Lawful basis for processing data

The lawful bases for processing data are set out in Article 6 of the GDPR and specific information about why the school is required to request and process some of your data can be found on the Collecting and sharing pupil information page.

At least one of these lawful bases for processing data must apply whenever Plaistow and Kirdford Primary School processes your personal data:           

(a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose. Details on how Plaistow and Kirdford Primary School ask for Consent can be found here.

(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.

(c) Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations).

(d) Vital interests: the processing is necessary to protect someone’s life.

(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

(f) Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks.)

Some examples that we use within the school are shown in the table below, please note this is not an exhaustive list. Detailed information about the data Plaistow and Kirdford Primary school hold is held within the school’s Information Asset Register.