Privacy Notice

Hello and welcome to GDPR in Schools Ltd and our training platform. The service is a web delivered “continuous personal development” environment, specifically tailored to use in data protection for the education sector.

This is a privacy notice for the service to help you understand what data we collect and what we do with it.

Who We Are

Training.gdpr.school  is a website operated by GDPR in Schools Limited, who run the data protection compliance application at https://www.gdpris.co.uk and offer services around data protection to schools.

If you have questions or concerns about us or our web site, email us on [email protected].

What Data We Collect and Why We Collect It

For the purposes of running this website we will collect and persist the following information:

• Browsing data. By visiting our web site, you leave trail. The web servers log your IP address and browser agent string (telling us your browser and version). Such information can be used to us to tune our service and troubleshoot issues.
• Cookies: Cookies are small files placed on your computer that your browser sends back to us on every request. There are some technically required (necessary) cookies that will make the site work for you. These ones only you and we can see. There are also some cookies that enhance your experience. See the section on Cookies below.
• There are some others cookies, that are there to help us understand better e.g. the content our users are interested in, how often they visit etc.
• Account credentials: Should you sign up, you will need to give us a name, a valid email address, possibly some contextual information (e.g. the school you work at) and set yourself a password.
• The platform is there to offer you – mostly – video-based training materials and allow you to test your understanding after having viewed the content. Your progress, including your answers will be held on the platform.

Cookies

Our training platform only uses necessary cookies to facilitate the operation and good performance of the platform.

Embedded content from other websites

Items on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who We Share Your Data With

We have partnered with Thinkific Labs Inc., Vancouver, Canada, to deliver this service. Data storage and the hosting of the training content is managed by Thinkific.

Canada enjoys an adequacy decision under the UK GDPR, but we note that Thinkific use sub-processors in 3^rd countries, particularly the USA.

How Long We Retain Your Data

Your data will remain on the platform until you or your schools request from us to remove the data.

What Rights You Have Over Your Data

You have all the rights granted to you by the General Data Protection Regulation (2018) and the Data Protection Act (2018).

GDPRiS – in most cases – is not the data controller, but your school is. Please exercise your data protection rights via the school, who will need to ultimately give permission. You are welcome to contact us directly, but we will need to check with your school.

What is the Lawful Basis for Processing

If your school signed you up, then we act as the data processor, you are what is called the data subject. If you signed up with us directly, then we are the data controller.

Where schools are the data controller, they will need to determine the lawful basis for the processing. Because the processing does not present any particular risk, and the school are obliged to train their staff in data protection, the school in most cases will choose Art 6(1)e – processing is necessary for a task carried out in the public interest.

Where you engage with us directly, then the processing is based on Art 6(1)b – the processing is necessary for the performance of a contract.

Get In Touch

You can email us with any queries or comments: [email protected] or [email protected] or call UK 02039610110.

June 2021