Purpose and legal basis for processing
The PiXL Club Ltd (Company Registration Number 07321607) will process all student personal data on your school’s behalf and only as determined by you, the data controller, in accordance with our contract with you to provide services, details of which can be found at: https://www.pixl.org.uk/membership . The PiXL Club Ltd will only process personal data for the purpose of improving educational outcomes for the students in member schools.
GDPR Compliance
All data processing will be carried out in accordance with the six principles of Article 5 of the General Data Protection Regulation. A copy of our policy can be requested from the contact given below and can be found via your membership page.
Where data is held and who has access
This data transfer is made securely only to servers within the EEA. Any student personal data will only be accessed by a limited number of PiXL employees, and only for the purpose of supporting schools with the development of the Edge programme.
There is no automated decision-making or profiling associated with the processing of any personal data. Your school, as data controller, will appoint designated members of staff to have oversight of this data and can limit the access of other members of staff.
The PiXL Club Ltd will not share this data with any third parties unless legally obliged to do so.
Rights of data subjects
If students receive an accreditation through this programme (Apprentice, Graduate or Masters) their progress information will be retained:-
- Where a personal email address has been provided for continued access to the account after leaving school, the data will be retained until requested by the student or having not been accessed for a 3 year period.
- Accounts that do not have a personal email address assigned to them will be deleted 9 months from their last accessed time following the anticipated completion of their thirteenth year of education.
This will allow for progress to be taken with the student between schools during their education and allow them to use the digibadge to evidence their achievements and written self-analysis in the programme to employers or other institutions.
If they have not received an accreditation all personal data will be deleted within 9 months of the anticipated completion of their thirteenth year of education.
You have a right for any of the data we process on your behalf to be deleted, and all data subjects will have the ability to request deletion of their personal data at any stage.
Should you have any questions about this notice, or to request deletion please contact dataprotection@pixl.org.uk.
If you wish to register a complaint, please contact PiXL using the details on our website. You may also raise a complaint with the Information Commissioner’s Office.