UK GDPR (General Data Protection Regulation)
25th May 2018 saw the implementation of the General Data Protection Regulation and the implementation of the Data Protection Act 2018. They both exist to protect individuals’ data and cover a series of safeguards, clarifying how is it being stored, shared and used. In schools we handle data every day, and are required to store data for legitimate purposes and legal obligations to safeguard our staff and pupils.
The documents below help us manage the data effectively and securely.
If you require any further information regarding our GDPR policies and procedures or would like paper copies of any of the information below, please contact our admin team on 01332 760070 or via email on admin@dale.derby.sch.uk.
Key Documents
Information Sharing: The Principles of GDPR
Information Sharing: A Good Practice Guide
My Rights - A Guide to Data Subjects
Data Subject Rights - Query Form
Consent Guide Dale and Stonehill - details of consent, renewal and withdrawal
Data Breach and Non-compliance Guide
Data Breach Notification Form
Data Protection: Impact Assessment Guidance
Data Portability Statement
Data Subject Rights
Data Subject Query Form
Devices Policy Statement
GDPR Overview for Governors
GDPR Key Issues for Staff
Retention Schedule 2025/2026
Policies
GDPR appropriate policies are listed below.
For copies of these policies please CLICK HERE and you will be redirected to our Policies page.
CCTV Policy
Complaint Policy
Complaint Policy Appendix
Confidentiality Policy
Data Breach and Non-Compliance Policy
Data Protection Policy
Freedom of Information Policy
Freedom of Information: Publication Scheme
Information Security Policy
ICT Acceptable Use Policy
Physical Site Compliance Policy
Records Management Policy
Remote Learning Policy
Responding to a request from the Police and other Third Parties
Complaints
All Staff must be aware of the complaints process.
All complaints should be directed to the Headteacher, Louise Foster and/or Data Protection Officer, John Walker.
If any member of staff is aware that a person wishes to complain they should direct the person to the school website and the Complaints Policy. Louise Foster, John Walker and our Governing Body are responsible for dealing with all complaints in line with this procedure.
The school complaints policy sets out the complaints process. This will be the basis for dealing with Data Protection Complaints and appeals. A written outcome will be provided.
If the school does not comply with a Subject Access Request within 1 month (subject to any extension), or refuses all or part of the request, written reasons will be provided, setting out the principles for the refusal.
If you feel that the school/trust have not dealt with your matter satisfactorily you can complaint to the Information Commissioner.
You may complain in writing to: Customer Contact, Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF. Or by email: casework@ico.org.uk.
More information is on the ICO website www.ico.org.uk/
Biometric Statement:
We do not hold or store any biometric data for any pupils or staff members.
Privacy Notices
The legal grounds for using your information: This is common for all personal and sensitive data we collect and process about staff, volunteers, pupils, parents, carers and any other individuals. Some data is more sensitive than other types of data. These special categories are as follows: personal information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, health information, and information about sex life or orientation.
Consent: The school will ask for consent to process data about you or a pupil. The type of data that is to be used, and how it is to be used will be specified on the consent forms. You have the choice to opt in for certain types of data usage, and this is made clear. However, some data that is collected and processed is not optional.
Legitimate interests: This means that the processing is necessary for legitimate interests except where the processing is unfair to you. The School relies on legitimate interests for many of the ways in which it uses information. Specifically, the school has a legitimate interest in:
· Providing educational services to pupils
· Safeguarding and promoting the welfare of pupils and staff
· Promoting the objects and interests of the school
· Ensuring the efficient operation of the school
· Compliance with all relevant legal obligations of the school
· Keeping the whole school community informed about events, news and activities
Necessary for a contract: Information about individuals may be necessary to perform our obligations under our contracts. For example, maintaining the school Management Information System database.
Legal obligation: Much of school life is governed by legal obligations to supply information to organisations such as the Department for Education or Local Authority or HMRC. We may also have to disclose information to third parties such as the courts, Disclosure and Barring Service or the police where legally obliged to do so.
Vital interests: For example, to prevent someone from being seriously harmed or killed.
Public interest: The School considers that it is acting in the public interest when providing education. Certain regulations, DfE and Local Authority, health and other guidance may require the school to process data in the public interest.
Legal claims: The processing is necessary for the establishment, exercise or defence of legal claims. This allows us to share information with our legal advisors and insurers.
Your Rights: From May 2018 data protection legislation gives you a number of rights regarding your information. Some of these are new rights whilst others build on your existing rights.
Your rights are as follows:
You can ask what information we hold about you and be provided with a copy. Sometimes we are not able to share all the information, but this is set out in our Subject Access Policy
If information is incorrect you can ask us to correct it
You can ask us to delete the information that we hold about you or your child in certain circumstances. For example, where we no longer need the information;
You can ask us to send you, or another organisation, certain types of information about you in a format that can be read by computer – this does not apply to pupil records as these are transferred by a DfE process called the Common Transfer File
Our use of information about you may be restricted in some cases. For example, if you tell us that the information is inaccurate, we can only use it for limited purposes while we check its accuracy
If you disagree with a decision we make about your data, you can use our Complaints Policy. You also have the right to make a complaint to the Information Commissioner, and sometimes to the Information Tribunal or through the court process. Our complaints policy is available on the POLICIES page.
AI Privacy Notice (Oct 2025)
Pupil Privacy Notice (Oct 2025)
School Visitors Privacy Notice (Oct 2025)
ICT Agreements
ICT School Workforce Agreement
(Staff, Governors, Supply Staff, Volunteers, Work Experience Students, Parent Helpers)
Subject Access Requests
Withdrawal Consent
Paper copies
If you would like paper copies of any of the documents above, please contact our School Office Administrator, Miss Backler on 01332 760070.
