The Princethorpe Foundation’s Response To Changes In Data Protection Regulation (GDPR) – May 2018
You will no doubt have heard of new data legislation, called GDPR (the General Data Protection Regulation), which comes into force on Friday 25 May 2018.
We would like to explain to you how the Princethorpe Foundation is responding to this new regulation. This is for information only; as long as you are happy there is no action required of you in response to this.
Over the last year we have been working hard to keep abreast of directives from the Information Commissioner’s Office (ICO) and their guidance concerning data processing. We have also sought advice from professional industry bodies, our school solicitors and external consultants.
Under GDPR all data controllers, including the Princethorpe Foundation, must have a Lawful Basis for processing Personal Data. The six bases are: Consent, Contractual, Legal Obligation, Vital Interests, Public Tasks and Legitimate Interests. The ICO states that it is the responsibility of the individual organisation to decide on which bases to process data.
Having undertaken a thorough review and audit of the data we hold and the way in which we process it, the Princethorpe Foundation believes that all of the data held relating to our community is processed under three bases, namely Legal Obligation, Contractual and/or Legitimate Interests. For data protection purposes we consider our community to include: prospective, current and former pupils, prospective, current and former parents, prospective, current and former staff and Friends of the Foundation.
Due to the nature of the existing relationship we have with you, our interpretation is that we can lawfully process your information under the three bases mentioned above. We have conducted, as recommended by the ICO, a Legitimate Interests Assessment (LIA) to support this decision. Our LIA will be kept under regular review.
Please be assured that we will treat your data with the utmost integrity, respect and confidentiality. Your personal data will be stored and used in accordance with our updated Privacy Notices, which reflect the new regulation. Please ensure that you familiarise yourself with these by clicking on the relevant links below:
- Privacy Notice for Parents
- Privacy Notice for Pupils
- Privacy Notice for Alumni and Friends of the Foundation
The Privacy Notice for Staff, Visiting Staff and Volunteers is available on the VLE.
Our communications with you will be conducted in the least intrusive way possible and only in ways that you would reasonably expect, as additionally outlined in our privacy notices. Where we process children’s data we take extra care to ensure we protect their interests.
In addition, please be aware that you can opt out of receiving non-legal or non-contractual communications at any time by contacting us by email, telephone or by letter. As follows:
Telephone: 01926 634200
Post: Eddie Tolcher, Foundation Bursar, Princethorpe College, Princethorpe, Rugby, CV23 9PX
If you have any questions relating to changes in data regulation law, or would like to see our Data Protection Policy, please do not hesitate to contact Eddie Tolcher, Foundation Bursar as above.