Thurstonland First School is a 'data controller' under the General Data Protection Regulation which came into force during May 2018. As a school we determine the purpose or purposes for which "personal data" (i.e. data about living individuals from which they can be identified) is processed, the way in which that processing is done and our legal basis for doing so.
Data controllers have to provide "data subjects" (individuals who are the subject of personal data) with details of who they are, the purposes for which they process the personal data, and any other information that is necessary to make the processing of the personal data fair, including any third parties to whom the data may be passed on. This is done by what is referred to as a "Privacy Notice".