Releasing Potential takes seriously its responsibility to protect your data, and keep you informed about what we collect and how we process it. This statement is intended to provide transparency to all those whose information we hold, and to ensure that the individuals we come into contact with are aware of their rights under the General Data Protection Regulations (GDPR). Please contact the Data Protection Officer named below if you have any questions or comments about this document.
7 Kingscroft Court
Tel: 02392 479762
Tel: 02392 479762
Types of personal data we process
|Type||Source||Lawful basis||How processed|
|Students’ personal data : Name, address, DOB, previous school, medical, academic history, safeguarding history, progress, incidents||Local Authority, previous school, parents/social worker||
Statutory requirement for Ofsted/HMI
Parental consent forms termly
|Shared electronically with statutory agencies eg DfE, Local Authorities, and in person with HMI/Ofsted inspectors. Shared when appropriate with other agencies in the public interest for safeguarding reasons only.|
|Staff and trustees’ personal data: Name, address, DOB, work history, educational achievements, criminal records, health disclosure, financial information including bank account numbers, copies of identity documents eg passport and driving license. Photographs||Staff provide this data on joining the organisation||Statutory requirement for HMRC, Ofsted/HMI||
All staff details are held electronically on Single Central Record and in paper personnel file. Information shared only with statutory bodies such as HMRC, Ofsted/HMI. This is done electronically via government portals and in person during inspections.
Staff have a photo and brief biography on the school website.
We provide references for former employees, consent is assumed if the candidate has named us as referee.
|Parents/carers personal data: Name, address, telephone numbers, email address||Parents and carers are required to complete a contact/medical form each term to ensure we hold up to date details. The form includes consent to holding their data.||Consent||This information is not shared externally, and is used only to contact parents/carers in the case of an incident/ emergency.|
|Members of the public personal data: Name, address, email address, credit card number||Customers provide this information when they make online purchases or sign up to newsletter||Consent||This information is not shared externally. Consent is gained through a tick box on the website to send information about the organisation|
How long we keep your data
- Student data is archived electronically when a student leaves, and is kept for 10 years
- Staff and trustees’ data is archived when a colleague leaves and is kept for 10 years
- Data belonging to members of the public is retained for the purposes of information sharing, consent is updated 2 yearly
Data subject rights
The General Data Protection Regulations give individual the following subject rights:
- The right to be informed
We must tell individuals what data of there is being collected, how it’s being used, how long it will be kept andwhether it will be shared with third parties.
- The right of access
We must tell individuals that they have the right to request a copy of the information we hold on them
- The right of rectification
We must tell individuals that they have the right to correct data that is inaccurate or incomplete
- The right to be forgotten
We must tell individuals that in certain circumstances, individuals can ask organisations to erase any personal data stored on them.
- The right of portability
We must tell individuals that they can request we transfer any data we hold on them to another organisation
- The right to restrict processing
We must tell individuals that they have to right to ask that we limit the way we use their personal data
- The right to object
We must tell individuals that they have the right to challenge certain types of processing, such as direct marketingThe right to be informed about data processing activities if you believe your data is being processed unlawfullyWe must tell individuals that they have the right to ask for a copy of its automated processing activities if they believe data is being processed unlawfully
Unit 7 Kingscroft Court
Charity No: 1097440
Company No: 04622100
023 9247 9762
© Releasing Potential 2017