General Data Protection Regulation
United Learning values the personal information entrusted to us and will process personal data in accordance with the principles set out in the General Data Protection Regulation (UK GDPR).
United Learning has put in place policies, procedures and guidance to ensure that we will always:
-
determine the legal basis for the processing of personal data and document
-
be open with individuals about how we use their information and who we give it to
-
only process personal data in a manner consistent with the purpose for which it was collected
-
consider and address the privacy risks when we are planning to use or hold personal information in new ways, such as when introducing new systems
-
have processes in place to ensure the accuracy of personal data held
-
keep personal information to the minimum necessary and delete it when we no longer need it
-
have processes in place to enable individuals to exercise their rights as set out in the UK GDPR
-
have appropriate technical and organisational measures in place to make sure personal information is kept securely and only accessed on a need to know basis
-
provide training to staff who handle personal information and treat it as a disciplinary matter if they deliberately or recklessly misuse or don’t look after personal information properly
-
put appropriate financial and human resources into looking after personal information.
If you would like to make any requests, think your data has been misused or it is not secure, you should contact us:
Group Data Protection Office; Alison Hussain, DataProtection@unitedlearning.org.uk
Data Protection Lead for Campion School; Ruth Barry, and can be contacted on csoffice@campionschool.org.uk