. there are reasonable grounds to believe that the health or safety of yourself or another individual will be seriously affected and consent for the disclosure of the data cannot be obtained in a timely way, provided that we shall, as soon as may be practicable, notify you of the disclosure and the purposes of the disclosure;
  5. the disclosure is necessary for any investigation or proceedings;
  6. the personal data is disclosed to any officer of a prescribed law enforcement agency, upon production of written authorization signed by the head or director of that law enforcement agency or a person of a similar rank, certifying that the personal data is necessary for the purposes of the functions or duties of the officer; and/or
  7. the disclosure is to a public agency and such disclosure is necessary in the public interest.

4.3 The instances listed above at paragraph 4.2 are not intended to be exhaustive. For an exhaustive list of exceptions, you are encouraged to peruse the PDPA which is publicly available at https://sso.agc.gov.sg//Act/PDPA2012

4.4 In all other instances of disclosure of personal data to third parties with your expressed consent, we will provide adequate forms of protection over such personal data and confidentiality and security in the handling and administration of your personal data by such third parties in compliance with the PDPA and our data protection policies.
5.0 Request for Access, Correction and/or Withdrawal of Personal Data

5.1 You may request to access and/or correct the personal data currently in our possession or withdraw your consent for the collection, use and/or disclosure of your personal data in our possession or under our control at any time by submitting your request through the following methods:

 

 

5.2 For a request to access personal data, we will process your request after undertaking necessary verification activities and provide you with the relevant personal data within 7 (seven) working days from date of request. We will be charging you a reasonable fee of $20.00 for every request as an admin fee for the handling and processing of your requests to access your personal data, but you will be notified in advance of such costs.

 

5.3 For a request to correct personal data, we will process your request after undertaking necessary verification activities. We will send the corrected personal data to every other organisation to which the personal data was disclosed by HCIS within a year before the date the correction was made, unless that other organisation does not need the corrected personal data for any legal or business purpose, or if you so consent, only to specific organisations to which the personal data was disclosed by us within a year before the date the correction was made.

 

5.4 For a request to withdraw consent, we will process your request within 7 (seven) working days from such a request for withdrawal of consent being made. Requests for withdrawal of consent may adversely impact your relationship with HCIS. We will notify you in advance of such impacts.

 

5.5 Exemptions to Right of Access
The PDPA does not provide the right of access to any and all information held by an organisation. Therefore the school retains the right to refuse access to:

 

  • Opinion data kept for evaluative purposes;
  • Examination papers or the results of examinations;
  • Confidential references written to support a student’s application to other educational institutions or courses;
  • Data or material that provides personal data about other individuals in contravention of this policy or the PDPA.
  •  
6.0 Administration of Personal Data
  1. We will take appropriate measures to keep your personal data accurate, complete and updated.
  2. We will also take reasonable efforts to take appropriate precautions and preventive measures to ensure that your personal data is adequately protected and secured. Appropriate security arrangements will be taken to prevent any unauthorized access, collection, use, disclosure, copying, modification, leakage, loss, damage and/or alteration of your personal data. However, we cannot assume responsibility for any unauthorized use of your personal data by third parties which are wholly attributable to factors beyond our control.
  3. We will also take reasonable efforts to ensure that the personal data in our possession or under our control is destroyed and/or anonymized as soon as it is reasonable to assume that
    a. the purpose for which that personal data was collected is no longer being served by the retention of such personal data; and
    b. retention is no longer necessary for any other legal or business purposes.
  4. This Data Protection Policy applies only to HCIS websites. Our websites may contain links to other websites not maintained by HCIS. Such third party websites are subject to their own data protection and privacy practices and you are encouraged to examine the privacy policies of those websites.
7.0 Updates on Data Protection Policy
  1. As part of our efforts to ensure that we properly manage, protect and process your personal data, we will be reviewing our policies, procedures and processes at least once a year.
  2. We may amend the terms of this Data Protection Policy at our absolute discretion.Any amended Data Protection Policy will be posted on our website.
  3. You are encouraged to check the Hwa Chong International School’s Data Protection Policy from time to time to ensure that you are well informed of our latest policies in relation to personal data protection.
8.0 Forms
  1. To view Complaint Form for Misuse of Personal Data, please click here
  2. To view Personal Data Correction Request Form, please click here
  3. To view Withdrawal of Consent Request Form, please click here
  4. To view Photo, Video and Testimonial Consent & Release Form, please click here
×