Introduction
The new European General Data Protection Regulation (GDPR) came into force on 25 May 2018 which is a new framework designed to harmonise and enforce the rights of every resident to data privacy. Specifically, personal data must be (Article 5):
- Processed lawfully, fairly and in a transparent manner
- Specific, explicit and legitimate and not further processed
- Adequate, relevant and limited to what is necessary
- Accurate and where necessary kept up to date
- Kept in a form which permits identification, for no longer than necessary
- Processed in a manner that ensures appropriate security
At St Mary’s we are committed to protecting your information and we are reviewing our data handling processes and policies to ensure that we are GDPR compliant. Please therefore see the links below to access our latest information.
New data protection information
Data Protection Policy
Data Privacy Notice for Parents and Carers
Data Privacy Notice for non-employees (including volunteers, contractors etc)
Retention Policy
Consent
From our privacy notice you will see that the majority of the information provided to us is mandatory but where this is provided to use on a voluntary basis we will ask for your specific consent. For existing pupils, where this consent has already been provided, you may withdraw or amend your consent at any time in writing to the school office. For new pupils these consents will form part of your induction pack. The forms are included here for reference:
Admission form
Photo Consent form
Local Visits Form
Please note that our revised Admission Form includes consent by new parent/carers to receive emails promoting events organised by the Friends of St Mary’s (FOSMS). However, the regulation is still very new and whether consent is required for such ‘PTA’ events is uncertain. We will therefore monitor this requirement on an on-going basis but at present, we are not asking existing parents/carers, with whom we already have a relationship, to complete an ‘opt in’ at this time.
Your rights
You have the right to request a copy of the information that is held about yourself or your child. We will require from you:
- A request in writing
- Evidence to confirm your identity
- Sufficient information to locate the information requested.
We make every effort to ensure that our data is complete, accurate and up-to-date. You have the right to have inaccurate data rectified or incomplete data completed by ‘supplementary statement’. In certain instances you may also have the right to have your data being erased, for example if it is no longer necessary to keep the data.
Further information
For more information on your rights, and all other aspects of the GDPR, please see the Information Commissioner’s Office website
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr
St Mary’s C of E (A) Infant School is registered as a data handler with the Information Commissioner’s Office; our record can be accessed under the registration reference Z7124595.
