Data Protection and GDPR
GDPR Policy and Privacy/Fair Processing Notice
The link below will take you to the Privacy and Fair Processing Notice which sets out how Derby Diocesan Academy Trust 2 ('the Trust', 'we', 'us' or 'our') will collect, use and process Personal Data. It is also designed to let you know your rights and what you can do if you have questions about Personal Data.
The Trust is the controller for the purposes of data protection laws.
This document sets out the types of Personal Data (meaning information about an individual from which that individual can be personally identified) we handle, the purposes of handling those Personal Data and any recipients of it.
Privacy and Fair Processing Notice
The trust's Data Protection Policy can be found here:
Subject Access Request (SAR) Form
We have a single Privacy/Fair Processing Notice for our trust (DDAT) and a single GDPR policy.
Individuals have the right to access their personal data and supplementary information held by DDAT and our academies. The UK GDPR and the Data Protection Act 2018 clarifies that the reason for allowing individuals to access their personal data is so that they are aware of, and can verify, the lawfulness of the processing (please refer to this guidance from the Information Commissioners Office).
The SAR form is a downloadable document but can also be completed online.
If you wish to request information we hold about you, please complete the Subject Access Request form. Completed forms can be sent to the relevant Trust School or DDAT Trust Office or you can email the Data Protection Officer at hayley.wharton@ddat.org.uk. Any request in writing from the individual (Data Subject) will be considered as a valid request, whatever the format as long as it contains the relevant information to enable us to deal with your request.
Further information can be found here: DDAT Data Protection - for the documents that can be downloaded.