Responsible handling of personal data

Privacy Notice

This notice describes the principles that govern personal data handled through IASCU’s institutional activities and website.

Controller

International Association for Schools, Colleges and Universities, Rudolfingerstrasse 2, 8466 Trüllikon, Canton of Zürich, Switzerland. A dedicated privacy contact will be published when the verified channel is operational.

Data categories

IASCU may process authorised contact details, correspondence, application records, event records, publication contributions, consent records and technical security data.

Purposes

Data should be processed only for governance, membership administration, programme delivery, communications, legal compliance, security and the handling of rights or concerns.

Legal basis

The applicable basis depends on the activity and may include contract, legal obligation, legitimate interest or consent.

Public information

Personal information is published only where there is a valid institutional purpose and appropriate authority or consent.

Recipients

Access should be limited to authorised personnel and contracted processors that need the information for a defined purpose.

International transfers

Cross-border processing requires an appropriate legal mechanism and proportionate safeguards.

Retention

Records should be retained only for an approved period based on purpose, legal requirements and institutional accountability.

Rights

Applicable rights may include access, correction, deletion, restriction, objection and withdrawal of consent.

Automated decisions

IASCU does not use solely automated decision-making to admit or remove members.

Security

Controls should include access restriction, secure transmission, logging, backup and incident response.

Children

IASCU does not intentionally collect children’s personal data through general website functions.