GDPR Policy

Privacy Notice

How we use your information

Our privacy notices explain what to expect when North West London Jewish Day School (NWLJDS) collects personal information. In this notice NWLJDS 180 Willesden Lane, London NW6 7PP is the data controller as defined by Data Protection legislation.

Our Data Protection Officer is:

Rajesh Seedher

020 8937 2018

school.dpo@brent.gov.uk

Data Protection Officer, Brent Council, Civic Centre, Engineers Way HA9 0FJ

The purposes of processing this personal data

Your information is collected for the purpose of:

· Providing education, training, welfare, and educational support services

· Administering school property

· Maintaining the school’s accounts and records

· Carry out fundraising

· Supporting and managing the school’s employees

· The school also use CCTV systems to monitor and collect visual images for security and the prevention of crime

The detailed purposes, categories of people, categories of personal data to be processed, legal justification, retention and information sharing can be found on the schools Record of Processing Activities. A copy can be obtained from our Data Protection Officer.

The lawful basis on which we use this information

We collect and use information under one or more of the following legal basis.

· Legal obligation – we need to process your information to comply with the law

· Public task – we need to process your information to carry out the task to provide you with an education

· Contract – we need to process your information as part of a contract such as contract of employment.

· Consent – we need your permission to use your information

Where we require consent to use your information we will make it clear when we ask for consent and explain how to go about withdrawing your consent.

The Education Act 1996 – this information can be found in the census guide documents on the following website

We collect and process special categories of personal data for reasons of substantial public interest.

https://www.gov.uk/education/data-collection-and-censuses-for-schools]

Categories of personal data

The categories of information we may process include:

• Name and personal details (such as name, unique pupil number and address)

• Family, lifestyle and social circumstances

• Financial details

• Education details

• Employment details

• Student and disciplinary records

• Vetting checks

• Goods and services

• Visual images, personal appearance and behaviour

We also process sensitive classes of information that may include:

• Physical or mental health details

• Racial or ethnic origin

• Religious or other beliefs of a similar nature

• Trade union membership

• Sexual life

• Offences and alleged offences

We may process personal information about:

• Students and pupils

• Advisers and other professional experts

• School staff

• Members of school boards

• Donors and potential donors

• Suppliers

• Complainants and enquirers

• Individuals captured by CCTV images

Where necessary or required, we may share information with:

• Education, training, careers and examining bodies

• School staff and boards

• Family, associates and representatives of the person whose personal data we are

• Processing

• Local and central government

• Healthcare professionals

• Social and welfare organisations

• Police forces

• Courts

• Current, past or prospective employers

• Voluntary and charitable organisations

• Business associates and other professional advisers

• Suppliers and service providers

• Financial organisations

• Security organisations

• Press and the media

We will not adopt automated decision making, including profiling.

We do not process your information with third countries outside of the UK or EU zone without the safeguards being in place that are equivalent to the Data Protection Act 1998 or the General Data Protection Regulations (GDPR).

If you fail to provide the personal data, we may not be able to deliver accurate services to you, and may also take action if it is required to do so by law.

The National Pupil Database (NPD)

The NPD is owned and managed by the Department for Education and contains information about pupils in schools in England. It provides invaluable evidence on educational performance to inform independent research, as well as studies commissioned by the Department. It is held in electronic format for statistical purposes. This information is securely collected from a range of sources including schools, local authorities and awarding bodies.

We are required by law, to provide information about our pupils to the DfE as part of statutory data collections such as the school census and early years’ census. Some of this information is then stored in the NPD. The law that allows this is the Education (Information about Individual Pupils) (England) Regulations 2013.

To find out more about the NPD, go to https://www.gov.uk/government/publications/national-pupil-database-user-guide-and-supporting-information.

The department may share information about our pupils from the NPD with third parties who promote the education or well-being of children in England by:

· conducting research or analysis

· producing statistics

· providing information, advice or guidance

The Department has robust processes in place to ensure the confidentiality of our data is maintained and there are stringent controls in place regarding access and use of the data. Decisions on whether DfE releases data to third parties are subject to a strict approval process and based on a detailed assessment of:

· who is requesting the data

· the purpose for which it is required

· the level and sensitivity of data requested: and

· the arrangements in place to store and handle the data

To be granted access to pupil information, organisations must comply with strict terms and conditions covering the confidentiality and handling of the data, security arrangements and retention and use of the data.

