Privacy Notice

Privacy Notice

---

We take your privacy very seriously therefore we urge you to read this policy caefully because it contains imporant information about:

• Who we are
  
• What information is collected
  
• How and why we collect, store and share personal information
  
• Your rights in relation to your personal information
  
• How to contact us and supervisory authorities in the event that you have a complaint
  

 

Who we are

Ysgol Bro Idris (‘we’ or ‘us’) collect, use and are responsible for certain personal information about you as the ‘data controller’. When we do so, we are regulated under the General Data protection Regulations which apply across the European Union (including the United Kingdom) and we are responsible as the ‘data controller’ of that personal information for the purposes of thoes laws.

 

The personal information of pupils we collect and use:

• Personal identifiers and contacts (name, date of birth, gender, address, unique pupils number (UPN), unique learner number (ULN), unique candidate number (UCI), email address, emergency contact details)
  
• Characteristics (ethnicity, nationality, home language, free school meal eligibility)
  
• School dinner payments
  
• Safeguarding information (court orders, proffesional involvement and reports - social Services and child protection, relevant background family information)
  
• Special educational needs (needs and ranking including ‘More able and talented’ information)
  
• Attendance (sessions attended, number and reason of absences
  
• Medical and administration (doctors information, allergies, medication and dietary requirements)
  
• Assessment and attainment (results from statuory and non statuory tests,educational history, expected levels of acheivement, annual and term reports)
  
• Beahavioural information (exclusions and any provisions put in place)
  
• Timetable and classes attended (including musical instrument lessons)
  
• Photographs (including CCTV images)
  
• Biometiric Information (fingerprint)
  
• Permission for school trips and published photographs (including name and date of permission giver)
  
  

 

We collect and use pupil data for the following purposes:

• To support pupil learning
  
• To monitor and report on pupil attainment progress
  
• To provide appropriate pastoral care
  
• To asses the quality of our Services
  
• To keep children safe (food allergies, emergency contact details, CCTV images)
  
• To meet statutory requirements for use with data collections
  

We may use your information for automated decision making, including profiling. This is where we make a decision automatically about you without human intervention

 

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing pupil information are:

• Processing is necessary for compliance with a legal obligation to which the controller is subject
  
• Processing is necessary in order to protect the vital interests of the data subject or of another natural person
  
• Processing is necessary for the purpose of a task caried out in the public interest or in the exercise of official authority vested in the controller
  

 

In addition, concerning any special category data

• Processing is necessary for the purpose of carrying out obligations and excersisng specific rights of the controller or of the data subject providing for appropriate safeguards for the fundamental rights and the interests of the data subject
  
• Processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent
  
• Processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes. This shall be proportionate to the aim pursued, respect the essence of the right to data protection and safeguard the fundamental rights and interests of the data subject.
  

 

The legal obligations for processing pupil information are :

• The Education (school information) (Wales) Regulations 2011
  
• The Education (pupil information) (Wales) Regulations 2011
  
• The Education (school performance and absence targets) (Wales) Regulations 2011
  
• The Education (Head of Parents and Adults Report) (Wales) Report 2011
  
• Data Protection Act 1998
  
• General Data Protection Regulation and Data Protection Act 2018
  
• Freedom of Information act 2012
  
• Additional Learning needs and the Educational Tribunal (Wales) Act 2018
  
• The Government of Maintained Schools (Wales) Regulations 2005
  
• Social Services and Wellbeing Act 2014
  
• Equality Act 2010
  
• The Regulation (Fire Safety) Order 2005/ Regulatory Reform (Fire Safety) Order 2005 (PEEPS forms are completed and these include details of any disabilities that a child / staff has)
  

 

Collecting Pupil Information

We collect pupil information via registration forms when starting at the school and receive some data via a Common Transfer File (CTF) if a child is transferring to us from another school

Although most information about a pupil you provide for us is compulsory, some will be provided on a voluntary basis

In order to comply with data protection legislation, we will inform you whether you will be required to provide us with specific information about a pupil or if you have an option to do this.

If you provide information on a voluntary basis, we will ask you to give specific permission and give you the option to withdraw the permission at any time

 

Storing Pupil Data

We hold pupil data securely for the set amount of time as shown in our data retention schedule. For more information on our data retention schedule please visit the data protection policy on our website www.ysgolbroidris.cymru

 

Who we share pupil information with

We routinely share pupil information with:

• Schools attended by the pupils when they leave us
  
• Gwynedd Council, Local Authority - School Counselor, Welfare Officer, Social Services, Leisure, Transport, Finance, Derwen, GwE
  
• Betsi Cadwalader University Healthboard – School nurse, dentist, Camhs,
  
• Police and the youth offending team
  
• Language Centres (where necessary)
  
• Welsh Assembly Government
  
• School Governors (only as applicable)
  
• Cynnal –via SIMS (school information managemnet system)
  
• S2S – Schools2School via .gov.uk
  

 

Agencies we commission to provide Services on our behalf

• Welsh Assembly Government
  
• Examning Boards – WJEC, OCR, Pearson, AQA, JCQ (Joint Council for Qualifications), A2C, LRS (Learning Records Service)
  
• Further education colleges where pupils follow and/or transfer to KS4 - Coleg Menai, Coleg Meirion Dwyfor, Coleg Llandrillo
  
