The General Data Protection Regulation (GDPR) provides a modernised, accountability-based compliance framework for data protection in Europe. It is intended to strengthen privacy rights in relation to personal information. The new accountability principle in Article 5(2) of the GDPR requires data controllers to demonstrate that they comply with the good practice principles set out in the Regulation, and states explicitly that this is their responsibility.

The school is the data controller of the personal information you provide to us. Our privacy notices set out what we collect and how we use data.  More information regarding GDPR can be found at ICO - GDPR

Requesting access to your personal data

Under data protection legislation, parents have the right to request access to information about them that we hold either for parents or on behalf of their child. To make a request for your personal information, or be given access to your child’s educational record, please send a subject access request to dpo@winnersh.wokingham.sch.uk 

You also have the right to:

• Object to processing of personal data that is likely to cause, or is causing, damage or distress
• Prevent processing for the purpose of direct marketing
• Object to decisions being taken by automated means
• In certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
• Claim compensation for damages caused by a breach of the Data Protection regulations

If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance. Alternatively, you can contact the Information Commissioner’s Office at https://ico.org.uk/concerns/

Contact

If you would like to discuss anything relating to privacy or GDPR please contact: Mrs Clare Skelland, our Data Protection Officer, via dpo@winnersh.wokingham.sch.uk or (0118) 978 2590