General Data Protection Regulation (GDPR)
The law which manages how we use your information has changed. The new European General Data Protection Regulation (GDPR) law came into effect on 25 May 2018. The aim of this law is to ensure all personal data is protected and organisations who work with such data are held accountable for its protection.
To help explain how your information is used we have published a Privacy Notice, which you can see below.
Data Protection Officer
We have appointed a Data Protection Officer for our school with matters relating to Data Protection and the use of your personal information.
Our Data Protection Officer is registered with the Information Commissioners Officer (ICO) and can be contacted at
Subject Access Requests (SAR)
Individuals wishing to access their personal data held by The Malling School under the Data Protection Act can send a completed Subject Access Request (SAR) form to the Data Protection Officer (DPO).
The personal data requested should be clearly identified. It may be necessary to confirm the identity of the data subject and/or the person making the request. The Malling School will respond to requests within 30 calendar days of receipt of the completed form (provided sufficient information has been given to the school to enable the request to be processed).
We will comply with the Information Commissioner's guidelines for Subjects Access Requests.
Data Protection Office
The Malling School
East Malling, West Malling,