Privacy Policy

---

1. INTRODUCTION

We, WST Education Corp. (hereinafter – WST, the Institution), take care of the security of your personal data (personal data means any information that relates to an identified or identifiable living person, such as the name, surname, address, email address, website behaviour, etc.). The Privacy Notice below is addressed to all persons who contact, employ, apply for, or otherwise engage with the Institution, use the Institution’s services, or otherwise provide their personal data to the Institution.

This Privacy Notice is based on applicable legal acts and guidelines, such as the General Data Protection Regulation (hereinafter – the GDPR), the Law on Legal Protection of Personal Data, and the guidelines of the State Data Protection Inspectorate (hereinafter – the SDPI). The purpose of the Privacy Notice is to set out the rights and obligations of data subjects, as well as other information that is required to be provided under the GDPR.

The services of the Institution are not intended for children (i.e. persons under 14 years of age).

 2. DATA CONTROLLER

The public institution WST Education Corp., legal entity code: 1352236-9, registered office address  1203-33 Bay St, Toronto, ON M5J 2Z3, Canada, is the data controller (as defined in the GDPR) of the personal data described in this Privacy Notice.

3. DATA PROTECTION OFFICER

WST Education Corp. has appointed the Data Protection Officer (hereinafter – the DPO) in accordance with Article 37 of Section 4 of the GDPR, who can be contacted by email: info@wst.global

4. WHEN DO WE PROCESS YOUR DATA?

Data may be processed, for example, in the following cases, when:

You provide the data, e.g., when applying for a job, browsing a website or social networks, making an email enquiry or subscribing to a newsletter;

The data is provided by the entity / company where you work or otherwise belong and which has a contractual or legal relationship with WST Education Corp;

Participating in public tenders;

When you use our services;

The Institution submits a request on the basis of the legitimate interest (e.g., to Sodra, credit rating companies, public registers, etc.);

We receive data from other sources who pass it on to us as part of our work to comply with orders of public authorities, etc;

We obtain data from public sources when it is published by you or the company / Institution you represent.

5. WHAT PRINCIPLES DO WE FOLLOW WHEN PROCESSING YOUR DATA?

The processing shall be carried out on the basis of the following principles specified in Article 5 of the GDPR:

the principle of lawfulness, fairness and transparency;

the principle of purpose limitation;

the principle of data minimisation;

the principle of accuracy;

the principle of storage limitation;

the principle of integrity and confidentiality.

The Institution takes appropriate technical and organisational measures in order to ensure that it is able to meet the obligation under the accountability principle.