Data Protection and General Data Protection Regulations (GDPR)
The Salvatorian College Academy Trust is registered with the Information Commissioner’s Office (ICO) Under Registration Number : Z8680963
General Data Protection Regulations (GDPR)
Salvatorian College reviewed its data protection arrangments in to ensure that we comply with the General Data Protection Regulations introduced on 25th May 2018.
How does Data Protection legislation protect personal data?
The aim of the GDPR is to strengthen and standardise the safety and security of all data held within an organisation, reflecting changes in technology and the ways in which organisations collect information about ‘individuals’ (data subjects). The regulation provides certain rights which data controllers and data processors must respect.
See www.ico.org.uk for further information on GDPR
How does Salvatorian College protect Personal Data?
The GDPR requires schools to keep personal data safe and to have appropriate systems, policies and procedures in place to enable them to comply with their data protection responsibilties.
Please refer to the school’s Data Protection Policy and Freedom of Information Policy.
The school has also updated its Privacy Notices in line with the laws on data protection:
Requests for Information
The school will follow legislative guidance when dealing with Data Subject Access Requests.
Please refer to Information Commissioner’s Office guidance on Accessing pupils’ information.
As a free school academy a student or parent/carer (person with parental responsibility/ legal guardian) does not have a legal right to access a child’s educational record. It will be up to the school to decide whether to grant such access.
Please refer to the Information Commissioner’s Office Subject access Request Information for further information.
How to make a request to see information about you?
If you wish to request information we hold about you, please complete the Data Subject Access Form found on the link below and send it to data@salvatorian.harrow.sch.uk.
Any request in writing will be considered from the individual (Data Subject) as a valid request, whatever the format as long as it contains the releant information to enable us to deal with your request.
How to make a request to see on behalf of someone else?
If you are requesting information on behalf of someone else you must provide written evidence that you have the Data Subject’s authority to ask for the information on their behalf, e.g. signature on the Data Subject Access Form, a letter written by them, evidence of Power of Attorney, etc.
How do you provide your identity?
If you are not known to the school, we may ask to see proof of your identity. The following forms of identity will be accepted as proof of identity:
- A copy of your passport
- A copy of your driving licence
- A copy of your Bank, building society or credit card statement in the Data Subject’s name for the last quarter
- A copy of your Council Tax bill
Will you be charged for information provided?
The school will follow guidance within current Data Protection legislation in relation to charges for information.
See www.ico.org.uk for further information.
What do you do if the data is incorrect?
Please contact the school to tell them what is incorrect and ask for it to be corrected. You can also appeal to the Information Commissioner if the school does not correct the information.
Making a complaint
If you are unhappy with the way your request for information has been dealt with or you think your data has been misused or not held securely, please contact the Data Protection Officer – data@salvatorian.harrow.sch.uk.
If you are unhappy with the outcome of your complaint, you can escalate your complaint to the Information Commissioner’s Office (ICO).
ICO helpline
Telephone: 0303 123 1113
https://ico.org.uk/concerns/