Our College aims to ensure that all personal data collected about staff, students, parents, governors, visitors and other individuals is collected, stored and processed in accordance with the General Data Protection Regulation (GDPR) and the provisions of the Data Protection Act 2018 (DPA 2018) as set out in the Data Protection Bill.  We aim to ensure all data is:

 

• Processed lawfully, fairly and in a transparent manner

• Collected for specified, explicit and legitimate purposes

• Adequate, relevant and limited to what is necessary to fulfil the purposes for which it is processed

• Accurate and, where necessary, kept up to date

• Kept for no longer than is necessary for the purposes for which it is processed

• Processed in a way that ensures it is appropriately secure

 

We will only process personal data where we have one of 6 lawful bases (legal reasons) to do so under data protection law:

 

• The data needs to be processed so that the College can fulfil a contract with the individual, or the individual has asked the College to take specific steps before entering into a contract

• The data needs to be processed so that the College can comply with a legal obligation

• The data needs to be processed to ensure the vital interests of the individual e.g. to protect someone’s life

• The data needs to be processed so that the College, as a public authority, can perform a task in the public interest, and carry out its official functions

• The data needs to be processed for the legitimate interests of the College or a third party (provided the individual’s rights and freedoms are not overridden)

• The individual (or their parent/carer when appropriate in the case of a student) has freely given clear consent

 

More specific information about the data which we collect, and store is available within our Privacy Notices.  Detailed information on our Data Protection policies and procedures can be found within our Data Protection Policy.