GDPR

 

General Data Protection Regulation (GDPR)

 

What is GDPR?

This refers to the General Data Protection Regulation originally EU legislation that has been taken into UK law and should be viewed alongside the Data Protection Act 2018 to provide a comprehensive picture of data protection legislation in the UK. 

EU GDPR legislation was designed to ‘harmonise’ data privacy laws across Europe, as well as give greater protection and rights to individuals. With the introduction of UK GDPR there are significant additional protections for the public these protections transferred to UK legislation in 2018. The legislation identifies specific responsibilities for businesses and public bodies that handle personal information to ensure that data protection is considered whenever there is a requirement to process personal information. In essence, data protection legislation is about protecting personal data, and ensuring that individuals are aware of what data is being processed and how it is used. It gives individuals greater control and say over how their personal data is used by companies and public bodies.

GDPR defines personal data as:

Any information relating to an identified or identifiable person (known as a Data Subject).

An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as name, an ID number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of a natural person.

Privacy Notices – How we use your data

To view the Westcountry Schools Trust Privacy Notice (PUPILS) please see below

To view the Westcountry Schools Trust Privacy Notice (PARENTS) please see below

To view the Westcountry Schools Trust Privacy Notice (WORKFORCE) please see below

To view the Westcountry Schools Trust Privacy Notice (TRUSTEES, VOLUNTEERS & MEMBERS) please see HABTVM below

Subject Access Requests - what data do we hold

To make a Subject Access Request (SAR), please complete the request form below and email it to the Westcountry Schools Trust Data Protection Officer.

The Westcountry Schools Trust will respond within one month of your request or approval to provide the information requested. We will communicate with you if an extension to the response period is required (up to a further two months is available under GDPR legislation for complex requests). 

There will be no charge for this request.

To download the Subject Access Request Form (MS Word version) please click on the attachment below

To download the Subject Access Request Form (PDF version) please click on the attachment below

Where a request is made for pupil data additional checks may be required to ensure that there is a secure legal basis for sharing information.  

The SAR completed form should be emailed to the WeST Data Protection Officer at DPO-WeST@westst.org.uk

Freedom of Information publication schedule

In line with legal responsibilities, WeST is required to signpost the location of pubically available information that may be of interest to the general public. Please see below for the most recent FOI publication schedule.