General Data Protection Regulations (GDPR)
We have updated the handling of your information and have appointed an external Data Protection Officer. We have published some information about how we are meeting GDPR on this page, which includes Freedom of Information,Subject Access Requests, Breaches and Consent.
Data Subject Rights
At its core, the UK GDPR is about ensuring the privacy of the individual. The UK GDPR provides data subjects with 8 rights that they may exercise when their personal data is being processed; these rights support the individual’s overarching right to privacy in their private life. These rights include:
Right to be informed: Data subjects should expect to know the identify and contact details of the controller and their representative; why and how your data is being processed; if your data will be shared or passed on; how long your data will be stored; and what your rights are. This information is reflected in the Trust’s Privacy Notices.
Right to access: Data subjects have the right to obtain a copy of your personal data as well as to understand how and why your data is being used. This is commonly known as a Subject Access Request.
Right to object to automated decision making, including profiling: Where rights apply, data subjects can obtain human intervention; express your point of view; and obtain an explanation of the decision and challenge it. The right does not apply if the processing is required to fulfil a contract; has been authorised by member state law; or is based on explicit consent.
Right to object: Data subjects can object to us using your information in certain circumstances (please refer to the UK GDPR for the circumstances). This does not apply when we have lawful bases for processing your data, such as legal obligation or to protect the vital interests of a person.
Right to data portability: This right is not absolute. It allows data subjects to obtain/reuse your personal data for your own purposes across different services where data is processed by automated means; the right only applies to information you have provided to a controller. The processing has to be based on consent or where it is necessary to fulfil a contract.
Right to restriction: Data subjects can request that the processing of their data be restricted if one of the conditions set out in Article 18 applies (please refer to the UK GDPR for the conditions).
Right to erasure: Data subjects can request deletion of the data held about you, but only in certain circumstances, including if the data is no longer necessary for the purposes for which it was collected; if you withdraw consent on which the processing is based and where there is no other legal ground for the processing or you object to the processing and there are no overriding legitimate grounds for the processing; or if the data has been unlawfully processed, is to be erased for compliance with a legal obligation or has been collected in relation to the offer of information society services.
Right to rectification: Data subjects have the right to request that your information is updated to be made accurate, in the event where information held by us may no longer be accurate (such as your address). You also have the right to rectification when information we hold about you is incomplete, such as where the digit of a phone number is missing.
To exercise these rights, where they apply, please contact us through any of the means indicated on our Contact page.
If you would like to know more about the GDPR and your rights, please visit the UK’s data protection regulator, the Information Commissioner’s Office at www.ico.org.uk
Should you have any queries regarding the GDPR and our school, please email us at email: firstname.lastname@example.org
The school is part of the Tarka Learning Partnership. The Trust GDPR page can be accessed through: https://tarkatrust.org.uk/about/gdpr/
The Trust Data Protection Policy and Privacy Notices are also avaliable on this page.
Please note that the school will be closed during the school holidays. This email address will not be checked and post will not be opened. We will respond to any Subject Access Requests or Freedom of Information Requests on our return to the office.
The holiday dates when the school will be closed for the academic year 23/24 are:
Monday 23rd October 2023-Friday 27th October 2023
Monday 18th December- Monday 1st January 2024
Monday 12th February-Friday 16th February 2024
Monday 29th March- Friday 15th April 2024
Monday 27th May-Friday 31st May 2024
Thursday 24th July - Wednesday 4th September 2024
Data Protection and the GDPR – January 2021 As the UK transitional arrangements expired on 31 December 2020, there are some practical changes for Data Protection and the GDPR. To comply with the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 please note that every policy, notice and procedural guide that refers to ‘GDPR’ shall now be read as ‘UK GDPR’. The rights, responsibilities and data protection that the Data Protection Act 2018 and the GDPR are not changed. Our procedures and arrangements will not change. If you have any queries please contact TRUST/SCHOOL GDPR LEAD
Tarka Learning Partnership’s Data Protection Officer is John Walker. You can contact John via any of the following means:
J Walker Solicitor
PHP Law LLP
6 Delamore Park
Telephone: 03337 729763
Freedom of Information, Subject Access Requests & Consent