The following table is applicable to Newly Qualified Teachers registered with EES for NQT Induction:

Transcription

1 At EES for Schools, we are committed to safeguarding and preserving the privacy of our service users. This Policy explains what happens to any personal data that you provide to us, or that we collect from you, as part of the service of providing Newly Qualified Teacher Induction. We do update this Policy from time to time so please do review this Policy regularly. The following table is applicable to Newly Qualified Teachers registered with EES for NQT Induction: What is the service being provided? What personal data do we need from you? Who will be using your personal data? What will it be used for and what gives us the right to ask for it and use it? Who else might we share your data with? NQT Statutory Induction Name, date of birth, address, , telephone number/s, national insurance number, teacher reference number, teacher training provider and QTS award. Who is the Data Controller? Who is the Data Controller s Data Protection Officer? Are there any Data Processors? Who are they? The Purpose(s): Essex County Council (EES for Schools) ECC Paul Turner Yes No Evolution Internet Limited (NQT Manager website) To ensure the candidate fulfils the conditions of eligibility for the NQT Induction Programme Personal Data (ai)(aii) necessary for a contract between you and EES for the purpose of The Legal Condition(s): providing an NQT Induction Service 6(a)(b) the processing is necessary for a contract between you and EES and EES and its NQT The Lawful Basis partner schools to provide an NQT Induction Service. 6 (c) the requirement of a DBS check and the purpose of safeguarding [DELETE if not using Legitimate Interests ] [DELETE if not using Consent ] You may withdraw your consent at any time by contacting us EES NQT Partnership schools and EES Associate Tutors The NCTL for the purpose of registering you on an Induction programme and for the recommendation of completion Other NQT appropriate Bodies for Induction, if you change AB during your induction period EES for Schools Seax House, Victoria Road South, Chelmsford, CM1 1QH E: enquiries@ T: W: Page 1 of 6 EES for Schools is owned by Essex County Council

2 Will your data be stored in or accessible from countries with no UKequivalent Privacy Law protections? No How long will we keep your personal data When will it stop being used? How long after this will it be deleted? Personal data will be used for the duration of the induction programme, typically 1 year. If you do not complete the full induction process with EES and register with a different Appropriate Body for NQT Induction We are required to keep data for up to 7 years to satisfy Essex CC and NCTL requirements, irrespective of whether you complete the full induction programme with us Our use of the data will be subject to your legal rights (marked if applicable): We will make automated decisions or profile you based on your data How will this be done? As you are giving us your data directly to us: In addition to you giving us your personal data, we will obtain data from a third party: Inform Access Rectify Erase Restrict Portable Object Automate [Delete any of the following rows which do not apply] How will this be done? What will happen as a result of the decisions? This is the reason why we are allowed to ask for it and use it: This is what could happen if you refused to let us use your data for this purpose: This is who is giving us your personal data: This is a source of personal data open to everyone These are the categories of personal data being given to us To enable you to follow the NQT Induction programme We would not be able to consider you for the NQT Induction programme The school who is employing you for the duration of the NQT Induction period Yes No Name, date of birth, address, , telephone number/s, national insurance number, teacher reference number, teacher training provider and QTS award. Page 2 of 6

3 Visit the following links for more information about Privacy Law, our obligations and your Rights: The ICO Guide to the General Data Protection Regulations 2016 The General Data Protection Regulations 2016 If you have concerns over the way we are asking for or using your personal data, please raise the matter with our Data Protection Officer by the following means: Postal Address Paul Turner, Essex County Council, County Hall, Chelmsford, CM1 1QH Telephone Number Postal Address Marie Stack, Evolution Internet Limited, Hill View, Bell Lane, Biddenden, Kent, TN27 8LD Telephone Number Postal Address Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Online Form Telephone Number Guidance 1. Who is a Data Controller? This is your Organisation. 2. Who is the Data Protection Officer? This is a statutory post either within your organisation or a contracted service 3. What is a Data Processor? This is someone who uses the data you are responsible for in order to deliver a service you have contracted them to deliver on your behalf Page 3 of 6

4 4. What are Purposes? This is the reason you want to use the data, e.g. to create a pupil record 5. What are the legal conditions? a. Personal Data can be lawfully processed for the following conditions: i. Consent ii. Necessary to perform a contract obligation iii. Blue light emergency services iv. Statutory Duty v. Legitimate Interests b. Sensitive Personal Data can be lawfully processed for the following conditions: i. Explicit Consent ii. Employment, Social Security, Social Protection iii. Blue light emergency services iv. Legitimate Activities of charities/not for profit organisations v. Made Public by the person vi. For legal defence/claims vii. Substantial Public Interest viii. Health & Social Care provision and management ix. Pan UK Public Health (Epidemics) x. Archiving for scientific/historical research or statistical purposes 6. What are the lawful bases for processing? These are set out in Article 6 of the GDPR a. Consent: the individual has given clear consent for you to process their personal data for a specific purpose. b. Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract. c. Legal Obligation: the processing is necessary for you to comply with the law (not including contractual obligations) d. Vital Interests: the processing is necessary to protect someone s life. e. Public Task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law. Page 4 of 6

5 f. Legitimate Interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks. Conditions for processing special category data are set out in Article 9(2) of the GDPR and are listed below a. The data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject. b. Processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject. c. Processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent. d. Processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects. e. Processing relates to personal data which are manifestly made public by the data subject. f. Processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity. g. Processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject. h. Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3. i. Processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy. j. Processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject. Page 5 of 6

6 7. Legitimate Interests cannot be used as a processing condition other than in exceptional circumstances 8. Any country outside of the European Economic Area (EU countries, plus Iceland, Lichtenstein and Norway) is not considered to have the same legal protections as the UK 9. The right to inform requires you to tell people about how their rights are managed including if information is rectified, modified, erased or restricted 10. The right to access means you must be able to provide a copy of a person s data to them upon written request 11. The right to rectify requires you to correct inaccurate data. This may not always be possible if it relates to an official record or a professional opinion recorded by your staff. If this is the case you should not tick this box 12. The right to erasure requires you to securely destroy the data you hold. This may not always be possible if it relates to an official record or a professional opinion recorded by your staff. If this is the case you should not tick this box 13. The right to restrict requires you to stop processing data (other than keeping it secure) whilst a complaint is resolved. This may not always be possible if it relates to an official record or a professional opinion recorded by your staff. If this is the case you should not tick this box 14. The right to Data Portability only applies when a service is based on Consent and then only if it involves technology 15. The right to object requires you to stop using the data for the purposes for which it was collected. This does not apply to any legal obligations to process the data, but does apply for any processing under Consent, e.g. marketing or profiling 16. The right to refuse automated decision making means if a computer makes a decision about how you will deliver a service to a person; they have the right to request the decision to be made by a human being. Page 6 of 6