We will uphold the rights of students, staff and parents of our schools as stated in our policy and make sure that the data BridgeU processes will only be used as agreed in our terms. What does the GDPR do?
The GDPR gives EU persons more right and protection regarding their personal data.
For example, the ICO makes note of the following rights of EU Citizens under GDPR.
Right of access: You have the right to obtain confirmation as to whether your personal data are being processed, and, where that is the case, access to such personal data.
Right to Rectification: Right to Rectification: We rely on the Data Controller to ensure that the personal information provided to us for processing is accurate. You should notify your school of any changes to the personal information that you have provided by sending them a request to rectify your personal information.
Right to erasure / ‘Right to be forgotten’: You can request your school to delete all of your personal information. This will result in BridgeU deleting your personal information (unless there is a legitimate and legal reason why BridgeU is unable to delete certain aspects of your personal information, in which case we will inform you of this in writing).
Right to restriction of processing: You have the right to ask your school to stop processing your personal information at any time, although this is likely to result in you no longer being able to use the services made available to you via the Platform.
Right to data portability: You have the right to request that your school provides you with a copy of all of your personal information and require them to transmit your personal information to another data controller in a structured, commonly used and machine-readable format.