Data Protection Policy for Compliance with the GDPR

Excellence in Education Ltd. takes its responsibilities with regard to data protection very seriously. In order to operate efficiently Excellence in Education needs to collect and use information about the people with whom we work.  

Excellence in Education Ltd is registered as a data controller on the register held by the Information Commissioner’s Office.

 

1. Scope of the Policy

The purpose of this policy is to ensure that everyone handing personal information at Excellence in Education is fully aware of the requirements of the General Data Protection Regulation’s and complies with statutory data protection procedures.

Excellence in Education is required to adhere to the data protection principles. In accordance with those principles personal data should be:

1. Processed lawfully, fairly and in a transparent manner,
2. Collected for specified, explicit and legitimate purposes,
3. Adequate, relevant and limited to what is necessary,
4. Accurate and where necessary kept up to date,
5. Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which those data are processed, and
6. Processed in a manner that ensures appropriate security of the personal data.

 

In order to meet the requirements of the principles, Excellence in Education:

• fully observes conditions regarding the fair collection and use of information
• will only collect and process appropriate information, and only to the extent that it is needed to fulfil operational needs.
• will ensure everyone managing and handling personal information understands that they are responsible for following good data protection practice.
• ensures the quality of the information used
• carries out periodic checks on records security and you monitor compliance with records management procedures.
• stores paper and electronic records securely with appropriate levels of security.
• uses a backup drive which saves copies of documents daily. The backup drive uses 192 bit encryption so no files can be read without the encryption key.
• carries out regular reviews to remove any personal data or records that are out of date or no longer relevant.
• has confidential waste disposal processes to ensure that records are destroyed to an appropriate standard.

 

2. Responsibility

Excellence in Education Ltd has a designated Data Controller who is responsible for establishing policies and procedures in order to comply with the requirements of the general data protection regulations.

The Data Controller holds responsibility for:

• Drawing up guidance, giving advice and promoting compliance with this policy.
• Ensuring that any data protection breach is resolved and reported to the ICO
• Investigating and responding to any complaints regarding data protection.

 

Staff Members must ensure that:

• They have read and understood the requirements of this policy.
• All personal data is kept securely
• Any data protection breaches are immediately brought to the attention of the data controller.

 

Third- Party Data Processors must:

• Provide sufficient guarantees about its security measures to protect the processing of personal data;
• Reasonable steps must be taken that such security measures are in place.
• A written contract establishing what personal data will be processed and for what purpose must be set out
• A data processing agreement, available from the data controller must be signed by both parties. 
• Any data protection breaches are immediately brought to the attention of the data controller.

 

3. Access Requests

Individuals may request to access, correct, amend or delete information we hold about them be contacting our designated data controller. Please email us a request. 

 

4. Privacy statement

Excellence in Education Ltd respects your privacy. The information that you provide us or is gathered helps us to provide you with the most relevant information. More information on how we safeguard your privacy in relation to websites and email can be found on our website.