Privacy notice for Windsor and Maidenhead school emergency contacts

Introduction

This privacy notice explains how the Windsor and Maidenhead school support services collect, store and use personal information. We are required to give you this information under data protection law.

Who we are

Achieving for Children is registered with the Information Commissioner’s Office (ICO) (registration number ZA045069) and is committed to being transparent about how it collects and uses personal data and to meeting its data protection obligations.

To provide an emergency response out of hours, it is necessary for the school support services in Windsor and Maidenhead to collect and hold personal information about senior officers working in schools.

Personal data we may collect

• name
• home address and personal contact details such as email and telephone number
• your role in the school

How we use your personal data

To maintain an emergency out of hours response should there be a problem with the school premises, and to provide services to residents of Windsor and Maidenhead during an emergency response which may involve your school.

Lawful basis for processing your personal data

Article 6(1)(e) of the GDPR, "necessary for the performance of a task carried out in public interest or in exercise of official authority".

Who we share your personal information with

We will share your information with the Royal Borough of Windsor and Maidenhead Property Services Team, who are the initial point of contact for buildings related emergencies, including out of hours. There may be certain circumstances where we would share without consent, such as where we are required to do so by law, to safeguard public safety, and in risk of harm or emergency situations. We will only share the minimum information for the purpose, on a need to know basis, and with appropriate individuals.

How long will we keep your information

We will keep your information for as long as you remain an emergency contact.

Keeping your personal information secure 

We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Your rights and access to information 

Under data protection legislation, you have the right to request access to the information that we hold about you. To request a copy of your data, please read the Individual Rights Requests page on this website and then submit your request using your preferred method of contact. 

You also have the right to:

• object to the processing of personal data that is likely to cause, or is causing, damage or distress
• in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed
• prevent processing for the purpose of direct marketing
• object to decisions being taken by automated means
• redress, either through the ICO, or through the courts

If you have any questions or concerns about the way we process personal data, or would like to discuss anything in this privacy notice, please contact our Data Protection Officer: [email protected].

If you want to make a complaint about how we handle your personal data, we ask that you give our Data Protection Officer the opportunity to respond in the first instance, but you are not obliged to do this. You can make a complaint directly to the Information Commissioner’s Office.