GDPR

Across the Bryngwyn and Glan-y-Môr federation, we know just how important it is to protect our stakeholders’ personal information. The proper handling of personal information by the School is very important in delivering education to your child. So our revised policy gives you more protection than ever before. As a true community school, and run for, the benefit of our learners, parents, carers, staff and stakeholders, we think that's the right thing to do.

This document will help you understand how we collect and manage your personal information. It gives you a summary of what we think is important to you or the things you’ll be most interested in.

What you can read about in our revised GDPR Policy

Our new revised policy will tell you more about a number of things, including:

• The information we collect about you, including when and why we do it

• Who we might share your information with

• Who we might collect information about you from

• How we use your information to provide, or improve, our educational services, meet regulations, to let you know about changes in the school, or just simply communicate with you regarding changes in the school

• How we might use your information to prevent any crime and to protect and safeguard our business and staff, parents, pupils etc.

• How we only operate Lawfully within the General Data Protection Regulation when we collect and process Information.

We have added new information to our revised Privacy Policy and included:

• How Long we will keep your information for

• How we only operate within the General Data Protection Regulation, when we collect and process information

The information we collect about you

The information we collect about you and your child will be used for the purposes of:

• Supporting your child’s learning

• Monitoring and reporting on their progress

• Providing appropriate pastoral care

• Assessing the quality of our education

We'll only ever collect the information we need to provide you with our educational services, manage our organization effectively or to protect our business for all our stakeholders

We'll collect information from you and sometimes information from-third parties about you/your child.

We collect the following types of personal data:

• Contact details for you and your child

• Your child’s date of birth

• Your child’s gender

• Unique Pupil Number

• Pupil ID

• Your family’s composition

• Child’s language ability

• Your social circumstances

• Education details

• Images (inc.CCTV)/photographs

• Information about your child’s health

• Your child’s racial or ethnic origin

• Religious or philosophical beliefs

• Biometric data

The School collects information directly from you but we also receive information from the following sources:

• Any previous schools your child has attended

• Carmarthenshire County Council Education & Children Services department

• Other local authorities

Examples of how we collect information:

• If you want to make an appointment or ring the school, we will ask you for your name and contact details

• If you want to enrol a pupil, we will ask you for your name and contact details along with other information to confirm your identity and parental responsibility before proceeding.

• If you apply for any job within the organization we will always ask you to complete an application form, and if successful we will ask you to provide information to confirm your identity. You will have to undertake a full DBS assessment incompliance wit current EWC regulations.

Who has access to your information?

We share your information with the following recipients

• Carmarthenshire County Council

• Welsh Government

• Other schools, where your child leaves our school

• Educational through Regional Working regional consortium

• Hywel Dda University Health Board

• Ceredigion County Council, who provide our management information system

• Further education colleges

There are also other specific situations where we may be required to disclose information about you, such as:

• Where the Council is required to provide the information by law

• Where disclosing the information is required to prevent or detect a crime

• Where disclosure is in the vital interests of the person concerned

How long we'll keep your information

We usually keep your information for the whole time you have a contract of employment with us, or have a pupil in the school, or a business relationship with us. We then tend to keep your information for up to six years afterwards.

We keep other types of information for different reasons and time periods.

• For pupil educational records, we store the information until the pupil is aged 25.

• General enquiries to the school for up to twelve months.

• For SEN records we store the information until the pupil is aged 25.

• For financial records we store information for 6 years, though for school meals information we only hold for 3 years

• For staff records we store information for 6 years

N.B. Sometimes it's necessary for us to keep your information for Longer, perhaps in connection with a claim, to investigate a complaint or to protect our organization

How we'll use your information

We tend to use your information to manage your relationship with us, to provide an effective educational service and to keep you updated and to help us in communications with you.

You have the right to:

• Obtain access to the personal data that the school is processing about you

• Have any inaccurate or incomplete information rectified (corrected)

• Withdraw your consent to processing, where this is the only basis for the processing

• Make a complaint to the Information Commissioner’s Office (ICO), the independent body in the UK which protects information rights

In some circumstances, you may have the right to:

• Object to the processing of your personal information

• The erasure of your personal data

• Restrict the processing of your personal information

• Data portability

You can also access your child’s education record under the Pupil Information (Wales) Regulations 2011.

For further information regarding your rights and accessing information please contact Carmarthenshire County Council’s Data Protection Officer.