The Data Protection Act 1998 was replaced by the General Data Protection Regulation (GDPR) and Data Protection Act 2018 on the 25th May 2018. GDPR brings with it a new responsibility to inform parents and stakeholders about how we are using personal data and who it is being used by.

What does GDPR mean for Mill Green School?

GDPR requires schools to identify the lawful basis for processing and storing personal data, to audit information already held and to take a ‘data protection by design and default’ approach to personal data. It also introduces new individual rights relating to personal data.

At Mill Green School, we take our data protection obligations seriously. We will ensure that your personal data is processed fairly and lawfully, is accurate, is kept secure and is retained for no longer than is necessary. Our pupils, parents, carers, staff, governance members and stakeholders have the right to be right to be informed, to object, to rectification, to erasure, to restrict processing and to data portability.

A great deal of the processing of personal data undertaken by the school will fall under the specific legal basis ‘in the public interest’. As it is in the public interest to operate schools successfully, specific consent will not be required in the majority of cases in schools. Explicit consent must be given however to anything that isn’t within the normal business of the school, especially if it involves a third party.

Data Controller

Mill Green School is classed as a ‘Data Controller’. This means that we collect and use personal information for specified purposes, in our case related the education of young people who attend the school.

Mill Green School has appointed HY Education as our Data Protection Officer (DPO)It is the Data Protection Officer’s role to ensure that any personal information processed by the Organisation is processed fairly and lawfully (respecting your rights and ensuring we follow the law).

Privacy Notices 

The documents in the side bar detail how Mill Green School uses and protects your personal information. Click on the links to find out more.

Contact

If you have any queries regarding data protection at Mill Green School please contact Stephanie Shipley, School Business Manager on 01744 678760 or via [email protected].

Should you wish to contact our Data Protection Officer, they can be contacted in writing at HY Education, 3 Reed House, Hunters Lane, Rochdale, OL16 1YL, by email at [email protected] or by telephone on 0161 543 8884.