Skip to content ↓

Data Protection (GDPR)

Data Protection and Privacy

At The Park Schools Federation, we are committed to protecting the privacy, confidentiality and security of all personal information entrusted to us. We take our responsibilities under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 seriously and ensure that personal data is processed fairly, lawfully and transparently.

We collect and use information about pupils, parents/carers, staff, governors, volunteers and visitors in order to:

  • Support teaching and learning.
  • Safeguard and promote the welfare of children.
  • Monitor and report on pupil progress and attainment.
  • Administer admissions and attendance.
  • Meet our statutory duties and obligations.
  • Manage employment and human resources processes.
  • Communicate effectively with families and external agencies.
  • Support school improvement and accountability
Our Commitment

We are committed to:

  • Processing personal data lawfully, fairly and transparently.
  • Collecting only the information that we genuinely need.
  • Keeping information accurate and up to date.
  • Storing information securely and protecting it against unauthorised access, loss or misuse.
  • Retaining information only for as long as necessary.
  • Respecting the rights of individuals regarding their personal data.
  • Ensuring all staff receive appropriate data protection and information security training.

How We Use Personal Information

The school may process personal information for purposes including: 

  • Pupils – Admissions and school records, attendance and safeguarding, educational assessments and progress tracking, SEND, behaviour and wellbeing support, school trips and enrichment activities, catering and dietary requirements, health and medical support.
  • Parents/Carers – communication regarding your child, emergency contacts, parent payment systems, consent management, educational updates and reports.
  • Staff and Volunteers – Recruitment and employment records, payroll and pension administration, professional development, performance management, safeguarding checks (including DBS processing)

Sharing Information

The school only shares information where there is a lawful basis to do so.

We may share information with:

  • The Department for Education (DfE)
  • Derbyshire County Council and relevant local authorities
  • Educational support services
  • NHS and healthcare professionals
  • Social care services
  • Safeguarding agencies
  • Examination and assessment bodies
  • School improvement partners and inspectors
  • Software and service providers who support school operations

All data sharing arrangements are subject to appropriate contractual and security safeguards.

Photography, Video and Website Images

Images and videos may be used to celebrate learning and school achievements.

Parental consent preferences are recorded and respected. Images will only be used in line with the permissions provided and the school's Photography and Media Consent procedures.

 

CCTV

The school operates CCTV systems on parts of the site for the purposes of:

  • Safeguarding pupils, staff and visitors.
  • Preventing and detecting crime.
  • Protecting school property.
  • Supporting health and safety arrangements.

CCTV footage is retained in accordance with our retention schedule and access is strictly controlled.

For further details please see our CCTV Policy.

Your Data Protection Rights

Under data protection legislation, individuals have rights which may include:

  • The right to be informed.
  • The right of access to personal information.
  • The right to rectification.
  • The right to erasure in certain circumstances.
  • The right to restrict processing.
  • The right to object.
  • The right to data portability where applicable.

Requests relating to personal data should be made in writing to the school's Data Protection Officer.

Subject Access Requests (SARs)

You have the right to request a copy of personal information held about you or your child.

Subject Access Requests should be submitted in writing and will be processed in accordance with UK GDPR timescales.

Please contact the Data Protection Officer for further guidance.

Data Security

We implement appropriate technical and organisational measures to protect personal information, including:

  • Secure electronic systems.
  • Password protection and access controls.
  • Staff training and awareness.
  • Secure storage and disposal procedures.
  • Regular review of data protection practices.
Data Protection Officer (DPO)

The school's appointed Data Protection Officer provides independent advice and monitoring regarding compliance with data protection legislation.

Data Protection Officer:

Education Data Hub, Derbyshire County Council
County Hall
Smedley Street
Matlock
Derbyshire
DE4 3AG

Email: dpforschools@derbyshire.gov.uk
Telephone: 01629 532888
 

Or alternatively, email Mrs L Slack, Schools Business Manager on SchoolsBusinessManager@parkfed.co.uk

Complaints

If you are unhappy with how we have used your personal information, please contact our Data Protection Officer in the first instance.

You also have the right to complain to the:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: www.ico.org.uk
Telephone: 0303 123 1113

 

 

 

  1. 7._IT_Security_AU_Policy_2022_2_
    pdf