ASCL Privacy Notice

Who we are
The Association of School and College Leaders (ASCL) is the leading professional body representing school and college leaders in all phases across the UK. ASCL speak on behalf of members and acts on behalf of children and young people. We offer advice, guidance and best practice, provide our members with legal support and full trade union representation as well as shape and influence government policy.
 

ASCL is committed to protecting and respecting your privacy. By virtue of data protection legislation, ASCL is the ‘controller’ and/or ‘joint controller’ of this information, known as data. The way your personal data is collected, stored and used is referred to as ‘processing’. ASCL will process your personal data in a manner that is compatible with data protection legislation.
 

This notice describes the personal data that ASCL collects from or about you, and how we use that information. During the course of conducting its affairs, ASCL will deal with personal data in respect of members, consultants, business partners, legal firms, subsidiaries, analytics and search engine providers, customer survey providers, and sub-contractors for the performance of any contract we may enter into with you.
 

Data protection legislation requires us to comply with various principles, under which personal data must be:

The table below describes the various forms of personal data we collect and the lawful basis for processing and/or sharing this data.

Purpose of Collection	Data Collected	Purpose for Collection	Lawful basis for processing	Data shared with (not outside the UK)
Communications and to provide you with information	Name, organisation, location, email address	To provide appropriate online or email information about products and services that you have requested.	Contractual/membership fulfilment	Internal use
	Mobile and landline numbers	To communicate with and/or to follow-up to ensure requested information and/or advice meets needs.
	Personal contact information through online forms or events	To provide further online or email information and ongoing news updates in relation to areas that you have requested.	Legitimate interest
Transactional information	Name, home address, email, telephone, bank account details	To process transactions for membership, accounting, taxation or legal services and to ensure any transaction issues are dealt with	Contractual and statutory obligation	Internal use and professional advisers
		For any legal claims arise.	Legitimate interest
Security	Technical information	System and website infrastructure	Legitimate interest	Internal and third parties
Services development	Names, contact details and membership id	To develop existing and new services to meet expectations and requirement of membership	Consent	Internally and consent given for marketing purposes
Fulfilment information	Name, contact and membership id details	Delivery of magazines, in physical and digital format	Contractual obligation	Internal and third parties providing product or service
	Name, dietary requirements, disability	Catering and/or the purposes of attending events

 
ASCL Women’s Network and Benevolent forms: Privacy Notice update

Request: ASCL requested GRCI Law to review the privacy practices in relation to data processed for the Women’s Network and Benevolent forms.

Compliance gap: there is currently no transparency available to data subjects about how their data is processed via the website privacy notice.
The gaps presents a violation of the GDPR, Article 5(1) Transparency and 13 Information to be provided where personal data are collected from the data subject.

Art. 5 GDPR – Principles relating to processing of personal data - General Data Protection Regulation (GDPR) (gdpr-info.eu)
Art. 13 GDPR – Information to be provided where personal data are collected from the data subject - General Data Protection Regulation (GDPR) (gdpr-info.eu)

GRCI Law recommendations: the below table has been drafted up for ASCL’s review, once the table reflects the personal data processing context the website privacy notice can be updated to comply with the organisations’ transparency obligation.

Website notice link:  ASCL - ASCL Privacy Notice

Remediation: please review and update the table below and publish via the website privacy notice.
 

Purpose of Collection	Data Collected			Purpose for Collection	Lawful basis for processing	Data shared with (not outside the UK)
Women’s Leaders Network	Name, email address, contact number, organisation name, role			Targeted communications, Event management and participation.	Consent	Internal Use
Ethnic Diversity Network	Name, email address, contact number, organisation name, role			Targeted communications, Event management and participation.	Consent	Internal Use
LGBT Leaders’ Network	Name, email address, contact number, organisation name, role			Targeted communications, Event management and participation.	Consent	Internal Use
Benevolent Fund	Name, email address, contact number, information about your circumstances to support your application.			Eligibility verification, Fund allocation and management, Donor relations and funding.	Consent	Internal Use

Your rights as a data subject
You have the following rights in relation to the way in which ASCL deals with your personal data:

• the right to be informed
• right of access
• right to rectification
• right to restrict processing
• right to data portability
• right to object
• rights related to automated decision-making, including profiling
• right to erasure

Where you exercise your right to object or withdraw your consent you need to notify ASCL info@ascl.org.uk. We may process your personal data without your knowledge or consent where we are permitted or required by law or regulatory requirements to do so or where we have a legitimate purpose for doing so. In such a case, we will not process more personal data than is required under the circumstances.

We will not send you marketing emails unless you have consented to receiving them. Please contact us on 0116 299 1122 or email us at info@ascl.org.uk if you wish to change your preferences.

Under data protection legislation, you have the right to access data we hold about you. If you wish to exercise this right, please see our Information Notice on Data Subject Access Requests and contact us on 0116 299 1122 or email us at info@ascl.org.uk. 

When you visit our website, we may make use of cookies. Cookies allow a website to remember things like your preferences in order to improve your user experience. If a website does not use cookies, it will think you are a new visitor every time you move to a new web page. It is possible for you to block some or all cookies, or even to delete cookies. Further details can be found on our website which has a link to our information notice on cookies.

This privacy notice may be updated from time to time. Please check back frequently to see any updates or changes.

If you are not satisfied by our actions, you can seek recourse through our internal complaints’ procedure. If you remain dissatisfied, you have the right to refer the matter to the Information Commissioner or seek recourse through the courts. 

The Information Commissioner can be contacted at:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate)

Or via the ICO complaints tool: Data protection and personal information complaints tool | ICO

The Association has appointed an external Data Protection Officer.

ASCL Data Protection Officer
C/o GRCI Law
Unit 3 Clive Court, Bartholomew's Walk
Cambridgeshire Business Park
Ely
Cambridgeshire
CB7 4EA

If you would like to know more or have any concerns about how your personal data is being processed, please contact us:

Tel: 0116 299 1122
Email: info@ascl.org.uk

or

Director of Finance and Governance
Association of School and College Leaders
2nd Floor
Peat House
1 Waterloo Way
Leicester
LE1 6LP

Tel: 0116 299 1122
Email: info@ascl.org.uk