Introduction

Wessex Gardens Primary School uses personal information about staff, pupils, parents/carers and other individuals who come into contact with the school.

This information is gathered, in order to enable it to provide education and other associated functions. In addition, there may be a legal requirement to collect and use information to ensure that the school complies with its statutory obligations.

 

Legal Responsibilities

The school has a legal responsibility to comply with data protection legislation and other statutory provisions relating to the way in which it holds and processes personal data. 

The school, as a corporate body, is named as the data controller under the Data Protection Act 2018 (DPA 2018).

ICO Notification and Registration.

The school is required to ‘notify’ the Information Commissioner of the processing of personal data. 

This information is included in a public register which is available on the Information Commissioner’s website.

As a Data controller the school will register annually with the ICO as required in line with legislation.

Privacy Notices.

Every member of staff, member of the governing body, contractors, and partners of the school that hold its’ personal information, has to comply with the law when managing that information.

Schools also have a duty to issue a privacy notice to all pupils, parents/carers, governors and employees; these provide details of information collection and held, why it is held and the other parties to whom it may be passed on. 

Privacy Notices are available here.

Data Controller.

As data controller, personal data collected about staff, pupils, parents/carers, governors, visitors and other individuals that is collected and held must be processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the DPA 2018.

This policy applies to all personal data, regardless of whether it is in paper or electronic format.

This policy is intended to ensure that personal information is dealt with properly and securely and in accordance with the Data Protection Act 2018 and the UK GDPR.

It will apply to information regardless of the way it is used, recorded, stored and whether it is held in paper files or electronically.

Acceptable Use Policies

All Staff, Governors, Parents and Teachers are required to comply with our Acceptable Use Policies which can be found here.