Privacy (GDPR)

Data Protection and General Data Protection Regulations (GDPR)

Dixons Academies Charitable Trust (incorporating academies within the Trust) are registered with the Information Commissioner’s Office under Registration Number: ZAO39907

General Data Protection Regulations (GDPR)

With the introduction of the General Data Protection Regulations on 25 May 2018, the Trust (and academies within the Trust) has reviewed their data protection arrangements to ensure they comply with the new regulations.

How does Data Protection legislation protect personal data?

Data protection legislation places obligations on organisations which must be obeyed when obtaining and using information about you. Data Protection legislation also provides "individuals" (data subjects) with certain rights which data controllers and data processors must respect. See www.ico.org.uk for more information.

How does Dixons Academies Charitable Trust protect personal data?

Data Protection legislation requires schools to keep personal data safe and to have appropriate systems, policies and procedures in place to enable them to comply with their data protection responsibilities.

Please refer to the Trust GDPR Data Protection Policy and Freedom of Information Policy for further information.

Academies should refer to the Trust Data Protection – Data Sharing Guidance (contained within the above policy); other relevant policies and procedures; Privacy Notices and Fair Processing Notices for further information. Data Protection or Data Sharing queries should be raised with the relevant academy Operations Manager, in the first instance, or the Trust Data Protection Officer. Information regarding the GDPR is available at www.ico.org.uk.

Trust Privacy / Fair Processing Notices

Workforce Privacy Notice

Pupils, Parents and Staff Privacy Notice

*UPDATE JANUARY 2021 Coronavirus Test and Trace (Staff and Student) Privacy Notice

Please note, academies will handle documentation relating to consent.

Requests for information

The Trust (and academies within the Trust) will follow current data protection and other legislative guidance when dealing with Data Subject Access Requests – click here for current ICO Pupils Info. As Dixons Academies Charitable Trust schools are academies, a student or parent / carer (person with parental responsibility / legal guardian) does not have a legal right to access a child’s educational record. It will be up to the school to decide whether to grant such access.

Please refer to the Information Commissioner's Office Subject Access Request Guidance for further information.

How do you ask to see information about you?

If you wish to request information we hold about you, please complete the Data Subject Access Form below and send it to the relevant academy or Dixons Academies Charitable Trust Office. Any request in writing from the individual (Data Subject) will be considered as a valid request, whatever the format, as long as it contains the relevant information to enable us to deal with your request.

How do you request information on behalf of someone else?

If you are requesting information on behalf of someone else, you must complete the Data Subject Access Request Form and provide written evidence that you have the Data Subject’s authority to ask for the information on their behalf e.g. signature on the Data Subject Access Form, a letter written by them or evidence of Power of Attorney etc.

Please complete the appropriate request form and send it to the relevant academy.

Data Subject Access Report Form

If your Data Subject Access Request is approved, you will be provided with either a printout or a photocopy of paper records. Where information is requested to be provided by email, we will only agree to this if it can be sent via an approved secure method.

We will contact you to advise if we are unable to approve your request for information.

How do you provide your identity?

If you are not known to the academy or Trust Office, we may ask to see proof of your identity. The following forms of identity will be accepted as proof of identity:

A copy of your passport - A copy of your driving licence - A copy of your bank, building society or credit card statement in the Data Subject's name for the last quarter - A copy of your Council Tax bill

Will you be charged for information provided?

Dixons Academies Charitable Trust (and academies within the Trust) will follow guidance within current Data Protection legislation in relation to charges for information. See http://www.ico.org.uk for further information.

What do you do if the data is incorrect?

Please contact the relevant academy / Trust Office to tell them what is incorrect and ask for it to be corrected. You can also appeal to the Information Commissioner if the academy does not correct the information.

Making a complaint

If you are unhappy with the way your request for information has been dealt with, or you think your data has been misused or not held securely, please contact the Trust Data Protection Officer in the first instance.

Data Protection Officer
GDPR Sentry Limited
Email: support@gdprsentry.com
Telephone: 0113 8042035
Address: Unit 434 Birch Park, Thorp Arch Estate, Wetherby, LS23 7FG

If you are unhappy with the outcome of your complaint, you can escalate your complaint to the Information Commissioner’s Office (ICO).

ICO helpline: 0303 123 1113

https://ico.org.uk/concerns/