GDPR

General Data Protection Regulations (GDPR)

Upton Westlea Primary School complies with the General Data Protection Regulation. (GDPR) which became law on 25th May 2018.  As a controller and processor of data, most of the information we process, we do so as our role as educators and in undertaking public task.  For anything outside of this we would seek parental consent.

The six principles of GDPR are that data should be:-

  • Processed fairly lawfully and in a transparent manner
  • Used for specified, explicit and legitimate purposes
  • Used in a way that is adequate, relevant and limited
  • Accurate and kept up to date
  • Kept no longer than is necessary
  • Processed in a manner that ensures appropriate security of the data

The School’s data protection officer (DPO) has been appointed through 'Safeguarding Monitor'.  The DPO is tasked with monitoring compliance with the GDPR as well as being a point of contact with the Information Commissioner’s Office (ICO), the organisation which regulates data protection.  The DPO can be contacted by emailing [email protected]

Individuals, including children, have rights with regards the information that is held on them.  Those rights are as follows:-

    1. The right to be informed
    2. The right of access
    3. The right to rectification
    4. The right to erasure
    5. The right to restrict processing
    6. The right to data portability
    7. The right to object
    8. The right not to be subject to automated decision making and profiling

Subject access request (SAR)’s should be made in writing to the Head Teacher by emailing [email protected]  Responses to subject access requests will be made within one month.

In the event of a data breach, the DPO will contact the ICO.  We are committed to only working with partners who are also GDPR compliant.

Please refer to our policies on GDPR and CCTV as well as our privacy notices for adults and children and some information from Unicef about the rights of the child under the United Nations Convention.

Files to Download

Rights of the Child Growing Up Digital Education for a Connected World GDPR Template - Staff/Governors/Volunteers GDPR - Consent for photos GDPR - Pupil Acceptable User Agreement GDPR - Child Friendly Privacy Notice GDPR Pupil Privacy Notice GDPR - Data Protection Policy.pdf