In the course of its activities Eton College collects, stores and processes personal data (sometimes sensitive in nature) about staff, pupils, their parents, contactors, volunteers, donors and other third parties (in a manner more fully detailed within the College’s Privacy Notices below). Eton College is committed to ensuring that data is managed and protected in line with the law, and that the rights and freedoms of individuals are secured.

Policies

Data Protection Policy

Privacy Notice for Staff

Privacy Notice for Pupils and Parents

Privacy Notice for Donors

Your Rights

Individuals have various rights in respect of their personal data which the College holds or processes:

You have the right:

• to obtain access to, and copies of, the personal data that is held about you.
• to require the College to correct the personal data it holds about you if it is incorrect.
• to require the College (in certain circumstances) to erase your personal data.
• to request that the College restricts its data processing activities in relation to your personal data.
• to receive from the College the personal data it holds about you, in a reasonable format specified by you, including for the purpose of transmitting that personal data to another data controller.
• to object, on grounds relating to your particular situation, to any of the College’s particular processing activities where you feel this has a disproportionate impact on your rights.

Please note that the above rights are not absolute, and the College may be entitled to refuse to facilitate the exercise of your rights where exceptions apply (please see the relevant Privacy Notice for further details).

Subject Access Request

Should you wish to know what data is held about you, for what purposes it is processed, or to receive a copy of the data held, you can make a ‘subject access request’ using this form: Subject Access Request Form

Requests should be sent to the Data Protection Lead at [email protected] or send the request by post to:

We will require proof of your identity before we can respond to your subject access request (and in some cases proof of the relationship between yourself and the data subject if you are making a subject access request on someone else’s behalf).  We will accept a photocopy or scanned image of one of the following: passport, driver’s licence or full birth or adoption certificate. If you do not have any of these forms of identification available, please contact the Data Protection Lead on [email protected] for advice on other acceptable forms of identification.

The College will endeavour to respond to any requests as soon as is reasonably practicable and in any event within statutory time-limits (which is generally one month, but fulfilling more complex or multiple requests, e.g. those involving third party information, may take 1-2 months longer).

Should you wish to delete, rectify or restrict the use of any of the data we hold about you, please contact the Data Protection Lead at the above address.

Further Information

If you have any questions about how we process your personal information, or if you wish to submit a subject access request or make a complaint about how we have processed your data, you can contact the College’s Data Protection Lead at [email protected].

The Information Commissioner’s Office is responsible for making sure that personal data is collected and processed in accordance with the Data Protection Act.  If you are dissatisfied with how we have handled your concern you can raise a formal complaint with them here.