As of 25 May 2018 every organisation that handles personal data will be required to comply with the General Data Protection Regulation (GDPR). As a school we have been working hard to make sure that we are compliant with the new data protection rules.
1. PRIVACY NOTICE
You can find our updated Privacy Notice here. This explains in detail how, why, where and when we store and process your personal information. You will also find information about your rights under the regulations.
2. DATA PROTECTION POLICY
Our Data Protection Policy applies to all personal data (paper or electronic format) and explains how we ensure that data is collected, stored and processed in accordance with the GDPR and the expected provisions of the Data Protection Act 2018.
This is closely linked to our Data Handling and Electronic Communications Policy.
3. SUBJECT ACCESS REQUESTS
As set out in our Privacy Notice and Data Protection Policy individuals have a right to make a ‘subject access request’ to gain access to personal information that the school holds about them.
If you wish to make such a request please email firstname.lastname@example.org.
4. MEDIA CONSENT FORM
To ensure we are meeting the new requirements, we need to seek your consent to take and use photos, video and audio recordings of your child for anything other than educational and/or safety and security purposes (eg CCTV images).
We really value using photos, video and audio recordings of our students, to be able to showcase what students do in school and show what life at our school is like to others, so we would appreciate you taking the time to give consent.
5. FREEDOM OF INFORMATION REQUESTS
All public authorities, including schools, are required under the Freedom of Information Act to adopt a publication scheme that has been approved by the Information Commissioner.
There is currently one approved model publication scheme, which has been produced by the Information Commissioner’s Office (ICO) and which PACA have adopted: Model Publication Scheme.