What is the General Data Protection Regulation?
 

The General Data Protection Regulation (GDPR) is a piece of EU-wide legislation which determines how people’s personal data is processed and kept safe, and the legal rights individuals have in relation to their own data. 

The full General Data Protection Regulation has been published by the Council of the EU and the UK implemented the GDPR despite leaving the EU.

GDPR ICO REGISTRATION NUMBER IS:

Z7157252

GDPR DATA PROTECTION OFFICER IS:

SPS DPO Services

Please read our Privacy Notice here:

Ditton CE Junior School Privacy Notice

Paper copies

If you would like paper copies of anything on our school website please ask the office (schooloffice@ditton-jun.kent.sch.uk) who will provide these for you, free of charge.

The legal basis for processing data

The majority of the processing of personal data within a school falls under the basis of it being in the ‘public interest’ as it is in the public interest that we operate schools and educate our children. This would include, for example, storing personal and academic information about our pupils, their parental contact details, their attendance record, the annual census requirements and medical information.

However, there will be occasions when we need to receive consent from parents/carers in order to process a child’s data and the GDPR has brought in stricter rules around consent. Consent for processing someone’s personal data must be freely given, specific, informed and unambiguous, and a positive affirmation of the individual’s agreement.

Therefore, there are a number of situations in which we need to gain written consent from parents. One of these is consent around the use of photos.