Page 16 - TASIS Data Protection Policy

TASIS – Data Protection Policy 7 May 2018
obligations. Some of these obligations may mean that we keep this information after your employment with the School has ended.
Who we share this information with
We routinely share this information with:
• Our local authority - We are required to share information about our workforce members
with our local authority (LA) under section 5 of the Education (Supply of Information about
the School Workforce) (England) Regulations 2007 and amendments.
• The Department for Education (DfE) - We share personal data with the DfE on a statutory
basis. This data sharing underpins workforce policy monitoring, evaluation, and links to school funding / expenditure and the assessment of educational attainment. To find out more about the data collection requirements placed on us by the DfE including the data that we share with them, go to https://www.gov.uk/education/data-collection-and-censuses-for- schools.
We will only disclose information about you to third parties if we are legally obliged to do so or where we need to comply with our contractual duties to you, for instance we may need to pass on certain information to pension or health insurance schemes.
We may transfer information about you to other group companies for purposes connected with your employment or the management of the School’s business.
In limited and necessary circumstances, your information may be transferred outside of the EEA or to an international organisation to hold and process the personal data of you and your colleagues (such as our use of on-line databases to manage records). We have in place safeguards to ensure the security of your data, as described in our Data Protection Policy.
We do not share information about workforce members with anyone without your consent unless the law and our policies require or allow us to do so.
We do not use personal data for automated decision-making (including profiling).
Your rights
GDPR gives you a number of rights regarding your personal data and information. Some of these are new rights whilst others build on your existing rights. Your rights are as follows:
• if information is incorrect you can ask us to correct it;
• you can also ask what information we hold about you and be provided with a copy;
• you can ask us to delete the information that we hold about you in certain circumstances;
• you can ask us to send you, or another organisation, certain types of information about you
in a format that can be read by computer;
• our use of information about you may be restricted in some cases. For example, if you tell us
that the information is inaccurate we can only use it for limited purposes while we check its
accuracy;
• prevent us using personal data and information for the purposes of marketing.
If you have provided consent for the processing of your data you have the right (in certain circumstances) to withdraw that consent at any time, which will not affect the lawfulness of the processing before your consent was withdrawn.
The current version of any policy, procedure, protocol or guideline is the version held on the TASIS website. It is the responsibility of all staff to ensure that they are following the current version.
Information Sharing Classification: PUBLIC
Page 16 of 22