What is GDPR?

GDPR stands for the General Data Protection Regulations. The UK GDPR and Data Protection Act set out strict rules on how data must be collected, stored, and processed. At our Federation we feel that it is important that good data protection practices are followed to ensure that our organisation and the individuals within it can be trusted to collect, store and use our personal data fairly, safely and lawfully.

Below are the Federation's GDPR policies and privacy notices.

If you have a complaint with regard to our GDPR processes, please follow the below

Data protection complaints relating to a completed SAR will be processed as an internal review request in accordance with Appendix 2 of the Data Protection Policy.

Any other complaints or concerns about our compliance with data protection legislation or our handling of personal data will be dealt with as a data protection complaint.

Our general data protection complaints procedure is as follows:

• Complaints may be received directly by email, telephone, or in person. Alternatively, individuals may contact our Data Protection Officer.
• We encourage individuals to provide sufficient evidence or supporting information where possible, to allow us to investigate the complaint.
• If necessary, we may request proof of ID (or proof of authority where the complainant is acting on behalf of another person). 
• We will acknowledge complaints within 30 days of receipt. This includes weekends and bank holidays.
• We will take steps to respond to complaints without undue delay. This includes making appropriate enquiries and keeping the complainant informed.
• We will inform people of the outcome of their complaints. This includes explaining any steps we have taken to address the complaint.

Please direct any complaint to the following; complaints@foston.n-yorks.sch.uk and entitle the email GDPR complaint.