Cheshire College South and West takes the protection of your personal information very seriously. For the purposes of the Data Protection Act the data controller is Cheshire College South and West. Our ICO registration is: ZA309926. The following statements outline the data we collect and why and who this may be shared with.
This privacy notice tells you what we will do with your personal information when you contact or visit Cheshire College South & West, attend one of our courses or work for us.
This notice is layered so that you can easily select the reason we process your personal information and see what we do with it.
This privacy notice will tell you:
This privacy notice has been prepared in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Cheshire College South & West (the College) is a further education provider and exempt charity. The College is the data controller for the personal information we process, unless otherwise stated.
There are many ways you can contact us, including by phone, email and post.
We have three Campus addresses:
Crewe Campus
Dane Bank Avenue
Crewe
Cheshire
CW2 8AB
Learn more about the Crewe Campus.
Ellesmere Port Campus
Off Sutton Way
Ellesmere Port
CH65 7BF
Learn more about the Ellesmere Port Campus.
Chester Campus
Eaton Road
Handbridge
Chester
CH4 7ER
Learn more about the Chester Campus.
For general information, please use this page of our website.
You can contact the College’s Data Protection Officer at dataprotect@ccsw.ac.uk or via our postal address.
Please mark the envelope ‘Data Protection Officer’.
We have divided this privacy notice into sections to make it easier to read only the sections relevant to you, please be aware that multiple sections may apply depending on your relationship with the College.
In each section we have set out the legal basis we rely on for processing your personal data, in addition, we have provided a table in the section titled ‘Legal Basis for Processing Personal Data’ to provide an easy to read summary and quick reference to the full details of the data processing.
Personal information may be processed by the College for one or more of the following reasons:
Our Services
Studying with Us
Parents/Guardians of Students
People Who Work for Us
In general, the personal information we process will have been provided directly from you.
We may also receive your personal information indirectly, in the following scenarios:
If it is not disproportionate, we will contact you to let you know we are processing your personal information.
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
You are not required to pay any charge for exercising your rights. We have one month to respond to you.
Discover more in our Data Protection Rights Procedure.
Please contact us at dataprotect@ccsw.ac.uk if you wish to make a request.
You can also make a request online using this form.
Your rights under data protection are:
Your Right of Access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
Your Right to Rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
Your Right to Erasure
You have the right to ask us to erase your personal information in certain circumstances.
Your Right to Restriction of Processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
Your Right to Object to Processing
You have the right to object to processing if we are processing your information as part of our public tasks, or in our legitimate interests.
Your Right to Data Portability
Your right to data portability only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent or if we are in talks about entering into a contract and the processing is automated.
As a public authority and a provider of services to the public, we have a legal duty to comply with the Equality Act (2010).
This means we need to make service adjustments for anyone with a disability who contacts us in any capacity, to eliminate any barriers to accessing our services. Our lawful basis for processing this information is article 6(1)(c) of the UK GDPR as we have a legal obligation to provide this. Our processing of special category data, such as health information you give us, will be based on article 9(2)(b), where the processing of data fulfils our legal obligations. This may include the aggregation of your data to monitor our outcomes and inform our policy making. This statistical analysis will not identify you or lead to a direct intervention or contact.
We’ll create a record of your adjustment requirements. These will give your name, contact details and type of adjustment required, along with a brief description of why it is required. Relevant staff can access this to ensure they are communicating with you in the required way.
We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation).
As a general guide:
The College has a Retention Procedure which specifically sets out detailed retention timescales. For more information on how long information will be retained please contact our Data Protection Officer.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We have been certified under the Cyber Essentials scheme.
Where you have previously studied at the College, enquired about a course, or commenced an application process, then we may send you information about future courses and learning opportunities we provide. We will only do so where you provided your consent. You can withdraw this consent at any time.
Additionally, where you have previously been a customer of one of our gyms, restaurants, or hair/beauty services, we may send you information about these services on the basis of our legitimate interests.
In doing so, we will comply with the requirements of the “soft opt in” under the Privacy and Electronic Communications Regulations and offer you an opportunity to refuse marketing when your details are first collected and in subsequent messages (by way of an unsubscribe).
We may contact parents/guardians to send postal marketing materials highlighting the range of relevant courses, qualifications and career options offered through the College. If you do not wish to receive such marketing materials, please contact us to opt out.
We will not share your information with any third parties for the purposes of those third parties conducting direct marketing.
Where students or staff take part in any international programmes e.g., residential or exchange programs their data will be sent outside the UK. Information including name, address, date of birth or age, emergency contacts, and other relevant information may be shared with any travel organisation e.g., travel agents, hotels, or airlines. The information will also be passed to the host school/College/education provider and a host family (where relevant). Such transfers usually are necessary to meet our contractual or legal obligations. Where the destination country is in the not in the European Economic Area or a country with an EU ‘adequacy’ finding, the College will ensure appropriate safeguards are in place to ensure the confidentiality and security of your personal information.
Data may also be transferred outside of the European Economic Area by our suppliers, such as where data is to be hosted on IT servers (equipment). The College shall always provide an adequate level of protection for the data processed, in accordance with the requirements of data protection laws.
Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.
The College is committed to processing personal data fairly and lawfully. If you have queries or concerns, please contact us at dataprotect@ccsw.ac.uk and we’ll respond.
If you remain dissatisfied, you can make a complaint about the way we process your personal information to the Information Commissioners Office (ICO). Please follow this link to the ICO website for more information https://ico.org.uk/make-a-complaint/. Or contact them at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
For information about how we process a complainant’s information, please see this section of our privacy notice titled ‘Making a Complaint’.
What we need and why we need it
We need enough information from you to answer your enquiry. If you call our phone lines, we won’t make an audio recording. In certain circumstances we may make notes to provide you with a further service as required. We may ask for you to provide certain personal data so that we can verify your identity before discussing information further; for example, if a parent makes enquiries about a student, we will verify the details on our system to identify the parent and their right to receive any personal information.
If you contact us via email or post, we’ll need a return address.
If you contact us by email, we may retain a copy of your enquiry for audit and record keeping purposes.
What we do with it
For individuals making a general enquiry e.g., regarding opening hours or our facilities we will not record the personal details or the enquiry.
Where an enquiry relates to a student, we may record the details of the enquiry including the date, time, and content on our student management system.
Purpose and lawful basis for processing
When you contact us to make an enquiry, we collect information, including your personal data, so that we can respond to it and fulfil our responsibilities.
If you are enquiring about education the lawful basis, we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a further education provider.
If you are enquiring about our public services such as a Customer of our Restaurants, Gym or Hair and Beauty Services the lawful basis we rely on for processing your personal data is article 6(1)(b) of the UK GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract.
If you are enquiring about one of our other services services (such as room or facilities hire) the lawful basis, we rely on to process your personal data is article 6(1)(f) of the UK GDPR, which allows us to process personal data when this is necessary for the purposes of the legitimate interests of the College or a third party.
If the information you provide us in relation to your enquiry contains special category data, such as health, religious or ethnic origin information the lawful basis we rely on to process it is article 9(2)(g) of the UK GDPR, which also relates to our public task and the safeguarding of your fundamental rights. And Schedule 1 part 2(6) of the Data Protection Act 2018 which relates to statutory and government purposes.
What we need and why we need it
The College runs a range of events to showcase our services to prospective students and the wider community. When you register to attend or physically attend one of our events, we may collect your contact details (name, phone number and/or email address). Depending on your age and the type of event we may also ask for the school you attend, your year group and a name, email, or phone number for a parental/emergency contact.
Your photograph or video may also be taken and used as part of promotion of the College events or activities taking place at the College. You will be informed if photographs or video is being taken so you can refrain from being included (if you wish not to be).
What we do with it
We will use your information to monitor the number of people attending the events and may also contact you to seek feedback on the event.
We may send you information about future courses and learning opportunities we provide on the basis of our legitimate interests. We will offer you an opportunity to refuse marketing when your details are first collected and in subsequent messages (by way of an unsubscribe).
Purpose and lawful basis for processing
The lawful basis we rely on for processing your personal data is article 6(1)(b) of the UK GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract.
In relation to marketing, photographs of the event or surveys the lawful basis, we rely on to process your personal data is article 6(1)(f) of the UK GDPR, which allows us to process personal data when this is necessary for the purposes of the legitimate interests of the College.
What we need and why we need it
When you visit one of our campuses, we will collect your name, the organisation you represent (if applicable), your contact details, image/video and in some cases your vehicle registration.
What we do with it
The College uses CCTV on its premises and may collect your photograph for an ID card (where appropriate) for the purpose of identifying and protecting our students, staff and premises. This data may be shared with the Local Authorities, the Police or Safeguarding Agencies where the College is required or permitted to do so by law.
Purpose and lawful basis for processing
The lawful basis, we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a further education provider.
What we need and why we need it
We need information from you to respond to you and to locate the information you are looking for. This enables us to comply with our legal obligations under the legislation we are subject to:
What we do with it
When we receive a request from you, we will record the details of your request on our internal registers. This normally includes your contact details and any other information you have given us. We’ll also store a copy of the information that falls within the scope of your request.
If you are making a request about your personal data or are acting on behalf of someone making such a request, then we’ll ask for information to satisfy us of your identity. If it’s relevant, we’ll also ask for information to show you have authority to act on someone else’s behalf.
We’ll use the information supplied to us to process your information request and check on the level of service we provide.
Purpose and lawful basis for processing
Our purpose for processing your personal data is so we can fulfil your information request to us.
The lawful basis for this is article 6(1)(c) of the UK GDPR, which relates to processing necessary to comply with a legal obligation to which we are subject.
If any of the information you provide us in relation to an information request contains special category data, such as health, religious or ethnic origin information the lawful basis we rely on to process it is article 9(2)(g) of the UK GDPR, which also relates to our public task and the safeguarding of your fundamental rights. And Schedule 1 part 2(6) of the Data Protection Act 2018 which relates to statutory and government purposes.
What we need and why we need it
If you are one of our clients or suppliers, or someone (not a student) who helps us to provide our business services, we may collect and process (where applicable) the following data about you:
What do we do with your data
We may collect and store (electronically or manually) your personal data. This may include any correspondence, telephone calls or meetings we have with you as a way of record keeping.
We may use your personal details:
Purpose and lawful basis for processing
The lawful basis we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks and in some cases article 6(1)(b) of the UK GDPR which allows us to process personal data when this is necessary to perform a contract.
We will ask for details of any criminal convictions or offenses. For processing Criminal Convictions data, the College relies on Schedule 1 part 2 paragraphs 18 and 19 of the Data Protection Act 2018 which relating to safeguarding of children and of individuals at risk and safeguarding of economic well-being of certain individuals.
What we need and why we need it
If you book to attend one of our restaurants, we will record your name and contact details for the purpose of fulfilling your booking.
If you become a member of the gym or use any of the College exercise facilities for recreational use, we will ask you to provide your personal details alongside completing a health questionnaire.
If you use any of our hair or beauty facilities including acting as a model or receiving treatments, we will collect your personal information including any health related (special category) information that we may require to provide those services.
What we do with it
We will record your contact details and any services received.
We will use your health information to inform the services we provide and assess any additional requirements.
We may use your contact details to send you marketing information and other relevant information about our services. If you do not wish to receive such marketing materials, you will be given the opportunity to opt out.
Purpose and lawful basis for processing
The lawful basis we rely on for processing your personal data is article 6(1)(b) of the UK GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract.
Our processing of any special category data you choose to provide us, such as health information you give us, will be based on article 9(2)(b), where the processing of data fulfils our legal obligations around health and safety and equality law.
In the event of an emergency, we rely on the lawful basis of Article 9(2)(c) where processing is necessary to protect vital interests.
In relation to marketing, the lawful basis, we rely on to process your personal data is article 6(1)(f) of the UK GDPR, which allows us to process personal data when this is necessary for the purposes of the legitimate interests of the College.
What we need and why we need it
When you visit the College websites, we use a third-party service (Google Analytics) to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. For information about how Google Analytics uses your personal information, please see http://www.google.com/intl/en/policies/privacy/ and https://support.google.com/analytics/answer/6004245.
We also collect the request made by your browser to the server hosting the website which includes the IP address, the date and time of connection and the page you ask for. We use this information to ensure the security of our websites and we delete it after a maximum of 3 months. We may use and disclose it as necessary in the event of a security concern or incident.
Like many websites, we also obtain certain types of information when your web browser accesses our website via the use of Cookies.
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information.
For further information visit https://www.ccsw.ac.uk/cookies/
You can set your browser not to accept cookies; however, in a few cases some of our website features may not function as a result.
What we do with it
This information is used to track visitor use of the website and to compile statistical reports on website activity.
Purpose and lawful basis for processing
The lawful basis we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks and in some cases article 6(1)(b) of the UK GDPR which allows us to process personal data when this is necessary to perform a contract.
We will ask for details of any criminal convictions or offenses. For processing Criminal Convictions data, the College relies on Schedule 1 part 2 paragraphs 18 and 19 of the Data Protection Act 2018 which relating to safeguarding of children and of individuals at risk and safeguarding of economic well-being of certain individuals.
What we need and why we need it
We will need your personal information to investigate your complaint and we need to know the details of your complaint so we can investigate it.
If you are acting on behalf of someone making a complaint, we’ll ask for information to satisfy us of your identity and if relevant, ask for information to show you have authority to act on someone else’s behalf.
What we do with it
We will use your personal information to investigate your complaint.
Purpose and lawful basis for processing
The lawful basis we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a provider of further education.
If the information you provide us in relation to your complaint contains special category data, such as health, religious or ethnic origin information the lawful basis we rely on to process it is article 9(2)(g) of the UK GDPR, which also relates to our public task and the safeguarding of your fundamental rights. And Schedule 1 part 2(6) of the Data Protection Act 2018 which relates to statutory and government purposes.
Undertaking a Course at the College
What we need and why we need it
We will collect and process your name, address, date of birth, gender, nationality, parent/guardian contact names, phone number, email address, student support needs, medical information, education history, qualifications, references, ethnic origin, employment history, attendance data, and other relevant information.
We collect your photograph for the purpose of issuing your student ID card and we also use CCTV for security at our campuses.
We will ask for details of any criminal convictions or offenses to identify any students who may need additional support and, in some cases, review whether a student may pose a risk to the safety or security of other students, staff or our premises. In some cases, we may reject a student’s application due to a disclosure, but this is rare, and we have a panel that would meet to review each case before this decision is made. If a student declares a criminal record or a DBS reveals a criminal record which is likely to cause the student to be unable to complete some mandatory element of the course, a place cannot be offered. If you don’t provide information about a criminal conviction or offense and this is later disclosed to us it may result in removal from a specific course or exclusion from the College.
We will collect bank details if we need to administer any charges or refunds relating to courses or training programs. We may also process your bank details and information about Income Support, Universal Credit, Employment Support Allowance and Disability Living Allowance or Personal Independence payment where you apply for or receive financial support or a bursary. We will share your name with the College bank if there is a problem with the payment, and our auditors have access to our payment records.
We may ask to take photographs and/or video during your course, or on specific occasions in order to promote individual success stories and the wider College.
What we do with it
We will use your details for the fulfilment of the College’s contractual relationship with its Students (or in the case of work-based learning with their employer) and for our public task to deliver educations programmes, this includes to determine and apply admissions criteria, process applications for admission, and monitor overall student numbers.
We will use photographs and videos to promote the College and specific initiatives or events.
Criminal convictions and offenses data is kept securely and separate from general student records and is only available to identified staff from the Student Services Team.
Purpose and lawful basis for processing
When you apply and enrol at the College the lawful basis, we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a further education provider and article 6(1)(b) of the UK GDPR, which allows us to process personal data when this is necessary to perform a contract.
We will ask for information as required by the ESFA including race, ethnic origin, and sexual orientation. The College is legally required to provide this information and relies on the legal basis of article 9(2)(g) and Schedule 1 part 2, paragraph 6 of the Data Protection Act which relates to substantial public interest and statutory etc and government purposes. Data about you will be supplied to ESFA for the purposes set out in their Privacy Notice available at https://www.gov.uk/government/publications/esfa-privacynotice.
We may also rely on the legal basis Article 9(2)(b) for processing your special category data, where the processing of data fulfils our legal obligations around health and safety and equality law.
We will ask for details of any criminal convictions or offenses. For processing Criminal Convictions data, the College relies Schedule 1 part 2 paragraphs 18 and 19 of the Data Protection Act 2018, which relates to safeguarding of children and of individuals at risk and safeguarding of economic well-being of certain individuals.
We ask for your consent under Article 6(1)(a) of the UK GDPR when using your photograph or video. We may ask for your consent at the start of your course or at the time depending on the purpose of the photographs/videos.
Undertaking a Course/program through a University Partner
What we need and why we need it
We will collect and process your name, address, date of birth, gender, nationality, parent/guardian contact names, phone number, email address, student support needs, medical information, education history, qualifications, references, ethnic origin, employment history, attendance data, and other relevant information.
We will ask for details of any criminal convictions or offenses to identify any students who may need additional support and, in some cases, review whether a student may pose a risk to the safety or security of other students, teachers or our premises. In some cases, we may reject a student’s application due to a disclosure, but this is rare, and we have a panel that would meet to review each case before this decision is made. If a student declares a criminal record or a DBS reveals a criminal record which is likely to cause the student to be unable to complete some mandatory element of the course, a place cannot be offered. If you don’t provide information about a criminal conviction or offense and this is later disclosed to us it may result in removal from a specific course or exclusion from the College.
We use your personal information for administering applications and admission to, enrolment on, delivery of and participation on a Programme, including ensuring suitability for the Programme, administration of assessments and examinations, the issue of results and certificates, awards and (where applicable) the provision to an employer or other sponsor of information about attendance and performance. Provision of teaching, research, educational and other services, facilities and support and the protection of health, safety, and welfare whilst on Programme (which may involve disclosure of personal data to the Students’ Union, health service providers, staff and other third parties)
We will collect bank details if we need to administer any charges or refunds relating to courses or training programs. We may also process your bank details and information about Income Support, Universal Credit, Employment Support Allowance and Disability Living Allowance or Personal Independence payment where you apply for or receive financial support or a bursary. We will share your name with the College bank if there is a problem with the payment, and our auditors have access to our payment records.
We may ask to take photographs and/or video during your course, or on specific occasions in order to promote individual success stories and the wider College/University.
What we do with it
We will use your information for monitoring of attendance and performance and the provision of targeted learning support, administration of the financial aspects of a student’s Programme, sponsors or funders including collection of fees and any other monies due, equal opportunities monitoring and the provision of reasonable adjustments or other entitlements under equality law.
We will also use your information for the purpose of graduation, career follow-up and alumni activities, statistical and research including internal and statutory reporting purposes and to enable effective communication, including providing information relating to university services and products, funding and/or sponsorship opportunities.
We will use photographs and videos to promote the College and/or University and specific initiatives or events.
Further information on how a student’s personal information will be processed by the University will be available in the University’s Privacy Notice.
Purpose and lawful basis for processing
The lawful basis, we rely on to process your personal data is article 6(1)(b) of the UK GDPR which allows us to process personal data when this is necessary to perform a contract.
We may also rely on the legal basis Article 9(2)(b) for processing your special category data, where the processing of data fulfils our legal obligations around health and safety and equality law. (See Data about Additional Support Needs (Health and/or Reasonable Adjustments).
We will ask for details of any criminal convictions or offenses. For processing Criminal Convictions data, the College relies on Schedule 1 part 2 paragraphs 18 and 19 of the Data Protection Act 2018, which relates to safeguarding of children and of individuals at risk and safeguarding of economic well-being of certain individuals.
We ask for your consent under Article 6(1)(a) of the UK GDPR when using your photograph or video. We may ask for your consent at the start of your course or at the time depending on the purpose of the photographs/videos.
Data about Additional Support Needs (Health and/or Reasonable Adjustments)
What we need and why we need it
The College will ask for information about additional support needs, this can include learning difficulties and/or disabilities, health needs such as allergies, conditions such as asthma or diabetes and recording that a student is pregnant. We will use this information to inform support plans which will be shared with the appropriate staff.
We may receive information from children’s social services relating to additional support needs.
What we do with it
The Student Services Team will use the information gathered to identify support needs and any required reasonable adjustments. Where appropriate support plans will be negotiated with the students and shared with identified staff to inform teaching and support strategies. The Student Services Team will receive Education, Health and Care Plans and other educational and/or medical documentation from parents, schools, health professionals and local authorities and will identify College staff who these will need to be shared with.
To enable the Student Services Team to fully support Students they may actively contact parents and other relevant professionals to make a request for information relating to support needs. These will be shared with the College to help inform support plans. These plans will be shared with identified academic and support staff.
We will also collect details about learning difficulties or disabilities where you apply for financial support or a bursary.
We may also need to process health information for health and safety reasons including prior to taking students on a field trip/external visit.
Purpose and lawful basis for processing
We process special category data relating to additional support needs under the lawful basis of article 9(2)(g) of the UK GDPR, which also relates to our public task and Schedule 1 part 2(6) of the Data Protection Act 2018 which relates to statutory and government purposes.
Where collecting health information for the purposes of field trips/visits we rely on the legal basis Article 9(2)(b), where the processing of data fulfils our legal obligations around health and safety and equality law.
In the event of an emergency, we rely on the lawful basis of Article 9(2)(c) where processing is necessary to protect vital interests.
Work Experience
What we need and why we need it
We will process your name, date of birth, parent/carer’s details/emergency contact details, course details and any health, well-being, and educational needs (special category data) so that we can facilitate a work experience placement.
We will use your information to confirm your placement details with the employer (and in some cases your parent/guardian).
What we do with it
We will use the details to conduct risk assessments on placements and monitor attendance.
Your details will be processed by Changing Education (as our Data Processor) who support the delivery of our work experience programme and provide work experience IT software.
Purpose and lawful basis for processing
We rely on the lawful basis of article 6(1)(e) of the UK GDPR to process your personal data, which allows us to process personal data when this is necessary to perform our public tasks as a further education provider.
Our legal basis for processing your special category data is on the legal basis Article 9(2)(b), where the processing of data fulfils our legal obligations around health and safety and equality law.
Careers Advice
What we need and why we need it
The Careers Team collect your personal details (Name, address, contact details, date of birth, employment status and qualification levels) so that we can tailor the services and advice and guidance we offer to you.
What we do with it
We collect and use your information for the following purposes:
Purpose and lawful basis for processing
We rely on the lawful basis of article 6(1)(e) of the UK GDPR to process your personal data, which allows us to process personal data when this is necessary to perform our public tasks as a further education provider.
Where we undertake surveys or analysis of our careers service, we rely on article 6(1)(f) of the UK GDPR, which allows us to process personal data when this is necessary for the purposes of the legitimate interests of the College.
Recording Lessons
What we need and why we need it
Lessons may need to be recorded at the College or when delivered online. When any recording is taking place, all people present will be made aware.
What we do with it
As a learning organisation, it is normal practice in modern learning for lectures and sessions to be recorded for students who haven’t attended and for revision purposes. Equally this also supports students who have disabilities or learning difficulties as a supportive learning method.
If you do not wish to be recorded, please raise this with your lecturer. In the case where a student needs to record lessons as a reasonable adjustment to support their learning (but another student objects) this would need to be carefully considered and the situation will be reviewed by a member of the Executive Leadership Team (ELT) in consultation with the Data Protection Officer.
Purpose and lawful basis for processing
Where we make recordings for educational purposes, we rely on article 6(1)(f) of the UK GDPR, which allows us to process personal data when this is necessary for the purposes of the legitimate interests of the College and in some cases for the legitimate interests of students (for example those with additional learning needs).
Parents/Guardians personal information
What we need and why we need it
If your child is under the age of 18 years old and will be attending the College either as a student or as part of an event (such as Primary or Secondary College), we require them to provide a parent/guardian name, email, and phone number.
What we do with it
We collect this information to support the communication during the application process and to keep you informed about your child’s performance and attendance.
For students under 18 at the time of application, students with additional needs or those attending 16-19 programmes the College will contact named parents/guardians to discuss academic progress, attendance, welfare concerns and conduct for the duration of their course. This may include by phone, email, online account or through face-to-face meetings.
We will also use the contact details of our student’s parents/guardians to send postal marketing materials highlighting the range of courses and qualifications offered by the College and the career options that may be available to the student. If you do not wish to receive such marketing materials, please contact us to opt out via marketing@ccsw.ac.uk.
Purpose and lawful basis for processing
We rely on the lawful basis of article 6(1)(e) of the UK GDPR to process your personal data, which allows us to process personal data when this is necessary to perform our public tasks as a further education provider.
Where we contact you about our services by post, we rely on article 6(1)(f) of the UK GDPR, which allows us to process personal data when this is necessary for the purposes of the legitimate interests of the College.
What we need and why we need it
We ask you for your personal details including name and contact details. We will also ask you about your previous experience, education, referees and for answers to questions relevant to the role you have applied for. Our HR team will have access to all this information.
You will also be asked to provide equal opportunities information. This is not mandatory information – if you don’t provide it, it will not affect your application. This information will not be made available to any staff outside of our HR team, including hiring managers, in a way which can identify you. Any information you do provide, will be used only to produce, and monitor equal opportunities statistics.
Our hiring managers shortlist applications for interview. They will not be provided with your equal opportunities information if you have provided it.
Candidates are asked to provide proof of identity and qualifications at the interview. Photocopies of original documents are only retained if the candidate is successful.
If you are unsuccessful for the position you have applied for, your data will be held for a period of six months in case of any queries regarding the outcome or for feedback purposes.
If we make a conditional offer of employment, we will ask you for information so that we can carry out pre-employment checks. You must successfully complete pre-employment checks to progress to a final offer. We are required to confirm the identity of our staff, their right to work in the United Kingdom and assess suitability for the role.
You will therefore be required to provide:
The College will request you attend campus to have a photograph taken prior to your employment commencing. This photograph will be used for your ID Badge, our internal staff directory (Phonebook) and on your Office365 account.
Upon commencement of your employment, we will also ask you for the following:
Our contract of employment requires all staff to declare if they have any potential conflicts of interest, other employment, or engagement. If you complete a declaration, the information will be held on your personnel file.
What we do with it
The information we ask for is used to assess your suitability for employment. You don’t have to provide what we ask for, but it may affect your application if you don’t. We do not collect more information than we need to fulfil our stated purposes and will not keep it longer than necessary.
Purpose and lawful basis for processing
Our purpose for processing this information is to assess your suitability for a role you have applied for and to help us develop and improve our recruitment process.
The lawful basis we rely on for processing your personal data is article 6(1)(b) of the GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract.
If you provide us with any information about reasonable adjustments, you require under the Equality Act 2010 the lawful basis we rely on for processing this information is article 6(1)(c) to comply with our legal obligations under the Act.
The lawful basis we rely on to process any information you provide as part of your application which is special category data, such as health, religious or ethnicity information is article 9(2)(b) of the GDPR, which relates to our obligations in employment and the safeguarding of your fundamental rights. And Schedule 1 part 1(1) of the Data Protection Act 2018 which again relates to processing for employment purposes.
We process information about applicant criminal convictions and offences. The lawful basis we rely on to process this data are Article 6(1)(e) for the performance of our public task. In addition, we rely on the processing condition at Schedule 1 part 2 paragraphs 18 and 19 of the Data Protection Act 2018 which relating to safeguarding of children and of individuals at risk and safeguarding of economic well-being of certain individuals.
Employees
What we need and why we need it
The following are examples of personal data which may be collected, stored, and used for your employment:
We do not collect more information than we need to fulfil our stated purposes and will not keep it longer than necessary.
The information we ask for is used to assess your suitability for employment. You don’t have to provide what we ask for, but it may affect your application if you don’t.
What we do with it
We will use your information to fulfil your contract of employment with us, this includes:
Purpose and lawful basis for processing
The lawful basis we rely on for processing your personal data is article 6(1)(b) of the GDPR, which relates to processing necessary to perform your contract of employment.
The lawful basis we rely on for special category data, such as health, religious or ethnicity information is article 9(2)(b) of the GDPR, which relates to our obligations in employment and the safeguarding of your fundamental rights. And Schedule 1 part 1(1) of the Data Protection Act 2018 which again relates to processing for employment purposes.
We process information criminal convictions and offences. The lawful basis we rely on to process this data are Article 6(1)(e) for the performance of our public task. In addition, we rely on the processing condition at Schedule 1 part 2 paragraph 6(2)(a).
We may process special category data for the establishment, exercise, or defence of legal claims (for example employment tribunals) under Article 9(2)(f).
We share personal data with various government bodies (see Data Sharing with Government Agencies) under Article 6(2)(e), Article 9(2)(g), Article 89 (statistical and research purposes) and also Schedule 1, Part 2, paragraph 8 (Equality) of the Data Protection Act 2018.
The College publishes leadership staff profiles on its website under article 6(1)(f) of the UK GDPR, which allows us to process personal data when this is necessary for the purposes of the legitimate interests of the College.
In relation to staff surveys, we rely on to process your personal data is article 6(1)(f) of the UK GDPR, which allows us to process personal data when this is necessary for the purposes of the legitimate interests of the College.
Volunteers and Governors
What we need and why we need it
We will collect and record you for your personal details including name and contact details. We will also ask you about your previous experience, education, referees and for information in support of your application.
We will also keep on file proof of your identity e.g., original documents such as passport or driving licence and proof of qualifications.
You may be asked to complete a criminal records declaration to declare any convictions.
We may also ask about any disability, health issue or factor which may affect your ability to work with us.
What we do with it
We will store the personal detail alongside our employee records.
We will share the required personal details of our Governors with the Office for Students.
We will publish the photograph and profile of Governors on the College website.
The information we ask for is used to assess your suitability for your role as a volunteer or governor. You don’t have to provide what we ask for, but it may affect your application if you don’t.
We do not collect more information than we need to fulfil our stated purposes and will not keep it longer than necessary.
Purpose and lawful basis for processing
The lawful basis we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks and in some cases article 6(1)(b) of the UK GDPR which allows us to process personal data when this is necessary to perform a contract.
We will ask for details of any criminal convictions or offenses. For processing Criminal Convictions data, the College relies on Schedule 1 part 2 paragraphs 18 and 19 of the Data Protection Act 2018 which relating to safeguarding of children and of individuals at risk and safeguarding of economic well-being of certain individuals.
We may process special category data for the establishment, exercise, or defence of legal claims (for example employment tribunals) under Article 9(2)(f).
The College publishes Governor profiles on its website under article 6(1)(f) of the UK GDPR, which allows us to process personal data when this is necessary for the purposes of the legitimate interests of the College.
What we need and why we need it
We collect the personal information of you, your child/children and other parents/carers and emergency contacts. This will include name, address, contact details and any medical issues including medication and allergies. We process this information for fulfilment of our contract with you for delivering childcare services and may process this data for the purpose of safeguarding.
We will ask for your consent to take photographs of your child/children and for your consent to share these on our website, on social media and in any communications or promotional materials.
The Data Controller for your information is Cheshire College South and West.
What we do with it
We routinely share child information with schools or settings that the child attends after leaving us, the local authority, Ofsted, and Cheshire East Safeguarding Board (CHECS) in the event of any safeguarding concerns. We do not share information about our children with anyone without consent unless the law and our policies allow us to do so.
Purpose and lawful basis for processing
The lawful basis we rely on for processing your personal data is article 6(1)(b) of the UK GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract.
Where we take photographs of your child the legal basis is your consent under article 6(1)(a) of the UK GDPR.
We may also rely on the conditions at 6(1)(d) processing is necessary to protect the vital interests of the data subject or of another natural person and/or 6(1)(e) the processing is necessary for the performance of a task carried out in the public interest.
We may also share information for safeguarding purposes, under article 9(2)(g) of the UK GDPR, which also relates to our public task and the safeguarding of your fundamental rights. And Schedule 1 part 2 paragraphs 18 and 19 of the Data Protection Act 2018 which relating to safeguarding of children and of individuals at risk and safeguarding of economic well-being of certain individuals.
The College will share data for with:
The following section sets on who the College shares information with and why. In some circumstances we are legally obliged to share information. In any scenario, we’ll satisfy ourselves that we have a lawful basis on which to share the information and document our decision making and satisfy ourselves we have a legal basis on which to share the information.
Parents/ Guardians of Students
When a student attends the College under the age of 18, we will contact named parents/guardians to discuss academic progress, attendance, welfare concerns and conduct for the duration of their course. This may include by phone, email, online account or through face-to-face meetings. Students can request that we do not contact their parents/guardian; however, there are some cases where we may still need to do so or may be required to disclose certain information by law. For example, for students who use college transport services we may contact you or your parent/guardian in the event of some disruption to services or due to an emergency, bad weather or accident.
Local Authorities and other Education Providers
The College will share information with the local authority to support the provision of education and for obtaining and providing support for those with a special education need or disability. We will also share information about the status of a student’s application with schools as part of their responsibilities to ensure the provision of suitable education.
The College has a Data Sharing Agreement with Entrust who have a contract with Staffordshire Council to provide statutory careers support for 16–17-year-olds or up to 25-year-olds with an EHCP. As part of this Service Delivery Agreement Entrust are collecting offers, starts and leavers data from Educational Providers and reporting on data collected back to Department of Education. They also provide the students further support as necessary.
The College will share student details with third parties commissioned by local authorities to provide careers and other relevant support.
The College will share students’ details with education providers (secondary schools) where students are attending the College as an out of school setting.
We may share personal details including name, attendance details, courses completed and results with other education providers on receipt of a reference request.
Local Authorities, the Police or Safeguarding Agencies
We may share information when we feel there’s a good reason that’s more important than protecting your privacy. This doesn’t often happen, but we may share your information:
The Police may contract us and ask us to provide personal data including CCTV footage where it would support the prevention or detection of crime. In general, we would provide this information where the Police have provided us a written request outlining the basis for the information sharing.
The College will share details of students in full time education with local authorities to support the assessment or collection of Council tax under schedule 2-part 1 paragraph 2 (1) (c) of the Data Protection Act 2018.
Government Agencies
The College is legally required to share your information with the Education and Skills Funding Agency (ESFA) (an executive agency of the Department for Education (DfE)). Data about you will be supplied to ESFA for the purposes set out in their Privacy Notice available at https://www.gov.uk/government/publications/esfa-privacynotice.
Every year the College will send some of the information it holds about you (students and staff) to the Higher Education Statistics Agency Limited (HESA). HESA is the official source of data about UK universities, higher education colleges, alternative HE providers, and recognised higher education courses taught at further education institutions in Wales. HESA is a registered charity and operates on a not-for-profit basis. Data about you will be supplied to HESA for the purposes set out in their Privacy Notice available at https://www.hesa.ac.uk/about/website/privacy.
The College will share learner data with the Student Loans Company to deliver requirements in respect of the administration of student finance.
The College will share learner data to deliver requirements in respect of the administration of the Education Maintenance Allowance (EMA) and Welsh Government Learning Grant (WGLG).
The College will share learner data with Higher Horizons who are funded by Office for Students. Higher Horizons will use this data to evaluate the effectiveness of Higher Horizons service provision and also to track a learner’s education journey. Higher Horizon’s privacy notice is available at https://higherhorizons.co.uk/privacy-policy/
The College may share personal data as part of Channel which is part of the Prevent strategy. The process is a multi-agency approach to identify and support individuals at risk of being drawn into terrorism. More details on how data is shared is available at https://www.gov.uk/government/publications/channel-data-privacy-notice/channel-data-privacy-information-notice.
An Employer or Work Experience Placement
Where you are undertaking an Apprenticeship course whilst working for an employer we will share your name, address, progress, attendance, learning plans, progress in learning, assessment plans and qualification results with your employer. Your employer will also share relevant information with us. In this the College and the employer are each acting as Data Controllers, and you should review the employers Privacy Notice and Data Protection policies (where appropriate).
Where you are undertaking work experience your name, date of birth, parent’s details, emergency contact details, course details and any health, well-being and educational needs may be shared with the employer.
We may also share personal details including name, attendance details, courses completed and results with employers on receipt of a reference request.
Supported Internship Job Coaches
The College may collect and processes personal details so that we can deliver the Supported Internship programme to you and facilitate your time as a student at the College.
We will share this personal data with other staff at the College to administer this programme and meet your needs. We will also share your details including personal contact details and health and support needs (as detailed in your Education Healthcare Plan) with your Job Coach and the organisation who they are employed by Grow & Achieve (for Ellesmere Port students) and the Rossendale Trust (for Crewe students).
We will share your name, address, progress, attendance, learning plans, progress in learning, assessment plans and qualification results with the employer who you are completing your internship with. Your employer will also share relevant information with us. The College and the employer are each acting as Data Controllers, and you should review the employers Privacy Notice and Data Protection policies (where appropriate). We will also contact named parents during your course to discuss academic progress, attendance, welfare concerns and conduct.
Awarding Bodies
The College is an approved centre for a range of awarding bodies. Depending on the student’s course personal data will be shared with these awarding bodies. Awarding bodies may be required to provide a candidate’s personal data to educational agencies such as DfE, WG, DE, The Skills Funding Agency, regulators, HESA, UCAS, Local Authorities, EFA and Learning Records Service (LRS). Additionally, candidates’ personal data may be provided to a central record of qualifications approved by the awarding bodies for statistical and policy development purposes. Awarding bodies maintain a comprehensive archive record of candidates’ examination results. The purpose is to provide an audit trail of the results certificated and to maintain an accurate record of an individual’s achievements. It is the responsibility of centres to ensure that candidates are made aware of this. For full details of each awarding bodies privacy notice can be found on their websites.
These organisations include:
Gateway Qualifications: Privacy Notice – Gateway Qualifications
Apprenticeships, Exam bodies and Scholarship organisation
The College will share data with apprenticeship organisations including End Point Assessment providers, sponsors, and providers of scholarships for the purpose of fulfilment of your learning contract. These organisations include:
Full details of our exam and awarding bodies are available on request.
For full details of each awarding bodies privacy notice can be found on their websites.
Data Processors
We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
Full details of all our data processors are available from our Data Protection Officer on request.
Sub-contractors who Deliver some of our Services
The College uses sub-contractors for the delivery of some of its courses and programs. As such these third parties have access to Student personal details including name, address, date of birth, gender, nationality, parent/guardian contact names, phone number, email address, student support needs, medical information, education history, qualifications, references, ethnic origin, employment history, attendance data, and other relevant information.
Appropriate contracts will be implemented with these sub-contractors to ensure they process personal data in line with the law.
Debt Collection Agencies
We may share your information in the event of the non-payment of an invoice (for example for a course or hire of our facilities). If the debt remains outstanding after the specified timeframe for payment, no payment plan is in place or an agreed payment plan is not being adhered to, we may initiate formal proceedings to recover the full amount of the unpaid invoice. As a result, the College will share personal data with the debt recovery specialists it instructs in order for them to take recovery action.
Transport Providers
We will share a passenger list with the bus companies so that the drivers can check Student ID and bus passes on embarkation. A photo of students may sometimes be shared with the bus company/driver so that they are aware of students with any additional needs or if a student is not permitted to use transport services e.g., due to issues with behaviour.
Employee Benefits Platform
The College uses VIVUP to provide benefits to its employees. More information about how your personal information will be used for this purpose is available at https://demo.vivup.co.uk/privacy_policy.
Area | Details | Legal Basis | Section* | Ref2 |
Enquiry about our Services | Enquiries about education | Public Task | Art. 6(1)(e) | 49 |
Enquiry about our Services | Enquiries about our Restaurants, Gym or Hair and Beauty Service Enquiries about other services | Contract Legitimate interests: to promote the use of the Colleges facilities by the wider public | Art. 6(1)(b) Art. 6(1)(f) | 23 49 |
Enquiry about our Services | Enquiries about education or other services where the enquiry also includes special category data | Substantial public interest and statutory etc and government purposes | Art. 9(2)(g)
Sch. 1 pt. 2(6) DPA | 49 |
Attendance at a College Event | Events which form part of our tasks as an education provider e.g., Primary or Secondary College | Public Task | Art. 6(1)(e) | 42 50 |
Attendance at a College Event | Events to promote the College’s services including Open Evenings | Contract | Art. 6(1)(b) | 50 |
Attendance at a College Event | Marketing, photographs, or surveys relating to the event | Legitimate interests: to promote the services offered by the College | Art. 6(1)(f) | 50 |
Visitor to one of our Campuses (including CCTV) | CCTV footage and identity information for the purpose of identifying and protecting our learners, staff, and premises | Public Task | Art. 6(1)(e) | 12 |
|
|
|
|
|
|
|
|
|
|
Information Request | Processing to our legal obligations relating to information requests | Legal Obligation Public Task Safeguarding of your fundamental rights | Art. 6(1)(c) Art. 9(2)(g) Sch.1 pt. 2(6) DPA | 51 |
Representing an Organisation | Processing data of clients or suppliers, or someone (not a learner) who helps us to provide our business services | Public Task Contract Safeguarding of your fundamental rights Safeguarding of children and individuals at risk | Art. 6(1)(e) Art. 6(1)(b) Sch.1 pt. 2(6) DPA Sch.1 pt. 2(18-19) DPA | 15
62 |
Customer of our Restaurants, Gym or Hair and Beauty Services | Fulfilment of a contract for good and services Special category data (where required) for the purpose of providing those services | Contract
Obligations under social protection law
Vital Interests | Art. 6(1)(b)
Art. 9(2)(b)
Art. 9(2)(c) | 23
31 |
Customer of our Restaurants, Gym or Hair and Beauty Services | Marketing | Legitimate interests: promotion of the College’s services which are open to the wider public | Art. 6(1)(f) | 23
31 |
Visiting our Website | Optional cookies | Consent | Art. 6(1)(a) | 52 |
Visiting our Website | Provision of our website | Legitimate interests: to maintain the integrity of our IT systems and the continuity of our business | Art. 6(1)(f) | 52 |
Making a Complaint | Complaint handling (and where that complaint including special category data) | Public Task
Safeguarding of your fundamental rights
Statutory and government purposes | Art. 6(1)(e)
Art. 9(2)(g)
Sch. 1 pt. 2(6) DPA | 53 |
Undertaking a Course at the College | To fulfil the College’s contractual relationship with its Learners (or an employer) and for our public task to deliver educations programmes | Public Task
Contract
Obligations under social protection law Substantial public interest | Art. 6(1)(e)
Art. 6(1)(b)
Art. 9(2)(b)
Art. 9(2)(g) | 1
46
47 |
Undertaking a Course at the College | Details of criminal convictions and offenses of learners | Substantial public interest
Safeguarding of children and individuals at risk | Art. 9(2)(g)
Sch.1 pt.2(18-19) DPA | 2 |
Undertaking a Course at the College And
Undertaking a Course/program through a University Partner | Photographs and/or video | Consent | Art. 6(1)(a) | 59 |
Undertaking a Course/program through a University Partner | To fulfil the College’s contractual relationship with its Learners (or the University) and for our public task to deliver educations programmes | Public Task
Contract
Obligations under social protection law | Art. 6(1)(e)
Art. 6(1)(b)
Art. 9(2)(b) | 20 |
Undertaking a Course/program through a University Partner | Details of criminal convictions and offenses of learners | Substantial public interest
Safeguarding of children and individuals at risk | Art. 9(2)(g)
Sch.1 pt.2(18-19) DPA | 20 |
Data about Additional Support Needs (Health and/or Reasonable Adjustments | To identify and facilitate support plans and required reasonable adjustments | Public Task
Substantial public interest
Statutory and government purposes | Art. 6(1)(e)
Art. 9(2)(g)
Sch.1 pt. 2(6) DPA | 1
5
9 |
Data about Additional Support Needs (Health and/or Reasonable Adjustments | Collecting health information for the purposes of field trips/visits Taking action in the event of an emergency | Public Task
Obligations under social protection law
Vital Interests | Art. 6(1)(e)
Art. 9(2)(b)
Art. 6(1)(d) | 58 |
Data about Additional Support Needs (Health and/or Reasonable Adjustments | Data sharing with government agencies | Public Task
Obligations under social protection law | Art. 6(1)(e)
Art. 9(2)(b) | 66 |
Work Experience | To conduct risk assessments and monitor attendance | Public Task
Obligations under social protection law | Art. 6(1)(e)
Art. 9(2)(b) | 8
44 |
Careers Advice | To provide careers advice services | Public Task | Art. 6(1)(e) | 35 |
Careers Advice | Surveys or analysis of our careers service | Legitimate interests: to continually improve the services offered by the College | Art. 6(1)(f) | 35 |
Recording of Lessons | Lectures and sessions to be recorded for learners who haven’t attended, for revision purposes or for learning support | Legitimate interests: to facilitate the session or support learners with additional needs | Art. 6(1)(f) | 60 |
Parents/Guardians | Keeping parents/guardians informed about a child’s performance and attendance | Public Task | Art. 6(1)(e) | 6 |
Parents/Guardians | Marketing relevant services by post | Legitimate interests: to promote the services offered by the College | Art. 6(1)(f) | 13 |
Job Applicants | Assessing suitability for employment and provision of a contract of employment | Contract | Art. 6(1)(b) | 14 |
Job Applicants | Information about reasonable adjustments | Legal Obligation: Equality Act 2010 | Art. 6(1)(c) | 14 |
Job Applicants | Monitoring information e.g., health, religious or ethnicity information | Safeguarding of your fundamental rights Employment purposes | Art. 9(2)(b)
Sch. 1 | 14 |
Job Applicants | Details of criminal convictions and offenses of prospective employees | Public Task Safeguarding of children and individuals at risk | Art. 6(1)(e)
Sch. 1 pt. 2(18-19) DPA | 15 |
Employees | Administering a contract of employment | Contract | Art. 6(1)(b) | 62 |
Employees | Provision of Occupational Health services to employees | Contract | Art. 6(1)(b) | 32 |
Employees | Monitoring information e.g., health, religious or ethnicity information | Safeguarding of your fundamental rights Employment purposes | Art. 9(2)(b)
Sch. 1 | 62 |
Employees | Disclosure of staff personal and special category data to government bodies | Public Task Statistical and research purposes | Art. 6(1)(e) Article 89 | 28 |
Employees | Details of criminal convictions and offenses of prospective employees | Public Task Safeguarding of children and individuals at risk | Art. 6(1)(e)
Sch. 1 pt. 2(18-19) DPA | 15 |
Employees | Exercise or defence of legal claims | Legal claims | Art. 9(2)(f) | 62 |
Employees | Publication of leadership staff profiles | Legitimate interest: to publish those making decision within a public authority and to allow networking | Art. 6(1)(f) | 63 |
Employees | Staff survey’s | Legitimate interest: to seek feedback on the Colleges role as an employer | Art. 6(1)(f) | 56 |
Employees | Administration of employee benefits | Contract | Art. 6(1)(b) | 67 |
Volunteers and Governors | Engagement of volunteers | Public Task Contract | Art. 6(1)(e) Art. 6(1)(b) | 16 |
Volunteers and Governors | Details of criminal convictions and offenses of prospective employees | Public Task Safeguarding of children and individuals at risk | Art. 6(1)(e)
Sch. 1 pt. 2(18-19) DPA | 15 |
Volunteers and Governors | Exercise or defence of legal claims | Legal claims | Art. 9(2)(f) | 16 |
Governors | Publication of profiles | Legitimate interest: to publish those making decision within a public authority and to allow networking | Art. 6(1)(f) | 64 |
Starting Point | Provision of childcare services | Contract | Art. 6(1)(b) | 17 |
Starting Point | Photographs | Consent | Art. 6(1)(a) | 17 |
Starting Point | Taking action in an emergency | Vital Interests | Art. 6(1)(d) | 17 |
Starting Point | Safeguarding of children | Public Task Safeguarding of children and individuals at risk | Art. 6(1)(e)
Sch. 1 pt. 2(18-19) DPA | 17 |
* – Relevant article (Art.) of the UK General Data Protection Regulations (UK GDPR) or schedule (sch.), part (pt.) or paragraph of the Data Protection Act 2018 (DPA).
2 – Our internal reference number that links to our Records of Processing activities (ROPA).
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
We keep our privacy notice under regular review to make sure it is up to date and accurate. Where it is appropriate to do so or legally required of us, we will notify you of any changes to our processing of your personal data.
Listed below are the changes we have made to the privacy notice since July 2021:
Addition of information relating to ECITB (26th August 2021)
The privacy notice was replaced by a new version which breaks down in more detail the reasons we collect and process personal data and the lawful basis for doing so. It supersedes all previous versions (9th September 2022)
Full review and update (September 2022)
Addition of Gateway qualifications (22nd November 2022)
When exploring the courses we have available, you may see a fee attached but you’re more than likely to be eligible for a fully-funded enrolment!
Take a look and get in touch with admissions@ccsw.ac.uk if you’d like anymore information.
