UK GDPR (General Data Protection Regulation)
25th May 2018 saw the implementation of the General Data Protection Regulation and the implementation of the Data Protection Act 2018. They both exist to protect individuals’ data and cover a series of safeguards, clarifying how is it being stored, shared and used. In schools we handle data every day, and are required to store data for legitimate purposes and legal obligations to safeguard our staff and pupils.
The documents below help us manage the data effectively and securely.
If you require any further information regarding our GDPR policies and procedures or would like paper copies of any of the information below, please contact our admin team on 01332 760070 or via email on admin@dale.derby.sch.uk.
Information Sharing: The Principles of GDPR
Information Sharing: A Good Practice Guide
My Rights - A Guide to Data Subjects
Data Subject Rights - Query Form
UK GDPR Data Protection Policy - June 2022
Privacy Notices:
Privacy Notice - SCHOOL WORKFORCE (Staff, Supply Staff, Volunteers, Work Experience Students, Parent Helpers)
Biometric Statement: We do not hold or store any biometric data for any pupils or staff members.
CCTV Policy - June 2020
Complaints Procedure - June 2023
UK GDPR and DPA Complaints: All complaints should be directed to our Data Protection Officer. If any member of staff is aware that a person wishes to complain they should direct the person to the school website and complaints policy and form. Our Data Protection Officer is responsible for dealing with all complaints in line with this procedure.
The school complaints policy sets out the complaints process. This will be the basis for dealing with Data Protection Complaints and appeals. A written outcome will be provided.
If the school does not comply with a Subject Access Request within 1 month (subject to any extension), or refuses all or part of the request, written reasons will be provided, setting out the principles for the refusal.
If you feel that the school/trust have not dealt with your matter satisfactorily you can complaint to the Information Commissioner
By post: Customer Contact, Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Or by email: casework@ico.org.uk. More information is on the ICO website www.ico.org.uk/
Complaints Form
Confidentiality Policy - June 2020
Confidentiality Agreements:
Consent Guide Dale and Stonehill - details of consent, renewal and withdrawal
Data Breach and Non-Compliance Policy - June 2022
Data Breach and non-compliance Guide
Breach Notification Form
Data Portability Statement
Data Protection: Impact Assessment Guidance
Data Subject Rights
Data Subject Query Form
Devices Policy Statement
Freedom of Information Policy - February 2024
Freedom of Information: Publication Scheme - March 2024
GDPR - Overview for Governors
GDPR - Key Issues for Staff
GDPR and ICT at Dale and Stonehill:
Information Security Policy - January 2024
ICT Acceptable Use Policy - September 2023
ICT Agreements:
ICT School Workforce Agreement (Staff, Governors, Supply Staff, Volunteers, Work Experience Students, Parent Helpers)
Physical Site Compliance Policy (awaiting Governors) - September 2022
Records Management Policy January 2024
Remote Learning Policy - January 2021
Responding to a request from the Police and other Third Parties - June 2020
Retention Periods
Subject Access Requests:
Withdrawal Consent:
GDPR COMPLAINTS:
GDPR Complaints Policy
All Staff must be aware of the complaints process. All complaints should be directed to the Headteacher, Louise Foster and/or Data Protection Officer, John Walker. If any member of staff is aware that a person wishes to complain they should direct the person to the school website and the Complaints Policy. Louise Foster, John Walker and our Governing Body are responsible for dealing with all complaints in line with this procedure. The school complaints policy sets out the complaints process. This will be the basis for dealing with Data Protection Complaints and appeals. A written outcome will be provided.
If the school does not comply with a Subject Access Request within 1 month (subject to any extension), or refuses all or part of the request, written reasons will be provided, setting out the principles for the refusal.
If you feel that the school/trust have not dealt with your matter satisfactorily you can complaint to the Information Commissioner. You may complain in writing to: Customer Contact, Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF. Or by email: casework@ico.org.uk.
More information is on the ICO website www.ico.org.uk/
PAPER COPIES:
If you would like paper copies of any of the documents above, please contact Mrs Backler on 01332 760070.
