St Nicolas and St Mary CE Primary School is registered as a data controller to hold and process personal data. For more information please refer to our Data Protection Policy, Privacy Notices and Freedom of Information Policy.

Under the General Data Protection Regulation governors, staff, students, parents and members of the public have the right to exercise the following in respect of their personal data:

• to be informed about what data is held, why it is being processed and who it is shared with;
• to access their data;
• to rectification of the record;
• to erasure;
• to restrict processing;
• to data portability;
• to object to processing;
• not to be subject to automated decision-making including profiling.

Requests in relation to exercising the rights listed above should be made to the Data Protection Officer, Andy Lincoln, preferably in writing.