Data Protection Policy

Dublin Centre of Education (DCE) is committed to protecting the personal data and privacy of all students, staff, and stakeholders.

The school processes personal data in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

DCE acts as the Data Controller for all personal data processed by the school.

Collection and use of data

The school collects and processes personal data for the purpose of:

• managing student applications and enrolment
• delivering educational services and monitoring academic progress
• maintaining attendance and academic records
• providing student support and welfare services
• communicating with students regarding courses and school activities
• complying with legal and regulatory obligations

Personal data may also be processed for administrative, financial, and quality assurance purposes.

Lawful basis for processing

DCE processes personal data in accordance with GDPR lawful bases, including:

• compliance with legal obligations
• performance of a contract
• legitimate interests of the school
• consent, where applicable

Where special category data is processed (e.g. health information), appropriate additional safeguards are applied in accordance with GDPR.

Data security

The school implements appropriate technical and organisational measures to ensure that personal data is:

• processed securely and confidentially
• protected against unauthorised access, loss, or misuse
• accessible only to authorised personnel

Data sharing

Personal data may be shared with relevant authorities or third parties where required by law or necessary for the provision of services, including:

• immigration and regulatory bodies
• examination centres
• service providers supporting school operations

All data sharing is carried out in accordance with data protection legislation.

Data retention

Personal data is retained only for as long as necessary to fulfil its purpose and to comply with legal and regulatory requirements.

Student data is typically retained for a defined period in line with internal policies and applicable legislation.

Data subject rights

Students have the right to:

• access their personal data
• request correction of inaccurate data
• request erasure of data where applicable
• restrict or object to processing
• request data portability
• withdraw consent where processing is based on consent
• lodge a complaint with the Data Protection Commission

The school will respond to requests within the timeframes required by GDPR.

Data breaches

In the event of a personal data breach, the school will take appropriate action to mitigate risks and, where required, notify the Data Protection Commission and affected individuals.

Contact

For any queries regarding data protection or to exercise your rights, students may contact the school administration.

A full Data Protection Policy is available upon request.