The data controller Ullswater Community College processes personal information relating to pupils, staff and visitors, and, therefore, is a data controller. The responsibility of data controller is delegated the Deputy Headteacher. The school is registered as a data controller with the Information Commissioner’s Office and renews this registration annually. Data protection principles The Data Protection Act 1998 is on the following data protection principles, or rules for good data handling: Data be processed fairly and lawfully Personal data shall be obtained only for one or more specified and lawful purposes Personal data shall be relevant and not excessive in relation to the purpose(s) for which it is processed Personal data shall be accurate and, where necessary, kept up to date Personal data not be kept for longer than is necessary for the purpose(s) for which it is processed Personal data shall be processed in accordance with the rights of data subjects under the Data Protection Act 1998 Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data, and against accidental loss or destruction of, or damage to, personal data Personal data not be transferred to a country or territory outside the European Economic Area unless the country or territory ensures an adequate level of protection for the rights and freedoms of data in relation to the processing of personal data Roles and responsibilities The Governing Body has overall responsibility for ensuring that the school complies with its obligations under the Data Protection Act 1998. Day-to-day responsibilities rest with the Headteacher, or the Deputy Headteacher in the headteacher’s absence. The Headteacher will ensure that all staff are aware of their data protection obligations, and oversee any queries related to the storing or processing of personal data. Staff are responsible for ensuring that they collect and store any personal data in accordance with this policy. Staff must also inform the school of any changes to their personal data, such as a change of address.
The data controller Ullswater Community College processes personal information relating to pupils, staff and visitors, and, therefore, is a data controller. The responsibility of data controller is delegated the Deputy Headteacher. The school is registered as a data controller with the Information Commissioner’s Office and renews this registration annually. Data protection principles The Data Protection Act 1998 is on the following data protection principles, or rules for good data handling: Data be processed fairly and lawfully Personal data shall be obtained only for one or more specified and lawful purposes Personal data shall be relevant and not excessive in relation to the purpose(s) for which it is processed Personal data shall be accurate and, where necessary, kept up to date Personal data not be kept for longer than is necessary for the purpose(s) for which it is processed Personal data shall be processed in accordance with the rights of data subjects under the Data Protection Act 1998 Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data, and against accidental loss or destruction of, or damage to, personal data Personal data not be transferred to a country or territory outside the European Economic Area unless the country or territory ensures an adequate level of protection for the rights and freedoms of data in relation to the processing of personal data Roles and responsibilities The Governing Body has overall responsibility for ensuring that the school complies with its obligations under the Data Protection Act 1998. Day-to-day responsibilities rest with the Headteacher, or the Deputy Headteacher in the headteacher’s absence. The Headteacher will ensure that all staff are aware of their data protection obligations, and oversee any queries related to the storing or processing of personal data. Staff are responsible for ensuring that they collect and store any personal data in accordance with this policy. Staff must also inform the school of any changes to their personal data, such as a change of address.
data_protection_and_privacy_notice.docx