top of page

MADE OF MUSIC 

GDPR PRIVACY POLICY 

Who processes your information?

Made of Music is the data controller of the personal information you provide to us. This means the school determines the purposes for which, and the manner in which, any personal data relating to pupils and their families is to be processed. Mary Power (Director) acts as a representative for the school with regard to its data controller responsibilities; she can be contacted at madeofmusicschool@gmail.com. Her role is to oversee and monitor the school’s data protection procedures, and to ensure the school is compliant with the GDPR.

 

Why do we collect and use your information?

The personal data of pupils and their families is collected and used for the following reasons:

•  To support pupil learning

•  To monitor and report on pupil progress

•  To provide appropriate pastoral care

•  To assess the quality of our service

•  To comply with the law regarding data sharing

•  To safeguard pupils

 

Which data is collected?

The categories of pupil information that the school collects and holds include the following:

•  Personal information – e.g. names, birthday, mobile numbers, email addresses and home addresses

•  Attendance information – e.g. number of absences and absence reasons

•  Assessment information – e.g. exam results

•  Relevant medical information

 

How long is your data stored for?

In accordance with the GDPR, the school does not store personal data indefinitely; data is only stored for as long as is necessary to complete the task for which it was originally collected.

 

Will my information be shared?

Made of Music will not share your personal information with any third parties unless the law allows us to do so.

 

What are your rights?

You have the right to:

 •  Be informed about how Made of Music uses your personal data.

 •  Request access to the personal data that Made of Music.

 •  Request that your personal data is amended if it is inaccurate​ or incomplete.

 •  Request that your personal data is erased where there is no compelling reason for its continued processing.

 •  Request that the processing of your data is restricted.

 •  Object to your personal data being processed.

Where the processing of your data is based on your consent, you have the right to withdraw this consent at any time.

 

bottom of page