About this Privacy Notice
Data Protection Professionals in Education (DPPE) is committed to protecting your personal information and being transparent about how we use it, whether you are one of our Members, attending one of our events, a visitor to our website, volunteer or service provider.
This Privacy Notice gives you a clear explanation about how DPPE collects personal information (or “personal data”), the types of personal information we collect, how we use it (or “process” it) and whether we share it with anyone else. It also explains your legal rights and choices regarding the information you provide to us.
Children’s Privacy: Our services are not aimed at children. In the limited circumstances where we may collect and use personal information about children we will comply with relevant law and guidelines.
Our contact details
If you need to contact us about this Privacy Notice you can do so by email and post. If you need to contact us about this Privacy Notice or have any query relating to your personal information, please contact our Privacy Manager using any one of the contact details below.
Data Protection Professionals in Education (DPPE)
Evesham, Worcestershire, WR11 4UW
Who is responsible for your personal data?
DPPE is responsible for how and why your personal data is used. The legal phrase for this is Data Controller (or “Controller”).
DPPE is a limited liability company incorporated in England & Wales with registration number 12194109.
Security of your personal data
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. If you would like more specific information about our security measures please contact our Privacy Manager.
We have also put in place procedures to deal with any suspected or actual personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Your legal rights
You have the following legal rights in relation to the processing of your personal information:
- To be informed: You have the right to know what personal information we are processing about you, how and why. The information in this Privacy Notice together with other information on our website is intended to provide you with this information. If you need more information, please contact our Privacy Manager;
- Access: You have the right to request a copy of your personal information that we hold about you together with other information relating to its use, subject to the application of any relevant legal exemptions;
- Erasure: At your request, we will delete your personal information from our records providing we don’t have an overriding legitimate reason for holding on to it;
- Rectification: We aim to keep your personal information accurate, current, and complete. We encourage you to contact us by emailing firstname.lastname@example.org to let us know if any of your personal information is inaccurate or changes, so that we can keep it correct and up-to-date;
- Objecting: In certain circumstances, you have the right to object to the processing of your personal information where we are: (i) processing your personal information on the legal basis of legitimate interests and we have no compelling reason we can demonstrate to continue with that processing, or (ii) using your personal information for direct marketing, or (iii) using your personal information for statistical purposes;
- Right to restrict processing: you have the right to ask us to restrict the processing of your personal information whilst a disagreement is resolved about its accuracy or whether we can use it on the legal basis of “legitimate interests”;
- Rights related to automated decision making: where we take automated decisions in relation to your personal information with no human involvement (i.e. such as credit scoring) you have the right to ask us for human intervention or to challenge any such decision;
- Right to withdraw consent: If you have provided your consent to the collection, processing and transfer of your personal information, you have the right to fully or partly withdraw your consent;
- Porting: You have the right to request that some of your personal information is provided to you, or to another information controller, in a commonly used, machine-readable format.
How to exercise your legal rights:
You may exercise any of the above rights, at any time, by emailing email@example.com together with a proof of your identity, i.e. a copy of your ID card, or passport, or any other valid identifying document.
If you believe that your information protection rights may have been breached, you have the right to lodge a complaint with the applicable supervisory authority, or to seek a remedy through the courts.
If you fail to provide personal data
Where we need to collect personal data by law or in order to process your instructions or perform a contract we have with you and you fail to provide that data when requested, we may not be able to carry out your instructions or perform the contract we have or are trying to enter into with you. In this case, we may have to cancel our engagement or contract you have with us, but we will notify you if this is the case at the time.
Updating your personal data
If any of the personal data that you have provided to us changes, for example if you change your email address or if you wish to cancel any request you have made of us, or if you become aware we have any inaccurate personal data about you, please let us know by sending an email to firstname.lastname@example.org . We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us.
Automated decision making and profiling
DPPE does not use your personal information for automated decision making or profiling purposes.
Automated decision-making is the process of making a decision which produces significant legal effects for that individual and that decision is made solely by automated means without a human being involved at all.
Profiling means the analysis of certain characteristics of an individual’s personality, behaviour, interests and habits to find out more about their preferences or to make predictions about their behaviour and/ or to make decisions about them.
Change of ownership
If we were to sell or transfer DPPE to another organisation, your records would also transfer to the new owner. Limited information may also be shared, where required, with legal and other professional advisors involved in that transaction.
The reason we would transfer your records is to minimise the disruption to the on-going operation of DPPE and to ensure we and a new owner were able to comply with our legal obligations regarding the retention of such records, including the ongoing delivery of care to our members and others.
Personal data we collect and how we use it
Want more detail?
The type of personal information we collect and how we use it will vary depending on our relationship. To find out more about how we use your personal information, you should select and read the detailed Privacy Notice that applies to our relationship.
Simply choose from the options below:
- Members (including prospective and past members)
- Website visitor (including browsers and customers of DPPE online services and products)
Changes to our Privacy Notice
We will update and change this Privacy Notice from time to time to reflect any changes to the way in which we process your personal information or changing legal requirements. Any changes we may make to our Privacy Notice in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Privacy Notice.