General Data Protection Regulation (GDPR) at Harlow Fields School and College
At Harlow Fields School and College, we are committed to protecting the privacy and personal data of our pupils, staff, and the wider community. We adhere to the General Data Protection Regulation (GDPR) and the Data Protection Act (DPA) 2018, ensuring that all personal information is handled with the utmost care and in compliance with legal requirements.
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It establishes guidelines for the collection and processing of personal information within the European Union (EU). GDPR aims to give individuals greater control over their personal data and to simplify the regulatory environment for international business.
As a school, we have specific responsibilities under GDPR, which include:
- Data Protection Officer (DPO): We have appointed a Data Protection Officer who oversees our data protection strategy and ensures compliance with GDPR.
- Privacy Notices: We provide clear and concise privacy notices to inform individuals about how their personal data is collected, used, and stored.
- Data Subject Rights: We respect the rights of individuals regarding their personal data, including the right to access, rectify, and erase their information.
- Data Security: We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or damage.
- Training and Awareness: All staff members are trained on data protection principles and the importance of safeguarding personal information.
Under GDPR, individuals have several rights concerning their personal data, including:
- The Right to Access: You have the right to request access to your personal data and to obtain information about how it is processed.
- The Right to Rectification: You can request corrections to any inaccurate or incomplete personal data we hold about you.
- The Right to Erasure: You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
- The Right to Restrict Processing: You can request that we limit the processing of your personal data under certain circumstances.
- The Right to Data Portability: You have the right to request the transfer of your personal data to another organisation in a structured, commonly used, and machine-readable format.
- The Right to Object: You can object to the processing of your personal data in certain situations, including for direct marketing purposes.
If you have any questions about our data protection practises or wish to exercise your rights under GDPR, please contact our Data Protection Officer via: admin@harlowfields.essex.sch.uk
For more information on GDPR and your rights, please visit the Information Commissioner’s Office (ICO) website at www.ico.org.uk.
At Harlow Fields School and College, we are dedicated to ensuring that your personal data is handled responsibly and transparently, in line with our values of "Working together to Succeed."