Privacy- and cookie statement
For students and parents
This privacy statement was most recently revised in October 2025.
- Introduction
Het Baken Almere processes personal data of students and parents as part of the services we offer as a school. Personal data is any information that relates to an identifiable person, such as a student or a parent. This includes, for example, a name, telephone number, address or gender. It covers all information that can be linked to a student or parent. We obtain personal data when a student is enrolled or attends our school.
Your privacy is of great importance to us. We therefore comply with the General Data Protection Regulation (hereinafter: GDPR). In this privacy statement, we explain how we process your personal data. - How does het Baken Almere use your personal data?
2.1 Why do we process your personal data?
We process your personal data for the following purposes:
a) to prepare, organise and provide education;
b) to train student teachers and trainee teachers;
c) to provide information about the school or school activities;
d) to maintain contact with former students;
e) to carry out research and statistics;
f) to ensure the safety in and around the school premises and to protect the properties, students, parents, staff and visitors by means of camera surveillance;
g) to create and publish school photographs and other images
Under data protection law, we must have a legal basis to process personal data. We may not process personal data without a valid reason. Het Baken Almere relies on the following legal bases:
Legal obligation or public task
In most cases, we process personal data of students and parents in order to fulfil our statutory duties and responsibilities as a school. For example, we need personal data to enrol a student and to monitor their academic progress. In some cases, we are legally required to share personal data with other organisations, for example with authorities responsible for monitoring compliance with compulsory education requirements.
Legitimate interest
We may also process personal data on the basis of a legitimate interest. This means that our interest in processing the data outweighs the privacy interests. An example is the use of personal data in the context of camera surveillance. This is explained further below.
Consent
We may process personal data where consent has been given. For example, we request consent to maintain contact with former students or to use images. Consent may be withdrawn at any time. Processing that took place before consent was withdrawn remains lawful.
Performance of a contract
Generally, we process personal data of students on the basis of our statutory duties or the public interest in providing education as described before. In some cases, a separate agreement may apply, for example in case parents agree to pay a voluntary parental contribution for additional activities outside the compulsory curriculum. To perform such agreements, we need to process certain personal data, such as contact and payment details. We use these data solely for the performance of the relevant contract.
Vital interests
We may process personal data where this is necessary to protect the vital interests of a student or another person. This may apply in emergency situations where medical data must be shared with emergency services. This legal basis is used only in exceptional cases involving the health or safety of a student and not for routine educational activities.
2.2 What kind of personal data do we process?
We process various categories of personal data, obtained either from a student’s previous school or directly from parents. This may include contact details, the citizen service number (BSN) and date of birth. If these data are not provided, we may not be able to fulfil our obligations as a school. Providing these data is therefore a condition for enrolment at het Baken Almere.
We may also process special categories of personal data. These categories are considered to be sensitive data, such as information about health or religion. The processing thereof may be necessary for the wellbeing of the student, insofar as relevant to their education. We will never force a student or parent to provide such data.
Below, we explain which personal data we process for each purpose.
2.3 Overview of processing activities
Preparing, organising and providing education
We process personal data to fulfil our duties as a school. This includes enrolment and deregistration, funding, timetabling, digital learning resources, assessments, support programmes and progress reports.
We process the following personal data of our students/legal guardians:
• Identification data: name, date of birth, gender, address, PGN/BSN and student number
• Contact details: telephone number and email address
• Nationality and place of birth
• Academic progress: data relating to the nature and progress of education and achieved results (such as secondary school advice, assessments, guidance records, attendance records, support records, class/year, and results)
• Educational organisation: data required to organise education (such as timetables, book lists, school passes) and to provide digital learning materials
• Special categories of data: medical data and/or religion
• Chain ID (ECK ID)
• Personal data of parents/legal guardians:
• Identification data: name, date of birth, gender and address
• Contact details: telephone number and email address
• Nationality
• Relationship to the student
• Financial data, such as bank account number
Processing personal data for the financial administration of voluntary parental contributions is necessary for the performance of the contract.
We generally retain data in the student monitoring system or student file (Somtoday) for up to two years after deregistration. Certain data included in the student administration must be retained for five years after deregistration. Most financial records must be retained for seven years under statutory requirements.
Training student teachers and trainee teachers
We offer training positions to students enrolled in teacher training programmes, as required by law. These trainees may observe or assist in lessons and may indirectly process student data. For example, they may record videos (of themselves) during lessons for training and reflection purposes, which may also include students. We are not required to obtain your consent, as it forms part of our public task. However, you may object (see section 4).
