Data Protection Officer Contact Details: Our Data Protection Officer (DPO) can be contacted via the school office on admin@stpauls909.herts.sch.uk

Subject Access Request

The GDPR extends to all data subjects a right of access to their own personal data.  This is known as a subject access request.   A formal request from a data subject for information that a school holds about them must be made in writing.  A subject access request can be made by anyone including pupils, parents, staff, governors and members of the public.

Subject Access Requests can be made via the school office. Provided that sufficient information has been provided, the school must supply the data requested within a month from the date of request.

Should a parent require it, paper copies of information from the school website can be provided free of charge.  Please contact the school office.

The school office will be closed outside of term time. Any requests made during holidays cannot be completed by our staff until the school reopens. This includes Subject Access Requests (SAR) under GDPR and Freedom of Information Requests. Due to the complexities of replying to such requests during the school holidays, we will have up to 3 months to complete this request, although we will endeavour to complete it more quickly, and usually within 30 days once we are satisfied with your identity and the school is open. If we need longer than this during term time, we will inform you. See https://ico.org.uk/your-data-matters/time-limits-for-responding-to-data-protection-rights-requests/ for clarification of this information.

If you have a concern about the way the school has handled your personal data, please contact the school office on admin@stpauls909.herts.sch.uk. The school will consider data protection complaints in line with its Data Protection Complaints and Information Rights Procedure, which is available on request.