Nash Mills CofE Primary School
GDPR
Data Protection Officer Contact Details: Our Data Protection Officer (DPO) can be contacted via the school office or by email dpo@nashmills.herts.sch.uk
Subject Access Request
The GDPR extends to all data subjects a right of access to their own personal data. This is known as a subject access request. A formal request from a data subject for information that a school holds about them must be made in writing. A subject access request can be made by anyone including pupils, parents, staff, governors and members of the public.
Subject Access Requests can be made via the school office or directly to the school's Data Protection Officer (DPO) via email, dpo@nashmills.herts.sch.uk. Provided that sufficient information has been provided the school must supply the data requested within a month from the date of request.
Should a parent require it, paper copies of information from the school website can be provided free of charge. Please contact the school office.
The school office will be closed outside of term time. Any requests made during holidays cannot be completed by our staff until the school reopens. This includes Subject Access Requests (SAR) under GDPR and Freedom of Information Requests. Due to the complexities of replying to such requests during the school holidays, we will have up to 3 months to complete this request, although we will endeavour to complete it more quickly, and usually within 30 days once we are satisfied with your identity and the school is open. If we need longer than this during term time, we will inform you. See https://ico.org.uk/your-data-matters/time-limits-for-responding-to-data-protection-rights-requests/ for clarification of this information.