# Policy for the use of Information Systems

### SCOPE&#x20;

Kaleide International School is the owner of the exploitation rights of a series of information systems that it makes available to its clients to facilitate the exchange of information with them in accordance with a series of rules of use described below.&#x20;

Information Systems and current data hosting are as follows, without prejudice to the fact that these may be expanded or replaced by others:&#x20;

### Information Systems:&#x20;

#### Own&#x20;

Synology Diskstation, which includes Synology Diskstation, Synology Photos, Synology Office.&#x20;

#### External&#x20;

Google Workspace for Education Fundamentals, which includes Gmail, Docs, Drive, Sheets, Calendar, Groups, Meet, Chat, Youtube, Forms, Photos, and Sites apps. Discord as instant messaging server.&#x20;

Data hosting: The school has its own physical hosting at the school's headquarters, storing the data included in its own platforms, as well as backup copies of external platforms. The hosting of data from third-party platforms is governed by the policies of these platforms and involves an international transfer of data. To know more about the policies please click on the following links: Google Workspace for Education Fundamentals:&#x20;

https://admin.google.com/terms/apps/7/2/en/dpa\_terms.html Discord: https://discord.com/privacy

### TERMS OF USE&#x20;

1. The provision of access to the information systems provided by Kaleide International School to its clients does not directly or indirectly imply the transfer of any intellectual property rights over the applications or tools owned by it.
2. &#x20;The use of those platforms and applications that are not owned by Kaleide International School, but which are managed by the school, will be governed, in addition to these regulations, by the conditions of said applications and platforms, exempting the school from any responsibility derived of its use in terms of the data provided by the client.&#x20;
3. The use of Kaleide International School’s information systems by its clients, as well as those other auxiliary channels made available to them and known to them, although recommended, is voluntary and does not cancel the contractual obligations that have been specified in other agreements between clients and Kaleide International School regarding communications between the parties.&#x20;
4. The use of the information systems and auxiliary channels provided by Kaleide International School is non-discriminatory and, therefore, those clients who do not decide to use it can always choose to obtain the information directly from the school in person or through any other media accepted by Law.&#x20;
5. The provision of access to Kaleide International School’s information systems is not guaranteed by the school and may be terminated at any time without prior notice without incurring in an obligation to provide compensation to its clients.&#x20;
6. Kaleide International School declines all responsibility for the damage or loss of the digital content that the users of the information systems may have stored in them.&#x20;
7. Kaleide International School is not responsible for the damages that users may cause to the contents of third parties, as well as to the infrastructure of their information systems, for which the user is fully responsible, without prejudice to the legal actions that may arise in connection to any type of cyber attack.&#x20;
8. Fees: Users' access to Kaleide International School's information services is free of charge, unless otherwise agreed. In the event that the costs of maintaining the infrastructure of the information systems exceed the values ​​established by Kaleide International School, the cost of these services may be passed on to its users, prior notice, who may then choose to cease their use or accept the proposed payment.&#x20;
9. Commitments and responsibilities of the users: The user is exclusively responsible for all the content that he/she makes available to third parties, as well as for those interventions or opinions that he pours into the information channels provided by Kaleide International School, and he/she undertakes to participate with comments that are not/do not: inappropriate, offensive, abusive, defamatory, racist, hateful, sexist, obscene, homophobic, inflammatory, or irrelevant to the topics being discussed; indecent, sexually explicit or pornographic; false, inaccurate, misleading or based on hearsay; excessively repetitive or constitutive of 'spam'; threatening or instigating violence; disclose personal information of third parties; violate any third party intellectual property rights (such as copyrights, database rights, trade secrets, confidential information or trademarks); advertise, promote, market or endorse products and brands, except incidentally. The user also undertakes: not to disclose or keep other users’ personal data, which may have been incidentally accessed through Kaleide International School’s Information Systems, nor use them in a fraudulent way or incompatible with common goals, the school policies or the accepted use in a school, especially any personal data that could serve to identify a minor; Do not share images or any other type of personal data of minors who are under the responsibility of third parties without the express and informed consent of the persons responsible for those minors; not to impersonate any other user or access with credentials that are not their own, since these are used for user identification purposes; not attempt to gain illegitimate access to unauthorized resources through hacking techniques; notify the school as soon as possible when you have detected any unauthorized access from your user profile so that the appropriate security measures can be taken.&#x20;
10. Kaleide International School is not obliged to provide or maintain this service and, therefore, may terminate its provision, individually or globally, at any time, without prior notice and without the right to any compensation, especially when any of these situations:&#x20;

* breach of the conditions of use by the user;
* for reasons beyond Kaleide International School, such as, for example, the loss of the right to use current information systems;
* insufficient economic means to maintain the information systems in the security conditions required by law;&#x20;
* whenever the relationship with the client is deemed terminated, and access to the school’s platforms is revoked;&#x20;
* without justified cause.&#x20;

The identity of the client will be registered for all legal purposes when accessing Kaleide International School’s information systems, when it is made through the user profile provided by the school at the time of contracting the services offered.&#x20;

### SECURITY AND RECOMMENDATIONS FOR USE&#x20;

In order to maintain a minimum of security in communications and digital access, it is recommended that access passwords:&#x20;

* be unique and confidential;&#x20;
* are not shared with third parties, as they serve as credentials to determine the identity of the user;&#x20;
* be robust, mixing numbers, upper and lower case letters, and special characters;&#x20;
* have a minimum of 8 characters whenever possible;&#x20;
* are not used for different services;&#x20;
* are updated periodically, changing to a new one at least once a year or in the case of suspicion or verification that it has been violated;
* do not appear in writing on any paper or digital medium, except in the case of a password manager;
* are not recycled from old passwords or created as sequential passwords (pass1, pass2, pass3, etc) on update;&#x20;
* alphanumeric passwords are preferable to a numeric code or the use of a biometric pattern or measurement.&#x20;

In some services, the first time access to information services is provided, a username and a temporary password will be provided that the user must change when accessing for the first time.&#x20;

It is also recommended that all those digital documents that contain sensitive data and that are exchanged through digital channels and/or are housed in the center's information systems, have an additional layer of protection with a dedicated password.&#x20;

Sensitive data is considered to be all data that, in the event of unauthorized access, may lead to discrimination based on sex or sexual orientation, origin, identity or state of physical or mental health.
