Privacy notice for pupils
Who process your information ?
RAW Workshop alongside your named school are the data controllers of the personal information you provide us. This means that RAW determines the purposes for which, and the manner in which, any personal data relating to pupils and their families is processed. The data protection officer (DPO) of RAW acts as a representative with regard to its data controller responsibilities; the DPO can be contacted at team@raw-workshop.co.uk number 01865714111.
In some cases, your data will be outsourced to a third party processor; however, this will only be done with your consent, unless the law requires us to share your data. Where we outsource data to a third-party processor, the same data protection standards that we uphold are imposed on the processor.
Why do we collect and use your information?
We hold the legal right to collect and use personal data relating to pupils and their families, and we may also receive information regarding pupils from their previous school, Local Authority, agencies and services. We collect and use personal data in order to meet legal requirements and legitimate interests set out in the GDPR and UK law, including those in relation to the following:
● Education Act 1996
● Regulation 5 of the Education (Information about the individual pupils) (England) Regulation 2013
In accordance to the above, the personal data of students and their families is collected and used for the following:
● To support student learning and progress
● To monitor and report on student progress
● To provide appropriate wrap around craw and to support the wellbeing of the student
● To assess the quality of our service
● To safeguard students
This information will include their contact details, assessment/accreditation results, attendance information, any exclusion information, personal characteristics such as their ethnic group, special educational needs and disabilities, and relevant medical information.
The lawful basis for collection of data is defined by the General Data Protection Regulation (GDPR) (introduced on 25 May 2018) as:
Article 6 1.
Processing shall be lawful only if and to the extent that at least one of the following applies:
( c) Processing is necessary for compliance with a legal obligation to which the controller is subject;
Article 9
1. Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation shall be prohibited
2. Paragraph 1 shall not apply if one of the following applies: (J) Processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.
The Education Act 1996 - Section 537A – states that we provide individual pupil information as the relevant body such as the Department for Education.
Children's Act 1989 – Section 83 – places a duty on the Secretary of State or others to conduct research.
Which data is collected?
The categories of student information that we collect, hold and share includes the following:
● Personal information – e.g. names, pupil numbers and addresses
● Characteristics – e.g. ethnicity, language, nationality, country of birth and free school meal eligibility
● Attendance information – e.g. number of absences and absence reasons
● Assessment and accreditation information
● Medical information ● Special Educational Needs and Disabilities
● Exclusions and Behavioural information
● Photographs to aid our records management and curriculum displays
● Education and school history
● Post 16 learning information
● Information regarding pastoral care, safeguarding and pupil wellbeing
Whilst the majority of the personal data you provide to the school is mandatory, some is provided on a voluntary basis. Where consent is required, we will provide you with specific and explicit information with regards to the reasons the data is being collected and how the data will be used.
How long is your data stored for?
Personal data relating to students is stored in line with RAWs GDPR Data Protection Policy.
What are my rights? Parents an pupils have the following rights in relation to the processing of their personal data.
You have the right to:
● Be informed about how we process your personal data.
● Request access to the personal data that we holds.
● Request that your personal data is amended if it is inaccurate or incomplete.
● Request that your personal data is erased where there is no compelling reason for its continued processing.
● Request that the processing of your data is restricted.
● Object to your personal data being processed.
Where the processing of your data is based on your consent you have the right to withdraw your consent at any time.
If you have a concern about the way we are using your data, please raise your concerns in the first instance with the Head of youth services at RAW or please contact your named school. If your concern is not resolved, please contact RAWs DPO; team@raw-workshop.co.uk ; telephone number 01865 714111
Creation Date: 10/01/2024
1st Review: January 25 (No changes)
2nd Review: January 26 (No changes)
Next Review: January 27