• Bangor University and other institutions of Higher Education in Wales and Great Britain and universities that are part of the Welsh Government SEREN programme
  
• NFER (National Foundation for Education Research)
  
• FFT (Fischer Family Trust)
  
• GwE
  
• Public Health Wales
  
• Cynnal
  
• Capita – SIMS
  
• Capita – SIMS Teacher App
  
• SchoolComms
  
• School Gateway
  
• Civica
  
• GoogleDrive
  
• GoogleClassroom
  
• GoogleDocs
  
• Iris Connect
  
• My Concern
  
• Boxall
  
• Antur Waunfawr
  
• Delwedd
  
• Evolve
  
• Tempest
  
• Erfyl Davies
  
• Twitter
  
• Facebook
  
• William Mathias
  
• Gwynedd Ni – ‘Tîm o amgylch y teulu’, Tîm Trothwy Gofal
  
• MSI Alarms– Sustem TCC
  
• Teledu yn derbynfa Ysgol Prif Safle/Safleoedd
  
• DWP
  
• Education Mutual
  
  

Relevant Companies that promote the administration and learning experiences of our pupils

• Welsh Assembly Government – via HwB
  
• GwE
  
• Careers Wales
  
• Womens Aid
  
• CAFCASS -
  
• Advocacy Support Cymru – Young Carers
  
• Urdd Gobaith Cymru
  
• Class Charts
  
• Gorwel
  
• TRAC
  
• Troseddwyr Ifanc
  
• Show My Homework
  
• Teamviewer
  
• Tracey Stretton
  
• Spherical Software
  
• Gweledigaeth – Bethel, Caernarfon
  
• Rhian Cadwaladr/Gai Toms – Rhosgadfan/Tanygrisiau
  
• GreenScree by Do Ink
  
• I-Movie
  
• MathBoard
  
• Keynote
  
• Numbers
  
• QR Code Reader
  
• Seesaw
  
• Sumdog
  
• TT Rockstars
  
• TricaChlic2
  
• Skitch
  
• StopMotion Studio
  

 

Youth support services

Pupils aged 13+ [For use by educational settings with students aged 13+:]

Once our pupils reach the age of 13, we also pass pupil information to our local authority and / or provider of youth support services as they have responsibilities in relation to the education or training of 13-19 year olds under section 507B of the Education Act 1996.

This enables them to provide services as follows:

• youth support services
  
• careers advisers
  

A parent or guardian can request that only their child’s name, address and date of birth is passed to their local authority or provider of youth support services by informing us. This right is transferred to the child / pupil once he/she reaches the age 16.

 

Pupils aged 16+ [For use by educational settings with students aged 16+:]

We will also share certain information about pupils aged 16+ with our local authority and / or provider of youth support services as they have responsibilities in relation to the education or training of 13-19 year olds under section 507B of the Education Act 1996.

This enables them to provide services as follows:

• post-16 education and training providers
  
• youth support services
  
• careers advisers

For more information about services for young people, please visit our local authority website.

 

Why we regularly share pupil information

We do not share information about our pupils with anyone without consent unless the law and our policies allow us to do so.

We share data about pupils with the Welsh Assembly Government on a statuory basis. Sharing data in this way underpins school funding and monitors educational attainment.

We are required to collect data under The Education (Pupil Information) (Wales) Regulations 2011 and The Education (School Performance and Absence Targets) (Wales) Regulations 2011.

We are required to share information about our pupils with our Local Authority of Gwynedd Council and the Assembly Government under The Education (Pupil Information) (Wales) Regulations 2011

COVID-19 Pandemic 2020

It may not always be possibe to reflect all the new or changed uses of personal data that may happen as a response to the COVID-19 Pandemic.

The personal data that may be shared includes:

• Name
  
• Email Address
  
• Telephone Number

 

Legal Basis for processing your personal data

• Processing is necessary for the performance of a task caried out in the Public interest or in the exercise of official authority vested in the controller (Article 6(1) GDPR)
  
• Regulation 12 of the Health Protection (Coronavirus Restrictions)(no 2)(Wales) Regulations 2020 requires reasonable measures to be taken to minimise the risk of exposure to coronavirus on premises open to the public and on any premises where work takes place.

 

Sharing your personal data

During the COVID-19 Pandemic, we may need to share your information with:
The Cyngor Gwynedd ‘Track and Trace’ team for the purposes of contacting persons who may have been exposed to Coranvirus.
This will be done in a way that complies with the data protection legislation.

 

Request to Access your personal data

Under the Data protection legislation, parents and pupils have the right to request Access to the information we hold about them. To apply for your personal information, or request Access to your child’s educational record, please contact either of the following:

You also have the right to:

• Object to personal data being processed that is likely to cause, or causes damage or distress
  
• Preventing anything from being processed for direct marketing purposes
  
• Oppose decisions that are made by automated methods
  
• Correct, Obstruct, eliminate or destroy incorrect personal data in certain circumstances
  
• Claim compensation for the damage caused as a result of breach of Data Protection Regulations
  

 

If you have concerns about the way we collect or use your personal data, we ask you to raise your concern with us in the first instance. Alternatively, you can contact the information Commissioner’s Office (ICO) through https://ico.org.uk/concerns

Updating this privacy notice

We may need to update this privacy notice periodically so we recommend that you revisit this information from time to time. This version was last updated January 2021

 

Contact

If you would like to discuss anything in this privacy notice, please contact either of the following: