Gower College Swansea needs to collect, process, keep and use certain types of information about people with whom it deals in order to carry out its day to day functions. These people include current, past and prospective students, customers, staff, partners, Corporation members, suppliers of goods and others. This personal information, whether on paper, on a computer, or recorded on other material, must be used fairly and processed in accordance with the General Data Protection Regulation (GDPR). The data must also not be disclosed to any other person unlawfully.
All staff and students should be aware:
- that all personal data collected, held, and processed (including Internet software) whether in manual, digital, electronic or any other format is subject to the GDPR
- of the circumstances under which they may or may not legitimately access, process and disclose personal data
Note – individuals, including staff and students, in relation to whom the College holds information are referred to as 'data subjects'.
The College is a corporate body and the Board of Governors is therefore ultimately responsible for compliance with the GDPR. The day to day operation of this policy is undertaken by the Data Protection Officer and their contact email address dpo@gowercollegeswansea.ac.uk
- Privacy Notice - Pre Enrolment
- Privacy Notice - Non-Accredited and Junior College
- Privacy Notice - A Guide for Students
- Privacy Notice - Learner Records Service
- Privacy Notice - HE Students
- Privacy Notice - JCQ Information for Candidates
Your rights over your personal information
You have a number of rights over your personal information, which are:
- The right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
- The right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
- The right to ask us to correct any errors in your personal information;
- The right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
- The right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
- The right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
- The right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly-used, machine-readable format.