High Seaton, Workington, Cumbria, CA14 1NP

01900 66982

admin@seatonacademy.co.uk

“Educating our children with the skills they need to live fullfilling lives.”

Data Protection

Seaton Academy is required to maintain certain personal data about living individuals for the purposes of satisfying operational and legal obligations. We recognise the importance of the correct and lawful treatment of personal data, details of which are given in our policy.

 

Seaton Academy

Data Protection Policy

 

Seaton Academy is committed to protecting the rights and privacy of individuals in accordance with the Data Protection Act 1998.  Seaton Academy processes information about its staff, pupils and other individuals it has dealings with for a range of administrative purposes. In order to comply with the law, information about individuals will be collected and used fairly, stored safely and securely and not disclosed to any third party unlawfully.

Seaton Academy is committed to protecting the rights and privacy of individuals in accordance with the Data Protection Act 1998.  Seaton Academy processes information about its staff, pupils and other individuals it has dealings with for a range of administrative purposes. In order to comply with the law, information about individuals will be collected and used fairly, stored safely and securely and not disclosed to any third party unlawfully.

All "processing" of personal data (includes collection, holding, retention, destruction and use of personal data) is governed by the Data Protection Act 1998. The Act applies to all personal data - whether they are held on a computer or similar automatic system or whether they are held as part of a manual file. Personal data is defined as information relating to an identifiable living individual and can be held in any format, electronic (including websites and emails), paper based, photographic etc. from which the individual's information can be readily extracted.

Under the 1998 Act, all organisations that process personal information are required to notify the Information Commissioner's Office.  Seaton Academy’s notification describes the various types of processing of personal information and defines the persons or bodies to which the information may be disclosed.

Full details of the notification can be found at http://www.dpr.gov.uk/search.html. Our registration number is Z2409420Failure to comply with the Data Protection Act could result in the prosecution.

All staff, contractors, consultants or suppliers to Seaton Academy that are concerned with, or have access to, such data have an obligation to ensure that they are processed according to the eight principles of data protection and the rights of data subjects. This means, among other things, that staff must treat all data carefully and must not disclose personal data to unauthorised persons.

 

Eight Data Protection Principles:

 Data should be processed fairly and lawfully.

·            Data should be obtained for one or more specified lawful purposes.

·            Data shall be adequate, relevant and not excessive.

·            Data shall be accurate and where necessary kept up to date.

·            Data is not kept longer than is necessary for its purpose.

·            Data shall be processed in accordance with subject rights under the Act.

·           Appropriate technical and organisational measures shall be taken against unauthorised/unlawful processing,     loss, destruction, damage to personal data.

·           Data shall not be transferred outside EEA unless that country/territory ensures adequate level of protection   for rights and freedoms of data subjects in relation to the processing of personal data.

 

Data Subject Rights:

(A data subject is a person/s about whom such data is held.)

 

To make subject access requests regarding the nature of information held and to whom it has been disclosed.

·          To prevent processing likely to cause damage or distress

·           To prevent processing for purposes of direct marketing

·           To be informed about the mechanics of automated decision taking process that will significantly affect them

·           Not to have significant decisions that will affect them taken solely by automated process

·           To take action for compensation if they suffer damage by any contravention of the Act

·           To take action to rectify, block, erase or destroy inaccurate data

·           To request the Commissioner to assess whether any provision of the Act has been contravened

 

It is an offence to process personal data except in strict accordance with the eight principles of data protection and the rights of data subjects. Further information on the Data Protection Act can be found at http://www.dataprotection.gov.uk/.

 

Implementing the policy

The data controller is Christine Mounsey admin@seatonacademy.co.uk. This policy has been read and approved by the Directors of Seaton Academy and is reviewed on an annual basis.

All staff, contractors, consultants or suppliers working on behalf of Seaton Academy are required to read and comply with the terms of this policy.

 Effective from: September 2015