Data Protection

Introduction

Keeping your child safe is our first priority and an increasing part of that responsibility is to keep data about your child safe and secure too. The EU takes this responsibility very seriously and new regulations were published last year to strengthen the requirements for all organisations that hold data about living persons residing in the EU.

How does GDPR affect us?

• Spanish law obliges us to require from you, and report to authorities, personal information about you and your child – your contact details, identity data etc. and this obligation forms the legal basis for holding this data.


• As a school we create a lot of data about your child – test scores, exam results, school reports, correspondence etc., some of which we share with other organisations, e.g. examining boards, university application systems. The school is also a social and cultural setting and the development of social and community skills through visual and aural communication is a vital part of your child’s education. When you agree to accept a place at the school for your child you provide us with the legal basis for holding, generating and using this data. The new regulations set strict rules regarding how we gather, use, share and store this data.


• We use some data regarding your child for additional purposes, such as using images for promoting and publicising the school. For these uses, the school must seek your explicit consent.


• The school has appointed a Data Compliance Manager (DCM) to oversea our compliance and to act as a first point of contact for requests, queries or complaints about the data the school holds and uses. You can contact the Data Compliance Manager using this email address: DCM@EIC.EDU

How does GDPR affect you?

The new regulations make it easier for you to have greater influence over the data that is held about you and your children:

• Consent – where the school uses data about you, or your child, which is not essential to the operation of the school we must seek your consent. You can give and withdraw your consent using the Parent Portal website and App


• Access - In certain circumstances it is now possible for you to request a copy of all the data that we hold regarding you and your child. This is called a Data Subject Access Request. (see link below) This is not a trivial matter and the school respectfully asks that such requests are treated seriously, as considerable work is required to fulfill such a request.


• Portability – It is now possible to transfer educational data to a new school, at your request. To ask for data to be transferred please contact Head of Administration with details of your child, the intended leaving date and contact details for the new school


• Accuracy – Where you feel data is factually inaccurate you may ask the school to correct it. You cannot, however, demand that assessment or examination data is altered, except where a factual error has occurred. To request that data be corrected please contact Head of Administration with precise details of the error and how it should be corrected.

Further Details

Further details about the EU General Data Protection Regulations can be found here:    English   |    Spanish

Should you need any further guidance about how the school manages data you can   email the EIC Data Compliance Manager

Request Forms

For your convenience there are forms below which you can use to submit requests for information. These forms do not affect your statutory right to inform the school of your request by any means you prefer.

• Data Subject Access Request (Student & Parent)
• Data Subject Access Request (Staff)