We are committed to being lawful, fair and transparent about how we collect and use data.

Data Protection.

Academies should refer to the Trust Data Protection Policy, Information Management and Retention Policy and other relevant policies and procedures including Privacy Notices for further information. Data Protection or Data Sharing queries should be raised with the relevant School Business Manager in the first instance or the Data Protection Officer (DPO) by emailing gill@mindography.co.uk. To view the Privacy Notices please see the links below.

Information regarding the GDPR is available at www.ico.org.uk


The Trust has appointed Gill Smith as its Data Protection Officer (DPO). The role of the DPO is to inform and advise the Trust on its data protection obligations. The DPO can be contacted at gill@mindography.co.uk. Questions about our policies, or requests for further information, should always be directed to the Data Protection Officer in the first instance. As part of its normal operation, the Trust will be required to share personal information about its employees, parents, pupils, volunteers, job applicants, governors and trustees with other organisations, mainly the Local Authorities, Department for Education, Education & Skills Funding Agency, other schools or educational bodies or potentially social services, etc. This is classed as lawful basis to process personal data. For all our key stakeholders the Trust has a Privacy Notice explaining the type of data we hold, the reasons why and how it is processed. The privacy notices are below.


What are the lawful bases for processing?

The lawful bases for processing are set out in Article 6 of the GDPR. At least one of these must apply whenever you process personal data: (a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose. (b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract. (c) Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations). (d) Vital interests: the processing is necessary to protect someone’s life. (e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law. (f) Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks.) The Trust has drafted a number of policies to ensure all staff, trustees and governors are aware of their responsibilities and outlines how the trust complies with the following core principles of the GDPR. These policies are available below.


 

Consent.

Academies are responsible for getting consent for data outside of the lawful basis for processing. This consent can include permission for photographs or joining a mailing list. You can withdraw consent at anytime. To do this please contact the Academy directly.

Photo consent staff

Photo consent primary

Photo consent secondary

Photo consent governors

Protection.

Data Protection legislation requires the Trust and its Academies to keep personal data safe and to have appropriate systems, policies and procedures in place to enable them comply with their data protection responsibilities. The Trust has updated its Data Protection Policy to reflect the GDPR requirements and combined with other relevant polices to ensure your data is protected and processed correctly.

Acceptable Use Policy

CCTV Policy

Data Protection Policy

ICT and internet use policy

 

Making a complaint.

If you are unhappy with the way your request for information has been dealt with or you think your data has been misused or not held securely, please contact the DPO in the first instance.

Data Protection Officer, Albany Learning Trust, Albany Academy, Bolton Road, Chorley, Lancashire, PR7 3AY. Email: gill@mindography.co.uk

If you are unhappy with the outcome of your complaint, you can escalate your complaint to the Information Commissioner’s Office (ICO).

ICO helpline Telephone: 0303 123 1113

https://ico.org.uk/concerns/