We are St Mary’s Church of England Primary School, Banbury. During your child’s time with us, we will gather and use information relating to you. Information that we hold in relation to individuals is known as their “personal data”. This will include data that we obtain from you directly and data about you that we obtain from other people and organisations. We might also need to continue to hold your personal data for a period of time after your child has left the school. Anything that we do with an individual’s personal data is known as “processing”.
This document sets out what personal data we will hold about you, why we process that data, who we share this information with, and your rights in relation to your personal data processed by us.
What information do we process in relation to you?
We will collect, hold, share and otherwise use the following information about you:
· personal information (such as name, address, home and mobile numbers, personal email address, emergency contact details, relationship, marital status
· financial details (such as bank account or credit card details), and other financial details such as eligibility for free school meals or other financial assistance
· CCTV footage and images obtained when you attend the school site
· your relationship to your child, including any Court Orders that may be in place
We will also use special categories of data such as gender, age, ethnic group, sex or sexual orientation, religious or similar beliefs, information about health, genetic information and biometric data. These types of personal data are subject to additional requirements.
Where do we get your personal data from?
We will obtain an amount of your personal data from you, by way of information gathering exercises at appropriate times such as when your child joins the school, and when you attend the school site and are captured by our CCTV system.
We may also obtain information about you from other sources. This might include information from the local authorities or other professionals or bodies, including a Court, which might raise concerns in relation to your child.
Why do we use your personal data?
We will process your personal data for the following reasons: 1. Where we are required by law, including: · To provide reports and other information required by law in relation to the performance of your child · To raise or address any concerns about safeguarding · To the Government agencies including the police · To obtain relevant funding for the school · To provide or obtain additional services including advice and/or support for your family
2. Where the law otherwise allows us to process the personal data as part of our functions as a school, or we are carrying out a task in the public interest, including: · To confirm your identity · To communicate matters relating to the school to you · To safeguard you, our pupils and other individuals · To enable payments to be made by you to the school · To ensure the safety of individuals on the school site · To aid in the prevention and detection of crime on the school site
3. Where we otherwise have your consent Whilst the majority of processing of personal data we hold about you will not require your consent, we will inform you if your consent is required and seek that consent before any processing takes place.
Why do we use special category personal data?
We may process special category personal data in relation to you for the following reasons: 1. Where the processing is necessary for reasons of substantial public interest, including for purposes of equality of opportunity and treatment, where this is in accordance with our Data Protection Policy. 2. Where the processing is necessary in order to ensure your health and safety on the school site, including making reasonable adjustments for any disabilities you may have. 3. Where we otherwise have your explicit written consent.
There may also be circumstances where we need to use your information in relation to legal claims, or to protect your vital interests or those of your child, and where it is not possible to seek your consent.
Failure to provide this information
If you fail to provide information to us we may be prevented from complying with our legal obligations.
How long will we hold your personal data for?
We will hold your personal data only for as long as necessary. How long we need to hold on to any information will depend on the type of information. For further detail please see our Records Management Policy.
Who will we share your personal data with?
We routinely share information about you with:
· Local authorities, to assist them in the exercise of their responsibilities in relation to education and training, youth support and safeguarding purposes
· The Department for Education and the Education and Skills Funding Agency, in compliance with legal obligations of the school to provide information about students and parents as part of statutory data collections
· Contractors, such as payment processing providers to enable payments to be made by you to the school
Your rights in relation to your personal data held by us
You have the right to request access to personal data that we hold about you, subject to a number of exceptions. To make a request for access to your personal data, you should contact:
Please also refer to our Data Protection Policy for further details on making requests for access to your personal data.
You also have the right, in certain circumstances, to:
· Object to the processing of your personal data · Have inaccurate or incomplete personal data about you rectified · Restrict processing of your personal data · Object to the making of decisions about you taken by automated means · Have your data transferred to another organisation · Claim compensation for damage caused by a breach of your data protection rights
If you want to exercise any of these rights, then you should contact Mrs V Woods, Headteacher and Designated Safeguarding Lead. The law does not oblige the school to comply with all requests. If the school does not intend to comply with the request, then you will be notified of the reasons why in writing.
Covid 19 and Test and Trace
Message relates to Government guidance as at 22 September 2020
In the event that there is a case of Covid-19 in the school and, alongside our protocols for dealing with such an event, there may be the possibility that we will be expected to provide limited contact information about individuals to the NHS Test and Trace programme. This may include your details, subject to the circumstances at the time. As a public body, we have a duty to co-operate with the Government's public health strategy for containing Covid-19, a central part of which is the NHS Test and Trace programme. As a result, we have a lawful basis for sharing your details under the GDPR regulations as part of our "public task". The regulations say that we can do this where it ‘is necessary for the performance of a task carried out in the public interest’ (6.1.e) and ‘processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of healthcare’ (9.2.i). So, we do not require your positive consent to share your contact information with NHS Test and Trace.
However, you retain the right to object to our sharing your (or your child's) details with the programme. This is not an absolute right, and, if you do object, we will have to balance the reasons you have given against our compliance with our public duty. If you do want to object, please advise us as soon as possible, giving reasons, so that we can manage your personal data responsibly.
Concerns If you have any concerns about how we are using your personal data, then we ask that you contact our Designated Data Protection Lead in the first instance. However, an individual can contact the Information Commissioner’s Office should you consider this to be necessary, at https://ico.org.uk/concerns/.
Contact
If you would like to discuss anything in this privacy notice, please contact: