Privacy Policy

Why do we collect and use pupil information?
We use the pupil data:

to support pupil learning
to monitor and report on pupil progress
to provide appropriate pastoral care
to assess the quality of our services
to comply with the law regarding data sharing

The categories of pupil information that we collect, hold and share include:

Personal information (e.g. name, unique pupil number and address)
Characteristics (e.g. ethnicity, language, nationality, country of birth and free school meal eligibility)
Medical information (e.g. name of GP, relevant medical conditions)
Attendance information (e.g. lates, number of absences, absence reasons)
Behavioural information (e.g. behaviour incidents, exclusions)
Assessment information (e.g. examinations and internal assessments)
Special educational needs information
School history (such as where pupils go when they leave us)

Collecting pupil information

Whilst the majority of pupil information you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain pupil information to us or if you have a choice in this.

Storing pupil data

We hold pupil data for the necessary time needed to assist the students and college.

Who do we share pupil information with?

We routinely share pupil information with:

schools that the pupils attend after leaving us
our local authority (Consellería de Educación)
the Ministry of Education
External examination boards (e.g. Edexcel, Tineke ,and British Council)
IT Services systems (e.g. Google, Microsoft, and Schoology)

We have put in place measures to protect the security of your information. Third parties will only process your personal information on our instructions and where they have agreed to treat the information confidentially and to keep it secure

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Requesting access to your personal data

Under data protection legislation, parents and pupils have the right to request access to information about them that we hold. To make a request for your personal information, or be given access to your child’s educational record, contact GDPR (GDPR@palmacollege.com)

You also have the right to:

object to processing of personal data that is likely to cause, or is causing, damage or distress
prevent processing for the purpose of direct marketing
object to decisions being taken by automated means
in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
request the destruction of any data that is considered unnecessary to support the pupil’s learning, academic life and/or history.

If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Agencia Española de Protección de Datos (AEPD).

Contact:

Palma College
C/O Data Protection
Carrer Can Veri, 5
Palma de Mallorca, 07001
Spain
Email: GDPR@palmacollege.com

Click here to download our website terms and conditions.