DATA PROTECTION and GDPR Compliance
Dear Parent Carer
Re: Changes to Data Protection Laws
You may be aware that from May, the rules around data protection have changed. The 'General Data Protection Regulation' (GDPR) has changed how we can use your personal data and keep it safe, and has also strengthened your rights over your own data.
The purpose of this is to make sure sensitive or private information about yourselves and your children stays safe. Whilst it was similar to the previous Data Protection Act in many ways, there are a few differences, so we have made a few changes at the school in order to ensure we are compliant.
One of these changes is that we have updated our privacy notice. You will find it here: UPDATED PRIVACY NOTICE 2018 (coming soon)
As part of our work to comply with the GDPR, we are also re-seeking consent for using photographs or videos of your child on our website, internal displays or other school materials. We will be sending out our updated consent form and would appreciate it if you completed this and returne it to the school office.
If you have any questions about how the GDPR affects you, or how our school is preparing, you can contact Mrs Davies the Data Protection Officer at firstname.lastname@example.org
As a parent you have a number of rights regarding the data we hold on your child.
Under data protection law, individuals have certain rights regarding how their personal data is used and kept safe, including the right to:
Object to the use of personal data if it would cause, or is causing, damage or distress
Prevent it being used to send direct marketing
Object to decisions being taken by automated means (by a computer or machine, rather than by a person)
In certain circumstances, have inaccurate personal data corrected, deleted or destroyed, or restrict processing
Claim compensation for damages caused by a breach of the data protection regulations
We take any complaints about our collection and use of personal information very seriously. If you think that our collection or use of personal information is unfair, misleading or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance.
To make a complaint, please contact our data protection officer. Alternatively, you can make a complaint to the Information Commissioner’s Office: Report a concern online at / Call 0303 123 1113 Or write to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
If you wish to view any of the data we hold, please follow these steps.
Speak to the DPO (DATA PROTECTION OFFICER)
Complete a Data Review Request form
The DPO has up to 40 days to consider & review your request
The DPO will respond to you in writing, outlining our decision, detailing what happens next
If the request for information was successful the DPO for you to review the data
After you have reviewed the records we hope you will be satisfied. If information needs to be amended or removed a further request will need to be made
Complete a Data Amendment form
We will respond in writing within 40 days outlining our decision and the outcome
Download the Data review request form here
Download the Data amendment request form here