GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data privacy law that dictates how organisations handle and protect personal data. Enacted by the EU, it applies globally to any business processing data related to EU residents.

Our school aims to ensure that all personal data collected about staff, pupils, parents, governors, visitors and
other individuals is collected, stored and processed in accordance with the General Data Protection
Regulation (GDPR) and the expected provisions of the Data Protection Act 2018 (DPA 2018) as set out in
the Data Protection Bill.
The school is committed to being concise, clear and transparent about how it obtains and uses
personal information and will ensure data subjects are aware of their rights under the legislation.

Our school processes personal data relating to parents, pupils, staff, governors, visitors and others, and
therefore is a data controller.
The school is registered as a data controller with the ICO and will renew this registration annually or as
otherwise legally required.

The Governing Board has overall responsibility for ensuring that the school complies with its obligations. Day-to-day responsibilities rest with the Head, or the Deputy Head. The Head will ensure that all staff are aware of their data protection obligations, and oversee any queries related to the storing or processing of personal data. It is a legal requirement to appoint an independent Data Protection Officer. E2E Education has been appointed and is contactable via email:  DPO@e2e-education.co.uk

The school Data Protection Officer is E2E Education

If you have any enquires please contact the school office on 01515250843, or email admin.office@gwladysstreet.com

In school, Mr Moore is the school point of contact.

School Privacy Notice Pupil Information

School Privacy Notice School Workforce