Providing information about the school or activities
We inform parents, students and third parties about school activities through newsletters, our website and social media channels such as Instagram or Facebook. This may include reports on celebrations, sports days, open days or special achievements.
We request consent to process personal data for these communications. This may include:
• Name
• Email address
• Images
We store these data until consent is withdrawn or you unsubscribe from the newsletter.
School photographs and other images
We may take photographs or videos of students, for example annual school photographs or images taken during school trips. In some cases, we use these images in the school guide, an internal photo directory, the newsletter or on our website. We create and use images only with given consent. Images are stored until your consent is withdrawn or for a maximum of two years after deregistration.
Maintaining contact with former students
Maintaining contact with former students benefits both the school and alumni, for example to organise reunions. We request your consent to retain the following data after deregistration:
• Name
• Contact details
We store these data until consent is withdrawn.
Camera surveillance
We may record footage of you through our camera surveillance as we have a legitimate interest in doing so. We do this to prevent vandalism and other criminal offences, such as burglary, theft or damage. This is necessary to ensure the safety of our students, parents, staff and visitors.
For this purpose, we process the following personal data:
• Camera surveillance footage in which students, parents, staff or visitors may be identifiable
Footage/images are retained for a maximum of four weeks, unless they capture an incident. In that case, the images are retained until the incident has been resolved. - How do we handle personal data?
Data minimisation
We avoid processing more personal data than necessary to fulfil our rights and obligations as a school. We do not use personal data for purposes other than those described in this privacy statement. If we wish to process data for another purpose, we will inform you in advance and, where required, request consent.
Sharing personal data with third parties
In some cases, we are required to share personal data with other organisations, including:
• DUO (Education Executive Agency)
• De Belastingdienst (Tax Administration)
• The compulsory education officer/school attendance officer
• The Inspectorate of Education
• Other educational institutions in case of transfer
We may also engage third parties to support us in processing personal data, such as IT service providers, suppliers of educational applications, administrative systems, timetabling software or website management services. They act on our instructions and under our responsibility. We enter into agreements with these organisations to organize privacy and security aspects.
Some service providers may be based outside the country or host servers abroad. We only share personal data where an adequate level of protection is ensured or where appropriate safeguards approved by the European Union are in place. Our aim is to store data within the European Economic Area.
Security and retention
We take appropriate technical and organisational measures to protect personal data, taking into account the state of the art, implementation costs and the specific risks involved. Personal data is stored encrypted wherever possible. Only staff who need access for their work are authorised to access personal data.
Our measures include:
• Authorisation controls, limiting access to authorised staff
• Secured SSL internet connections
• Logging of access and actions
• Two-factor authentication
• Use of secure software
• A strict password policy
• Encryption of personal data wherever possible
We do not store personal data longer than necessary. Retention periods are based on statutory requirements and sector standards.
Key retention periods include:
• Student monitoring system or student file: generally two years after deregistration
o Absence data: five years
o Enrolment and deregistration data: five years
o Referrals to special education: three years
• Student administration records: up to five years after deregistration
• Final examination results and certificates: up to five years after deregistration
• Camera surveillance footage: four weeks, unless an incident occurs
Automated decision-making and profiling
Some organisations use automated decision-making, where decisions are taken by computer systems without human involvement. If personal data is used, strict rules apply.
Het Baken Almere does not base decisions with significant effects for individuals solely on automated processing and does not use your personal data for such purposes. - What rights do students (and parents/legal guardians) have?
As a student, or as a parent or legal representative of a student under 16, you have the following rights under data protection law:
• Right of access: to access the personal data we process about you or your child.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to object: to object to the processing of personal data.
• Right to erasure: to request deletion of personal data.
• Right to withdraw consent: to withdraw consent at any time.
• Right to data portability: where technically feasible, to transfer data to another organisation.
• Right to restriction of processing: to request temporary or permanent restriction of processing in certain cases.
If you request restriction or erasure, we will assess whether this is possible. We will comply with the law and consider for example statutory retention obligations.
We may ask you to identify yourself to ensure that personal data is provided to the correct person.
We will respond within one month. This period may be extended by up to two months where justified, for example if the request is complex. We will inform you in time if an extension is necessary.
To exercise your rights, please contact gegevensbescherming@hetbaken.nl. - Complaints
If you have a question or complaint about how we handle your personal data, please contact us using the contact details below.
You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). - Changes to this privacy statement
We may amend this privacy statement. The most recent version is available on our website. - Contact details
Het Baken Almere Rooseveltweg 5 1314 SJ Almere
Chamber of Commerce number: 55752004
T: 036 530 72 07
E: gegevensbescherming@hetbaken.nl - Contact details Data Protection Officer (DPO)
E: fg@hetbaken.nl
For website visitors
This privacy and cookie statement was most recently revised in October 2025.