For more information about the department’s data sharing process, please visit: https://www.gov.uk/data-protection-how-we-collect-and-share-research-data

For information about which organisations the department has provided pupil information, (and for which project), please visit the following website: https://www.gov.uk/government/publications/national-pupil-database-requests-received

To contact DfE: https://www.gov.uk/contact-dfe

Your rights

Individual rights under the Data Protection legislation.

1. The right to be informed

This is your right know about how your data is being processed, who it is given to, for what purpose and anything else that guarantees your rights. This web page provides a summary, the ‘Record of Processing Activities’ gives further details. When you provide information we will ensure that you have a Privacy Notice.

2. The right of access

You have a right to access your personal data and relevant supplementary information. This is known as a ‘Subject Access Request’. Further information can be found at www.ico.org.uk. You can make a request by emailing the Data Protection Officer at school.dpo@brent.gov.uk. You should receive a response within 30 days, unless a different period applies as described under the ICO’s Subject Access code of practice.

3. The right to rectification

You have the right to have your personal data rectified if it is inaccurate or incomplete. You can do this by contacting the service area that you are concerned about directly. Otherwise you can make a request by emailing the Data Protection Officer at school.dpo@brent.gov.uk

4. The right to erasure

This is also known as “The Right to be Forgotten”. Please note that there are circumstances when your information cannot be erased. This includes situations whereby the council is required to retain information for statutory purposes in accordance with its data retentions policy. You can make a request by emailing the Data Protection Officer at school.dpo@brent.gov.uk. You should receive a response within 30 days.

5. The right to restrict processing

You have a right to request the council to ‘block’ or ‘supress’ processing of your personal data. Please note that this may not apply for most of the council’s processes because there is usually a legal duty to process information.

6. The right to data portability

You have the right to obtain and reuse your personal data for your own purposes. You can make a request by emailing the Data Protection Officer at school.dpo@brent.gov.uk, or in writing to the Data Protection Officer, Brent Council, Civic Centre, Engineers Way HA9 0FJ.

7. The right to object to processing

You have the right to object to processing for certain circumstances as listed by the ICO at www.ico.org.uk. You can make a request by emailing the Data Protection Officer at school.dpo@brent.gov.uk

8. Rights related to automated decision making including profiling

There are restrictions on automated decisions based solely on automated means without any human involvement. Also there are restrictions on profiling. You can make an enquiry by emailing the Data Protection Officer at school.dpo@brent.gov.uk.

Concerns about data protection

If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with our ‘Designated Data Protection Officer’ in the first instance. Alternatively, you can contact the Information Commissioner’s Office at https://ico.org.uk/concerns/

You can raise your concern by emailing the Data Protection Officer at school.dpo@brent.gov.uk, or in writing to the Data Protection Officer, Brent Council, Civic Centre, Engineers Way HA9 0FJ.

Data Protection Policy

Cookies

What are cookies?

Like most other websites, we use cookies to help provide you with the best possible browsing experience.

Cookies are small text files that are placed on to your computer or mobile device when you first visit a website or page. They are used for a number of reasons, such as remembering whether you have visited the site before, so that you can remain logged in. They contain information about the use of your computing device but do not include any personal information about you.

How we use cookies

The website uses cookies in a number of ways, including to (without limitation):

· make the Website easier for you to use;

· improve the speed and security of the Website;

· allow you to share our pages on social networks;

· provide us with information about how the Website is used so that we can make improvements to the Website.

We do not use cookies to:

· collect any personal information about you (without your express permission);

· collect any sensitive information;

· pass data to any advertising networks;

· pass personal data to third parties.

Giving us permission to use cookies

Most internet browsers are set up to automatically accept cookies. We will take this, and your continued use of the Website as acceptance of our Cookie Policy.

If you wish not to accept the use of cookies on this Website, or to delete any that have already been set, you can change the settings of your browser. Please bear in mind that some features on the Website might not work correctly with cookies disabled.

Managing the use of cookies

You can usually find the tools to manage cookies in the ‘preferences’ or ‘tools’ menu of your browser. Below are links to instructions for the four main browsers, otherwise you should use the ‘Help’ option in your browser for more details.

Cookie Settings in Internet Explorer

Cookie Settings in Firefox

Cookie Settings in Google Chrome

Cookie Settings in Safari

Types of cookies that we use

We use the following types of cookies on the Website:

· Session cookies – these are only stored temporarily and are deleted from the user’s device when the browser is closed.

· Google Analytics – we use Google Analytics to measure how our site is used by visitors and to generate reports for our own use. Google Analytics does not collect any personal information about you.

· Third party cookies – some of our pages feature YouTube videos and feeds from Twitter. These third party features may use numerous cookies (please visit these third party websites for more details on their cookie policies).