GDPR
From 25 May 2018, new regulations have been introduced which affect how our nursery handles people’s data. This is called the General Data Protection Regulation (GDPR). Compliance with the regulations and your children’s data will be handled in the same manner in accordance with legal principles.
Please find a summary of our data handling below:
Consent
The nursery will ask for consent to process data about you/your child through a consent form which we will request you to sign the next time you attend the nursery.
You have the choice to opt in for certain types of data usage, and this is made clear. However, some data that is collected and processed in nurseries is not optional.
Legitimate interests
This means that the processing is necessary for legitimate interests except where the processing is unfair to you. The nursery relies on legitimate interests for many of the ways in which it uses information.
Specifically, the nursery has a legitimate interest in:
- Providing educational services to pupils
- Safeguarding and promoting the welfare of children and staff
- Promoting the objects and interests of the nursery
- Ensuring the efficient operation of the nursery
- Compliance with all relevant legal obligations of the nursery
- Keeping the whole nursery community informed about events, news and activities
Necessary for a contract
Information about individuals may be necessary to perform our obligations under our contracts. For example, maintaining the nursery’s records on our database which reflects the information you will have completed on your child’s application form.
Legal obligation
Our nursery records are governed by legal obligations to supply information to organisations such as Ofsted, the Local Authority, Safeguarding board, or HMRC. We may also have to disclose information to third parties such as the courts, Disclosure and Barring Service or the police where legally obliged to do so.
Vital interests
For example, to prevent someone from being seriously harmed or killed.
Public interest
The nursery considers that it is acting in the public interest when providing education. Certain regulations, Ofsted and Local Authority, health and other guidance may require the nursery to process data in the public interest.
Legal claims:
The processing is necessary for the establishment, exercise or defence of legal claims. This allows us to share information with our legal advisors and insurers.
Your rights – What decisions can you make about your information?
From May 2018, data protection legislation now gives you a number of rights regarding your information. Some of these are new rights whilst others build on your existing rights.
Your rights are as follows:
- you can ask what information we hold about you and be provided with a copy. Sometimes we are not able to share all the information;
- if information is incorrect you can ask us to correct it;
- you can ask us to delete the information that we hold about you or your child in certain circumstances. For example, where we no longer need the information;
- you can ask us to send you, or another organisation, certain types of information about you in a format that can be read by computer;
- our use of information about you may be restricted in some cases. For example, if you tell us that the information is inaccurate we can only use it for limited purposes while we check its accuracy.
If you have any questions, please do not hesitate to contact us.