Introduction
Het Baken Almere processes personal data of visitors to the following websites: (https://hetbaken.nl, https://stadcollege.nl, https://poortlyceum.nl, https://parklyceum.nl, https://trinitasgymnasium.nl, https://internationalschoolalmere.nl).
Your privacy is of great importance to us. We therefore comply with the General Data Protection Regulation (hereinafter: GDPR). In this privacy and cookie statement, we explain how we process your personal data. This privacy and cookie statement applies to the processing of personal data when you visit one of our websites.
If you would like to know how we process personal data of students and parents in general in order t o provide our services as an educational organisation (beyond the context of website visits) please consult our privacy statement for students and parents.
How does het Baken Almere process your personal data?
We process your personal data for specified purposes, explained below. For each purpose, we specify which data we collect and how long we may retain the data. If you have any questions or would like to know exactly what kind of personal data we process of you, please contact us by using the details at the end of this statement.
We may use your personal data for the following purposes:
• Recruitment and selection of new employees
• Handling requests for contact
•Tracking website visitors by using cookies
• Analysing the use of our websites by using cookies
• Providing personalised advertisements by using cookies
Under data protection law, we must have a legal basis to process personal data. We may not process personal data without a valid reason. We will not process your personal data for other purposes unless we have legal basis to do so.
Het Baken Almere relies on the following legal bases for processing your personal data if you visit one of our websites:
• Legitimate interest: we carefully balance our interests against your privacy interests, inform you through this statement, and offer you the right to object.
• Consent: you have given consent, which you may withdraw at any time.
• Performance of a contract: it is necessary for the performance or preparation of a contract, for example if you apply for a job and we process your personal data for this purpose.
For what purposes do we process personal data?
Job applications
You can apply for one of our job openings via the website hetbaken.nl/werkenbij. We process the data described below to consider your application and, if you are hired, to prepare your employment contract.
Please note that a social media and Google screening may be part of the recruitment process. This is necessary for us to preserve our image when hiring new staff; we do this on a legitimate interest basis. We will do a search of your name on Google and any profile you may have on various social media. This applies, of course, insofar as these profiles are public. We will not ask you to grant us access to a private social media page or to accept a request from us. The results of the screening will be discussed with you.
Should you have any objections to this, you can inform us by e-mail at the time of your application.
For this purpose, we process the following personal data:
• Name and address details
• Application data
• Contact details (e-mail address and telephone number)
• Gender
• Date of birth
• Curriculum Vitae
• Motivation letter
• References
• Photo
• Social media accounts
• Any other information you provide with your application
If you are not hired, we will retain your application data for up to four weeks after the procedure ends. We store this information so that we can contact you should the position become vacant again within this period. If we are unable to offer you a position at this time, we may – with your consent – keep the application data for one more year. You can revoke your consent at any time by sending us an e-mail. We will store your application data in your personnel file should you decide to work for us.
Contact and complaints
If you send us an email, complete a contact form, call us, or contact us in any other way, you agree to our terms and conditions of contact (based on legitimate interest and/or performance of a contract).
For this purpose, we process the following personal data:
• Name
• Business information (if you contact us in a professional capacity)
• Contact details (email address and telephone number)
• Any information you provide in your message
We will process this information to handle your enquiry or complaint. We will store the personal data for as long as necessary for this purpose or up to two years after our last contact, because we want to make sure we have handled your question or complaint properly.
reCAPTCHA
We use the Google reCAPTCHA service to protect our websites against spam and misuse. For Google reCAPTCHA to work, a website visitor’s IP address, mouse movements, and possibly other data is collected. This information is sent to and processed by Google for this purpose. By analysing these data, we can determine with help from Google whether the visitor is human or a bot.
Social media buttons
Our websites may include social media buttons that redirect you to relevant social media platforms. These allow you to follow us and share content. You may also see advertisements on your social media pages. These buttons function through bits of code provided by the social media platforms.
Please consult their privacy statements for more information:
• X (privacy statement)
• LinkedIn (privacy statement)
• Facebook (privacy statement)
• Instagram (privacy statement)
• YouTube (privacy statement)
Cookies
Our website uses first-party and third-party cookies. Cookies are small data files that can be automatically stored on or read from the visitor’s device (such as PC, tablet or smartphone) when visiting a website. This is done via the web browser on the device.
We use the following types of cookies:
Functional cookies These cookies have a functional role within the website. The cookies ensure that the website functions properly. For example, they:
- Remember login details
- Store language preferences
- Display the website correctly on screen
Consent is not required for this type of cookies.
