Privacy policy

The data controller

Knowledge Tree S.R.L., with its registered office at Str. Alunului nr. 5, ap. 1, Hălchiu, Brașov county, Romania, registered with the Trade Register under no. J2022002544083, tax ID (CUI) 46649163, hereinafter "KTIS" or "we", operates Knowledge Tree International School at Str. Bucegi nr. 1B, Brașov, and is a data controller under Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.

For any question about the processing of your personal data, you can contact us at office@ktis.ro or +40 720 553 399.

What data we collect

We collect personal data when you:

• fill in a contact or visit-booking form on the site;
• fill in an enrolment/admissions form (Google Forms) for yourself or your child;
• subscribe to the KTIS newsletter (Substack);
• browse the site, where technical data is collected through cookies (see the Cookie policy);
• contact us via WhatsApp, phone, or e-mail.

The data may include: first and last name, e-mail address, phone number, the child's age and school year, information about their previous educational path, and any other information you voluntarily provide in the forms.

The admissions form may also include information about the child's health or special educational needs (SEN), where the family chooses to share it with us. This is special-category data within the meaning of Art. 9 GDPR, and we process it solely on the basis of the parent's or legal guardian's explicit consent, only for the purpose of properly organising the educational process.

Why we process this data

• to answer information requests and visit bookings;
• to manage the admissions and enrolment process;
• to send communications (newsletter), with your explicit consent;
• to improve the site and our communication campaigns, based on your consent to analytics and marketing cookies;
• to comply with legal obligations (e.g. retaining school records as required by education law).

Legal basis

Processing is based, as applicable, on: your consent (newsletter, marketing cookies), the performance of a contract or pre-contractual steps (the admissions process), KTIS's legitimate interest (responding to enquiries), or a legal obligation (archiving school records). For special-category data (e.g. health or SEN information), the basis is explicit consent under Art. 9(2)(a) GDPR.

Children's data

As a school, we process data about minors solely with the consent of a parent or legal guardian, for the purposes of admission and of carrying out our educational activity. We do not use children's data for marketing purposes.

Who we share data with

We may share data with service providers that support our activity, such as:

• Google (Google Forms, Google Ads, Google Tag) — for forms and advertising;
• Meta (Meta Pixel) — for advertising on Facebook/Instagram;
• Substack — for managing the newsletter;
• DINTECH SMART SOLUTIONS S.R.L. — the hosting provider of ktis.ro.

We do not sell your data to third parties.

How long we keep data

Data from contact forms is kept for up to 24 months from the last interaction, unless you request earlier deletion. Data related to the admissions process and school records is kept for the periods required by education law. Your newsletter subscription remains active until you unsubscribe.

Your rights

Under the GDPR you have the right to request: access to your data, rectification, erasure, restriction of processing, data portability, and the right to object to processing. You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP), www.dataprotection.ro.

To exercise these rights, contact us at office@ktis.ro.

Changes to this policy

This policy may be updated from time to time. We recommend reviewing it regularly.