Chweched Powys Sixth which is part of Powys County Council undertakes a wide variety of functions, and in doing so will gather personal data in order to complete these functions.
We are committed to protecting the rights of individuals in line with the current Data Protection Legislation. Therefore this notice is designed to give you information about the data we hold about children, young people and their families, how we use it, your rights in relation to it and the safeguards that are in place to protect it.
We collect and use the personal information of children, young people to enable prospective pupils to apply to study at a Powys Sixth Form.
Powys County Council, as a data controller, collects personal data in order to provide application services for Sixth Form. We will only collect the personal data from you that we need in order to provide these services and process personal information in a fair and lawful way.
In the course of our collection, we collect the following information:
The information we collect may pertain to current or previous involvement from individuals and organisations.
We obtain this information in the following ways:
It is important that we hold accurate and up to date information in order to process applications for children, young people and families in Powys If any details have changed, or change in the future, please ensure that you tell us as soon as possible, so that we can update the records.
Legal obligation - It is necessary for us to gather and share some personal information in order to fulfil our legal obligations under the following legislation:
Public Interest - It is necessary for us to gather and share some personal information in order to exercise the Council's authority to carry out tasks in the public interest. This could include ensuring equal opportunity and treatment and ensuring and reporting on the provision of education.
The Council will use your data for the purpose it was provided for.
There may be occasions when personal information is shared, internally within the Council and also with external organisations where we are required to do so by law. Or in order to undertake a multi-agency assessment. Any information shared will only be on a need to know basis, with appropriate individuals. Only the minimum information for the purpose will be shared.
Council organisations we may share information with include:
External organisations we may share information with include:
We will not:
Data processors are third parties who provide elements of our service for us, such as IT systems and suppliers who handle or collect personal data on behalf of the Council.
We have contracts and data processing agreements in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do so. They will not share your personal information with any organisation apart from the Council unless this is by prior agreement. Data processors are required to hold any personal information securely and to retain it for the period we instruct.
The supplier of our information storage software systems may also have access to your data, this will only ever be used in the context of administering and supporting the system.
We will take appropriate steps to make sure personal information we hold, in paper format or electronically, is kept securely and only used by people who are authorised to do so.
The Council's security measures include encrypting personal data and equipment, system access controls and training in data protection for all staff. The Council has internal policies in place to ensure data that it processes is not lost, accidently destroyed, misused, or disclosed. Furthermore, data is not accessed by employees except in the performance of their duties.
Where another company or organisation processes personal information on behalf of the Council, they will only process information in line with the Council's instructions. They are obliged to provide security assurances to the Council.
We will only keep information for the minimum period necessary. The Council retention schedules outline the periods of time for which information for different purposes must be kept.
Subject Access Request - you are able to make a request to see and be provided with a copy of information about you or your child that is being used by Powys County Council. This includes why information is being held and what sorts of decisions are being made using that information.
To make this request please fill in a Subject Access Request Form.
The Council has a legal basis for gathering and processing of information necessary for the delivery of services. You have the right to request that the Council stop or restrict using your personal data in relation to any Council service. However, this may cause delays or prevent us delivering a service to you. Where possible, we will seek to comply with such requests but this may not be possible where the Council is required to do so by law, to safeguard public safety, where there is a risk of harm and/or in emergency situations.
The Council's Data Protection Officer can be contacted at information.compliance@powys.gov.uk and by phone on 01597 826400
For independent advice about data protection, privacy and data sharing issues, you can contact the Information Commissioner's Office (ICO) at:
Information Commissioner's Office,Wycliffe House,Water Lane,Wilmslow,Cheshire,SK9 5AFTel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.
Alternatively, visit ico.org.uk or email by using the following link ICO.org.uk