Analytical cookies
These cookies give us insight into how our website is used. Based on this information, we can make our website more user-friendly. For example, they help us understand more about: - The number of visitors
- The most visited pages
- Average visit duration
- The devices used during the visit
We use these in a privacy-friendly way. If personal data is processed, we request your consent.
Marketing cookies These cookies make it possible to show you personalised advertisements (via our advertising partners).
The cookies may collect the following data from you, among others:
• Name
• Screen display options
• IP address
• Cookie ID
• Website and click behaviour
• Referrer URL
On your first visit to our website, we will display a message explaining how cookies are used. We will ask for your consent for the use of cookies to the extent we are required to do so. If you wish to withdraw given consent, you can do so by clicking the links as summarized below.
For the details of the cookies used and related retention periods:
Het Baken Almere: https://hetbaken.nl/cookies
Stad College: https://stadcollege.nl/cookies
Poort Lyceum: https://poortlyceum.nl/cookies
Park Lyceum: https://parklyceum.nl/cookies
Trinitas Gymnasium: https://trinitasgymnasium.nl/cookies
International School Almere: https://internationalschoolalmere.nl/cookies
Enabling and disabling cookies
You can set your web browser to only accept cookies with your consent. Consult your browser guide for more information. Please note that many websites will not function optimally when cookies are disabled.
Deleting cookies
Most cookies have an expiry date. When an expiry date is set, the cookie is automatically deleted once that date passes. You can also choose to delete the cookies manually before the expiry date. Please consult your browser guide for more information. Below, you will find a link to the provider’s website for each browser, which provides step-by-step instructions on how to block or delete cookies. - Google Chrome
- Firefox
- Edge
- Safari
Security
Personal data security is of great importance to us. We therefore take appropriate technical and organisational security measures with regard to the processing of personal data to be carried out, against loss or against any form of unlawful processing (such as unauthorized access, corruption, alteration or disclosure of personal data). We constantly update security and pay close attention to what can go wrong.
When can we share your personal data with third parties? Het Baken Almere will only share your data with third parties to the extent permitted by current legislation. We may provide your personal data to third parties when: - We have engaged them to process certain data
- We have a legal basis to do so
- We are legally obligated to do so (e.g., if the police demand this in case of a suspicion of a crime)
Third parties processing personal data on our behalf or yours: - IT suppliers and service providers including our websitehost
- Cookie service providers
- Recruitment agencies and job platforms
- Recruitment agencies and job platforms
Het Baken Almere may provide your personal data to parties located outside the European Economic Area (EEA) to provide those services. Het Baken Almere will only do so if there is an appropriate level of protection for the processing of personal data.
This privacy and cookie statement applies only to the services of het Baken Almere. We are not responsible for the privacy practices of other websites, which can be accessed through a link on our website.
What are your privacy rights?
You can always contact us if you have any questions regarding our privacy and cookie statement.
Besides that, you have the following rights regarding your personal data:
• Right of access: you have the right to access the personal data we process about you.
• Right to rectification: you have the right to correct or supplement the personal data we process about you, e.g., if they are incorrect or incomplete.
• Right to object: you have the right to object to the processing of your personal data.
• Right to erasure: you may request us to erase your personal data.
• Right to withdraw your consent: if you have consented to us processing personal data, you can withdraw your consent at any time.
•
Right to data portability: if it is technologically possible, you have the right to have the personal data we process about you transferred to a third party.
•
Right to restrict processing: in some cases, you can request that we restrict the processing of your personal data (temporarily or otherwise).
We may ask you for identification to fulfil your request. We require this information to ensure that the requested personal data belongs to the right person.
We will generally comply with your request within one month. However, this period may be extended by two months depending on the specific privacy rights or the complexity of the request. If we extend this period, we will inform you in good time.
If you wish to exercise any of your rights, you can do so by sending an e-mail to gegevensbescherming@hetbaken.nl.<br>Questions or filing a complaint
If you have any questions or wish to make a complaint about the use of your personal data, please contact us through the contact details as described below. We will address each question and complaint internally and communicate this further with you.
You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes to this privacy and cookie statement
When there is a change in our services, we will also need to change our privacy and cookie statement. Please consult this privacy and cookie statement regularly for the most up-to-date information.
Contact details
For questions about our privacy and cookie statement or your rights, you can always contact us using the following information:
Het Baken Almere
Rooseveltweg 5
1314 SJ Almere
Chamber of commerce number: 55752004
T: 036-530 72 07
E: gegevensbescherming@hetbaken.nl