The General Data Protection Regulation (GDPR) is a new law that determines how your personal data is processed and kept safe, and the legal rights that you have in relation to your own data.
Uckfield College collects, holds and uses information about students, staff, parents, governors and other adults connected with the college. Under the Regulation (EU) 2016/679 (General Data Protection Regulation), data is known as personal data. The regulation puts in place numerous safeguards for the use of data about individuals.
We take our Data protections responsibilities very seriously and all of the information we hold on individuals follows the six key principles set out in the GDPR:
- Data must be processed lawfully, fairly and transparently
- It must be collected for specific, explicit and legitimate purposes
- It must be limited to what is necessary for the purposes for which it is processed
- Information must be accurate and kept up to date
- Data must be held securely
- It can only be retained for as long as is necessary for the reasons it was collected
Information about your rights under GDPR can be found on the Information Commissioner’s website.
We have provided Privacy Notices for students, staff and governors. These explain how we collect and process information:
Privacy Notice : Students
Privacy Notice: Governors
Privacy Notice: Staff