General Data Protection Regulation (GDPR)
As a school, we are required and need to gather data on the children who attend our school as they progress through the years, we do this to fulfil the legal obligations we have to the government and our local authority, and also to ensure that we are able to track the progress of pupils in order to identify any specific needs that they might have and then provide the necessary level of support they require. We also hold a certain amount of data on parents and carers to ensure that we are able to communicate with them effectively and in a timely manner.
Much of the data we hold is sensitive we have responsibilities under both EU and UK data protection legislation to protect that data and keep it secure. Current legislation requires us to ensure that all individuals on whom we hold data are informed of the data we hold, the legal basis on which we hold it and their individual rights. Much of this information is contained within the ‘Privacy Notices’ that we are also legally required to share. The full text of the respective privacy notices for pupils and parents/carers, together with more detailed information can be found by visiting our Policies page.
Data on pupils
- Privacy Notice for Pupils
- Summary of the data we hold on pupils
- The lawful bases for holding data other than ‘public task’
Data on parents/carers
- Privacy Notice for Parents/Carers
- Summary of the data we hold on parents/carers
- The lawful basis for holding data other than ‘public task’
In addition, we also have procedures in place to ensure that we store and transmit all data in a secure way to protect the rights and privacy of individuals. You may obtain details of these procedures on request from the school office.
Under data protection legislation, individuals have the right to request access to the information we hold about them (together with other legal rights), all of which are outlined in our policy, along with information on how to go about requesting access to that data.
As with all other organisations and companies that hold data on individuals, we are required to register with the Information Commissioner’s Office (ICO), the body responsible for ensuring compliance with legislation and investigating any complaints or data breaches.
Should you have any concerns about the way we are collecting or using your personal data, please raise them with us first by contacting our Data Protection Officer. They can be contacted by email at email@example.com or, by calling the school office.
Alternatively, should you so wish, you can also contact the ICO directly and their contact details can be found on their website: https://ico.org.uk/ The ICO site also contains a lot of useful information regarding current legislation and individual rights.