ASCE Privacy notice
How your data will be used
In line with the General Data Protection Regulation (GDPR), there are certain things that we need to let you know about how your information we collect for this research will be looked after. A privacy notice explains how data we collect will be used. In this privacy notice, we explain:
- the legal basis for data processing;
- who will have access to your personal data;
- how your data will be used, stored and deleted; and
- who you can contact with a query or a complaint.
The Education Endowment Foundation (EEF) and the Youth Endowment Fund (YEF) have funded the National Centre for Social Research (NatCen) and a team from University College London to evaluate the impact of school behavioural policies on non-attendance and exclusion rates on Year 7 to Year 9 students.
You can find out more about these organisations by following the links below:
What is the legal basis for processing data?
NatCen is the data controller and data processor for this project. In order for the use of personal data to be lawful, we need to meet one (or more) conditions in the data protection legislation, as set out in Article 6(1) of the General Data Protection Regulation (GDPR). For the purpose of this project, the relevant condition that we are meeting is ‘legitimate interests’. This means that we believe that there is a genuine reason for us to process this data (to evaluate the impact of school behavioural policies), that this data is needed to fulfil this purpose (we could not evaluate without this information), and that using this data will not interfere with individuals’ interests, rights or freedoms.
You can contact NatCen with any questions about the study and the processing of data at ASCE@natcen.ac.uk.
Who will have access to my personal data?
The NatCen research team carrying out this evaluation and will have access to:
- school, student and teacher information;
- interview, discussion groups, and workshop audio recordings and transcripts.
McGowan Transcriptions is the transcription service we use to transcribe our interview and focus group data. They will have access to recordings and transcriptions from all interviews and discussion groups, which are shared through a secure online transfer system. McGowan Transcriptions is on our approved supplier list and compliant with all of our information security policies.
How will the data be used, stored and deleted?
The data collected will only be used for research purposes. NatCen will store and handle all data securely and confidentially in line with the GDPR. Reports and publications arising from this research will not identify any individual participant or school. The purpose of NatCen’s research is to understand the impact of school behavioural policies on non-attendance and exclusion rates. The data will be used to contribute to policy making and scholarly discourses in the field of education.
NatCen will delete all personal information, and any other data held on the project, within six months from report publication.
What are your rights under GDPR?
Under certain circumstances, by law you have the right to:
- Be informed about the collection and use of your personal data. We must provide this privacy notice to explain the purpose for processing your personal data, retention periods for your personal data, and who it will be shared with.
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation that makes you want to object to processing on this ground.
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of your personal information to another party.
- Rights in relation to automated decision-making and profiling. We will not use your data for automated decision making or profiling in any way.
If you want to review, verify, correct, or request erasure of your personal information; object to the processing of your personal data; or request that we transfer a copy of your personal information to another party, please contact the study team at ASCE@natcen.ac.uk.
Do you have the right to withdraw permission?
You have the right to withdraw your permission for processing at any time and you don’t have to justify or explain why you are doing so if you don’t want to state your reasons. To withdraw your permission, please contact the study team at ASCE@natcen.ac.uk.
When any data you provide has been aggregated with other responses in analyses, we will be unable to remove your data from those analyses. However, the original data will be erased, and it will not be possible to identify you in these aggregated results.
Once we have received notification that you have withdrawn your permission, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Who can I contact with a query or a complaint about how my data has been used or managed?
If you have any questions about how your data will be used or managed, please contact NatCen’s Data Protection Officer at email@example.com.
Under GDPR, you have the right to lodge a complaint with the Information Commissioner’s Office. Please go to https://ico.org.uk/ for more information.