Privacy & Data Protection
As a result of the Trust’s statutory responsibility, the Trust will receive personal data, some of which will be sensitive personal data. The Trust processes personal data in accordance with the data protection principles embodied in the General Data Protection Regulations (GDPR) and the Data Protection Act 2018 (DPA). The Trust complies with the requirements of the data protection legislation as detailed in the Trust data protection Policy.
All staff are aware of the principles of data protection and will not processes personal data unless necessary. The Trust safeguards the personal data it collects through the operation of the Trust’s data protection policy and processes and the IT policy. In addition, the Trust and the relevant academy has taken steps to ensure that all its contracts that process data have the GDPR compliant provisions.
Aquinas is committed to the promotion of data protection throughout the Trust so that all individuals are aware of their rights in relation to their personal data and can be certain that the Trust has the necessary procedures and security measures in place to ensure that such rights are protected.
As part of Trust’s data protection regime, personal data and sensitive personal data is processed in accordance with the six data protection principles. The Trust is aware of the bases for the processing of the personal data it collects and where no legal bases exists, consent is obtained prior to processing. For further details of how the Trust complies with its data protection obligations, please refer to the Trust’s Data Protection Policy found on the ‘Policies’ page of this website.
In accordance with its data protection obligations, the Trust has provided those individuals from who it collects data with privacy notices in the following terms:
Pupils – Through the Trust’s academies pupils are advised of how their personal data is processed and their rights in relation to that personal data. Where the pupil is under the age of 13, parents/carers receive the privacy notice.