What is GDPR?
GDPR (General Data Protection Regulation) is a new European Union law about how personal information is stored and processed. The GDPR’s primary aim is to give people control over how their data is handled.
In St Antony’s, we are compliant with GDPR through our Acceptable Use Policy and Privacy Notice. Here at St Antony’s, no personal information is distributed elsewhere, unless consent has been obtained. Under data protection law, individuals have a right to be informed about how the school uses any personal data that we hold about them. We comply with this right by providing ‘privacy notices’ (sometimes called ‘fair processing notices’) to individuals where we are processing their personal data.
To obtain consent, a letter will be sent home, informing pupils and parents of how their information will be used and why it will be used in that way. Every member of staff at St Antony’s agrees to sign an Acceptable Use Form, which covers the safe and appropriate use of technology. This agreement states that ‘staff will follow good practice’ and will only ‘use approved, secure…systems’ for professional use.
Our lawful basis for using your data
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where we need to:
- Fulfill a contract we have entered into with you
- Comply with a legal obligation
- Carry out a task in the public interest
Less commonly, we may also use personal information about you where:
- You have given us consent to use it in a certain way
- We need to protect your vital interests (or someone else’s interests)
- We have legitimate interests in processing the data – for example, where:
Where you have provided us with consent to use your data, you may withdraw this consent at any time. We will make this clear when requesting your consent, and explain how you go about withdrawing consent if you wish to do so.
Some of the reasons listed above for collecting and using personal information about you overlap, and there may be several grounds which justify the school’s use of your data.
For the full St Antony’s Catholic Primary School privacy notice, click here.