Schoolcomms' Data Processing Agreement and GDPR
Schoolcomms’ Data Processing Agreement
We are pleased to confirm that Schoolcomms’ Data Processing Agreement and Privacy Notice have been updated as a consequence of changes we’ve made due to GDPR legislation.
Our promise to customers and partners:
We only process and store data with agreement of the data controller
We will use and continue to update safeguards around data handling
We will impose confidentiality requirements on all our personnel
We will work to help the controller meet the rights of the data subjects
We will not retain data that is no longer used or needed and will destroy in line with GDPR regulations
For further detail and information on GDPR legislation – please visit the UK Information Commissioner’s Office website
What Schoolcomms are already doing
We have been working hard on making Schoolcomms fully GDPR compliant. An updated Schoolcomms desktop version is now available. To ensure compliancy at your school please download the latest GDPR compliant version of Schoolcomms here.
Data processing with partners
Schoolcomms uses some 3rd party systems to fulfil our data processing duties; including hosting, texting, email, the storage and use of personal information handed to us by the school.
Schools are entitled to know which 3rd parties we use, and what data is being shared. Schoolcomms will assess its 3rd parties to ensure valid compliance with any changing legislation.
Schoolcomms has now revised existing contracts with schools to reflect the requirements of the new legislation.
In the event of a data breach Schoolcomms will follow the Information Commissioner’s Office guidelines.
Questions about data we hold
Schoolcomms do not transfer data to countries outside of the EEA. The cloud providers that we work with guarantee data is only processed in the EEA, or that they explicitly abide by the regulation.
Please report your data protection related concerns to firstname.lastname@example.org
Security of data is essential. Schoolcomms uses best of class protection measures and carry out regular external audits to assess our security posture.
Helping your school demonstrate compliance
Under the data protection law, controllers (i.e. the schools) will need to demonstrate their compliance, which in turn means they need to assess the compliance of all of their service suppliers.
In order to make the task of vetting their suppliers easier and more focussed for schools, Schoolcomms has partnered with UK trusted data experts GDPRiS, who specialise in helping schools take steps towards GDPR compliance.
School, local authority and MAT subscribers can use GDPRiS to streamline the school’s effort of achieving, demonstrating and retaining their compliance to GDPR.
For more information, please complete the form below.