Alfriston School has a number of policies that cover the areas of data processing and data protection, and these policies are linked below for your reference.
If in the meantime you would like to know more about the GDPR and your rights, please visit the UK’s data protection regulator, the Information Commissioner’s Office at www.ico.gov.uk
Should you have any queries regarding the GDPR and our school, the school’s Data Protection Officer is Ellie Davison. please email us at email: firstname.lastname@example.org
Subject Access Requests
In line with our Data Protection Policy and the requirements under the Data Protection Act and recent GDPR, pupils and parents / guardians have a right to access data that the school has collected about them by any data controller. This is commonly referred to as Subject Access.
Subject Access Requests can be made to the Data Protection Officer named above. These requests may be submitted verbally, on paper, or electronically via the email shown above. Please clearly mark all correspondence with the words “SUBJECT ACCESS”. The school has a duty to check the identity of those making such requests, and if we are unable to prove without doubt the identity of the requestor, we may ask for a piece of additional information such as a witnessed copy of your signature or proof of your address. We will, without undue delay,
Further information about Subject Access Requests may be found in the Data Protection Policy referenced above.
Freedom of Information Act
All public authorities, including schools, are required under the Freedom of Information Act to adopt a publication scheme that has been approved by the Information Commissioner.
There is currently one approved model publication scheme, which has been produced by the Information Commissioner’s Office (ICO).
Schools must adopt the ICO’s model scheme and make it publicly available.