GDPR

Media Consent

Please Note:

As per the ICO ‘Taking Photographs in Schools’, photos taken purely for personal use are exempt from the Data Protection Act 2018, e.g. a parent takes a photograph of their child and some friends taking part in school Sports Day to put in the family album, parents attending a school performance wish to video it.

Occasionally we collect and process data as a requirement for a public task (article 6, e), which could include collecting evidence of our duty to educate children, in the form of a learning platform, or the capture of images/video/sound at school events such as sports day and concerts/productions. 

Photographs may be used in publicity material for the school, including printed and electronic publications, video and webcam recordings and on websites. They may also be used by the news media in printed and/or electronic form and stored in their archives.  This might include images sent to the media by the school and images/footage the media may take themselves if invited to the school to cover an event, in which case further details would be provided to you.

We would only upload/use media of your child during their time at the school but would not necessarily remove these when they leave the school.

We would ensure GDPR compliance of any company chosen by the school to process your personal data. You may receive content on an associated private account regarding your child’s work and/or progress.

1 There may be times where, to perform our duty to educate your child, we may need to use online communication tools (sound and/or video of your child) to under the lawful basis of performing a public task (6, e), even if you have not given specific consent above. Under Article 6 and Article 9 of GDPR, where the above lawful basis does not allow us to collect essential personal information, we will use consent (6, a).

Data Protection Officer Contact Details

Our Data Protection Officer (DPO) is Richard Maskrey. He can be contacted by email dpo@micklem.herts.sch.uk

Subject Access Request

The GDPR extends to all data subjects a right of access to their own personal data.  This is known as a subject access request.   A formal request from a data subject for information that a school holds about them must be made in writing.  A subject access request can be made by anyone including pupils, parents, staff, governors and members of the public.

Subject Access Requests can be made via the school office or directly to the school's Data Protection Officer (DPO) via email, dpo@micklem.herts.sch.uk. Provided that sufficient information has been provided the school must supply the data requested within a month from the date of request.

The school office may be closed outside of term time or when the school is closed for a reason out of our control. Any requests made during closure may not be completed by our staff until the school reopens. This includes Subject Access Requests (SAR) under GDPR and Freedom of Information Requests. Due to the complexities of replying to such requests during the school holidays, we may need up to 2 months to complete this request, although we will endeavour to complete it more quickly, and usually within 30 days once we are satisfied with your identity and the school is open. If we need longer than this during term time, we will inform you. See https://ico.org.uk/yourdata-matters/time-limits-for-responding-to-data-protection-rights-requests/ for clarification of this information.

Please see our Subject Access Request Policy above for more information.

Useful information from the Information Commissioners Office

Please click on the links below