Further Data Protection

Information for Students and Parents

Data protection law makes a distinction between organisations that use personal information for their own purposes (known as “Data Controllers”) and organisations that process personal information on behalf of other organisations (known as “Data Processors”). 

Alkemygold Limited (trading as “Alps”) as the Data Processor only has access to pupil data as provided by the school/college as Data Controller and can only use that pupil data for the purposes of performing services on the school/college’s behalf.  

Your child’s school/college remains the Data Controller of any pupil data we process on their behalfAlps does not decide what information is provided to us nor are we responsible for the accuracy of the information provided to us. If you have questions about your child’s data or how your child’s school/college is making use of services like Alps, please contact their school directly.  Any pupil or parent/guardian enquiries we receive will be directed to the relevant school/college as the Data Controller. 

GDPR – Profiling warning for Schools/Colleges

The General Data Protection Regulation 2016/679 (GDPR) contains a number of provisions about the use of automated decision making, including profiling. 

Alkemygold Limited (trading as “Alps”) does not undertake any profiling in relation to data subjects in your Data. We will produce any assessments required within the Services you commission. That does not assume any consequences for staff, pupils or others to arise automatically from that assessment and you are responsible, as the Data Controller, for any decisions made with reference to that assessment or effects on individuals arising from those decisions.  

If you intend to apply the results of assessments in a manner that will constitute profiling for the purposes of Data Protection Laws, you are responsible for making that known to data subjects, informing them of their right to object to profiling and respecting any exercise of that right in accordance with the provisions in the GDPR.  

Suggested Text for Inclusion in School Privacy Notices using DfE Template Notices

THIS TEXT IS PROVIDED AS A SUGGESTION AND SHOULD NOT BE RELIED UPON OR TREATED AS LEGAL OR COMPLIANCE ADVICE. ALKEMYGOLD LIMITED DOES NOT ACCEPT ANY LIABILITY IN CONNECTION WITH ANY LOSS OR DAMAGE SUSTAINED AS A RESULT OF USING THE FOLLOWING SUGGESTED TEXT WHICH IS PROVIDED ONLY AS AN ILLUSTRATION OF HOW A PRIVACY NOTICE MIGHT REFER TO THE DATA PROCESSING UNDERTAKEN IN THE PERFORMANCE OF A CONTRACT WITH ALKEMYGOLD LIMITED. EACH SCHOOL OR COLLEGE MUST ESTABLISH THE CONTENT OF ITS OWN PRIVACY NOTICES AND ASSESS THEIR SUITABILITY FOR ITS PURPOSES AND TAKE INDEPENDENT EXPERT ADVICE IF REQUIRED. 

 

PUPIL AND PARENT NOTICE

Categories of Information

Under the heading “categories of pupil information that we collect, hold and share” consider adding:

  • Average GCSE points score;
  • A level/Applied A level unique identifier number;
  • AS level/BTEC level unique identifier number;
  • Exam level;
  • Subject and Grade.

Sharing

Under the heading “Who we share pupil information with” consider adding:

  • Third party data processors engaged by us.

Purpose

Under the heading “Why we share pupil information” consider adding:

  • We share pupils’ data with third party data processors engaged by us in furtherance of supporting pupil learning, school administration and reporting.

STAFF NOTICE

Categories of Information

Under the heading “categories of school workforce information that we collect, process, hold and share” consider adding:

  • Information forming part of sets of data or information produced, assessed or transferred by an individual

Use of Data

Under the heading “Why we collect and use this information” consider adding:

  • manage pupil data processed by or for the school.

Sharing

Under the heading “Who we share this information with” consider adding:

  • Third party data processors engaged by us.

Purpose

Under the heading “Why we share school workforce information” consider adding:

  • We share information about workforce members with third party data processors engaged by us in furtherance of supporting pupil learning, school administration and reporting as well as managing pupil data processed by or for the school.

May 2023