Education

Educational institutions collect and use many personal data of their pupils or students. They also exchange these data, for example with (public) authorities, municipalities and other educational institutions. Which data are educational institutions allowed to keep of their pupils or students? And how must they protect these data?