Personal Data Protection Policy
This Data Protection Policy outlines the management of Personal Data in accordance with the Personal Data Protection Act (“PDPA”).
This policy seeks the understanding for the purposes for which MGS collects, uses and/or discloses Personal Data. This policy states the agreement and consent given to MGS as well as authorised service providers and relevant third parties collecting, using, disclosing and/or sharing Personal Data as stated in this Data Protection Policy.
MGS may update this Policy to ensure that it is consistent with any changes in legal or regulatory requirements. If any change is made, it will be published at the school’s website https://mgs.moe.edu.sg.
1. Personal Data
In this Data Protection Policy, “Personal Data” refers to any data or information from which a person can be identified either (a) from that data; or (b) from that data and other information to which the school has or is likely to have access. Examples of such Personal Data include Full name, NRIC Number or FIN (Foreign Identification Number), Passport number, Photograph or video image of an individual, Mobile telephone number, Personal email address, Thumbprint, DNA profile and any other information relating to the person that has been provided to the school in one form or another.
2. Collection of Personal Data
MGS may collect Personal Data as follows:
(a) Through an application to join the school for work or study;
(b) Through an application to be a service provider to the school;
(c) Through the interaction with MGS staff for official purposes;
(d) When responding to a request for additional Personal Data;
(e) When Personal Data is submitted to the school for any other reason.
3. Purposes for the Collection, Use and Disclosure of Personal Data
MGS may collect, use and/or disclose Personal Data as follows:
(a) Evaluative purposes;
(b) Educational and student care purposes;
(c) Administration purposes;
(d) Publicity and communication purposes;
(e) Verification and update purposes
(f) Conducting research for statistical profiling and other purposes to review, develop and improve the services of the school
(g) Conducting financial reporting and analysis related to the school operations;
(h) Managing the school infrastructure and business operations and complying with internal policies and procedures;
(i) archival of documents and records ;
(j) Managing and terminating an employment relationship.
(k) Security purposes
(l) Any other purposes which the school may notify you of at the time of obtaining your consent.
4. Disclosure of Personal Data
Personal Data will be protected and kept confidential but, this is subject to the provisions of any applicable law. MGS will not disclose your personal data to third parties without first obtaining your consent permitting to do so. However, please note that MGS may disclose your personal data to third parties without first obtaining your consent in certain situations where such disclosure without your consent is permitted by the PDPA or by law. For more information on the exceptions, you are encouraged to peruse the Second, Third and Fourth Schedules of the PDPA which is publicly available at https://statutes.agc.gov.sg.
5. Administration and Management of Personal Data
MGS will take reasonable effort to ensure that your personal data is accurate and complete. However, you must also update MGS of any changes in your personal data that you had initially provided. MGS will not be responsible for relying on inaccurate or incomplete personal data arising from you not updating MGS of any changes in your personal data that you had initially provided.
MGS will also put in place reasonable security arrangements to ensure that your personal data is adequately protected and secured. Appropriate security arrangements will be taken to prevent any unauthorised access, collection, use, disclosure, copying, modification, leakage, loss, damage and/or alteration of your personal data. However, MGS cannot assume responsibility for any unauthorised use of your personal data by third parties which are wholly attributable to factors beyond MGS’s control.
MGS retain personal data in accordance with legal, regulatory, business and operational obligations. When MGS cease retention, the personal data will be disposed of in an appropriate manner.
6. Withdrawal of Consent
Withdrawal of consent for the collection, use and/or disclosure of personal data in MGS’s possession can be made in person at the MGS office, by telephone or by email to the MGS Data Protection Officer (DPO) at firstname.lastname@example.org (Primary School) or email@example.com (Secondary School).
From such a request for withdrawal of consent being made, MGS will process the request and thereafter not collect, use and/or disclose your personal data in the manner stated in your request. Please note that with the withdrawal of consent to any or all use or disclosure of personal data, depending on the nature of the request, MGS may not be in a position to continue to provide the services or administer any contractual relationship that is in place. Such withdrawal may also result in the termination of any agreement with MGS. MGS’s legal rights and remedies are expressly reserved in such a case.
7. Access and Correction of Personal Data
Request can be made to have access to or make corrections to Personal Data records, but MGS has the right to charge a reasonable fee for processing such a request. Such request can be submitted in person at the MGS office, by telephone or by email at firstname.lastname@example.org (Primary School) or email@example.com (Secondary School).
8. Contacting MGS
For any question or complaint relating to the use or disclosure of Personal Data, or if more information about MGS data protection practices is needed, please contact MGS Data Protection Officer in person at the MGS office, by telephone or by email at firstname.lastname@example.org (Primary School) or email@example.com (Secondary School).