Privacy Policy and Data Protection

PRIVACY POLICY

Barnwell School are a data controller for the purposes of the Data Protection Act. We collect information from you and may receive information about you from your previous school. We hold this personal data and use it to operate effectively as a school.

We take data protection very seriously at Barnwell School. We will never share personal information about you with other parties without your consent, unless we are required to do so by law.

In line with the new GDPR requirements, we have appointed a Data Protection Officer (DPO), who is contactable on email, dpo@barnwell.herts.sch.uk. The DPO will oversee our approach to data management and protection.

The GDPR require public authorities and businesses to identify the lawful basis for storing personal data, audit information we already hold and take a ‘data protection by design and default’ approach to personal data. In response to the GDPR we have reviewed our current policies and practices in relation to data security. These include updates to our Privacy Notices, which explain how and why we collect and process data, our legal reasons for doing so, and what your rights are regarding the personal data that we hold. Our Privacy Notices can be accessed by clicking on the appropriate link.

As part of this compliance process, we have also updated our image consent form with regard to the use of photographs and videos. The new regulations are clear that consent must be up-to-date and clearly recorded. From now on, a lack of response cannot be interpreted as implied consent. The consent forms have been sent to all parents and we ask that you return these to us promptly. The form can also be accessed by clicking on the link.

To learn more about the General Data Protection Regulation, please visit the Information Commissioner’s Office website on http://ico.org.uk.