1.What information do we collect about you?
We collect information about you when you order a copy of one of our prospectuses or register to attend an event such as an open day or taster session, or register your interest in one of our courses or apply for one of our courses. We collect information such as your name, date of birth, e-mail and postal address, event or course of interest in order to fulfil your request and, if consent is given, to send you further relevant information about the college, courses you’re interested in, accommodation or events relevant to your course of interest.
2.How will your information be used?
The information you provide will be used to supply the information requested and, if you consent, send you further printed materials or electronic communications about the School of Business London, the programmes we offer and our services, such as student support, course information, Promotions and scholarships. We may also contact you to conduct market research and quality assurance checks, for example we may ask you about your satisfaction with the information we provide and your experience of the admission process. We will not sell your data to third parties. We will also use the information you provide to evaluate the impact of our activities and track your progression through education if you have given us your consent.
3.What is our lawful basis for processing your personal data?
Prior to application, we will process your data on the basis that you have given us consent to do so. Once you have applied to study at the college it has a legitimate interest to tell you about the college, its courses and other information you will need to make an informed decision about whether to attend the college. We also have a legal requirement to report back to the government based on a legitimate interest to widen participation for underrepresented groups in higher education.
4.Special Category Data
In some of our activities, for example those related to widening participation to college from under- represented groups we need to collect data that is classified as special category (sensitive) personal data under data protection legislation, including details on ethnicity and race. This is processed based on public task under Article 6 of the General Data Protection Regulation (GDPR) as this data is collected in the public interest of improving access to higher education and condition J of Article 9(2) of the GDPR which states: processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes to safeguard the fundamental rights and the interests of the data subject. This data may also be shared with government bodies, or organisations working on behalf of the government for research and analysis purposes.
5.Who your personal information is shared with?
Your information will be processed by the college, awarding bodies working with the college for awarding the programs, and organisations working on its behalf (for example a company which posts letters on the college’s behalf) who have GDPR compliant processes in place. We will also share your information with any of our related partners, subsidiaries, awarding bodies, subcontractors and employees who provide services to you. We will share your information with the company who provide the Online Library services to create an account and get the access for the library. We may also share your information with other organisations if we sell or buy any business or assets, if we or a substantial part of our company assets are acquired by another party, if we have to share your information to comply with legal or regulatory requirements or if we have to enforce Our Terms and Conditions or any other agreements.
6.Transfers to third countries and safeguards in place
We may transfer your information to process, or store it, outside the European Economic Area (“EEA”) in countries which do not have data protection laws as robust as those that are in place within the EEA. Please do not send us your information if you do not want it to be transferred or stored outside the EEA. By providing your information to us, you agree and consent to us transferring and storing it outside the EEA. Whenever data is transferred from one location to another it will always be in a secure, encrypted or password protected format.
7.How long will your information be held?
General information you provide to us will be held for two years. If, however, you become an applicant you will be subject to other notices that we will provide to you and your data will be held in line with the college’s retention schedule. To evaluate the long-term impact of our widening participation activities, we will keep your data until five years after you have completed your program unless you tell us otherwise.
If you have given your consent and you wish to withdraw it, you can opt out at any point by contacting us directly at firstname.lastname@example.org.
8.What are your Rights?
Under Data Protection Legislation you have the following rights:
- To request access to, and copies of, the personal data that we hold about you;
- To request that we cease processing your personal data;
- To request that we do not send you any marketing communications;
- To request us to correct the personal data we hold about you if it is incorrect;
- To request that we erase your personal data;
- To request that we restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal);
- To receive from us the personal data you have provided to us, in a reasonable format specified by you, to another data controller;
- To object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights and freedoms.
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.
9.Security of your information
Your data will be held securely and all staff are required to comply with the colleges’ processes and procedures regarding data security. Whenever data is transferred from one location to another it will always be in a secure format.
Any requests or objections should be made in writing to the college’s Data Protection Officer, contact details are in Section 2 of this Privacy Notice.
Cookies are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that organisation to recognise the user when you next visit.
The website (s) of School of Business London may employ cookies to help you personalise your online experience. It cannot be used to run programs or deliver viruses to your computer. By using cookies, we aim to save you time and let your browser know that you have come back to a specific page, and therefore the process of recording your personal information, delivery addresses, and so on are simplified.
You can accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to experience the interactive features of our websites you visit fully.
11. Third party websites
- Hyperlinks to, and details of, third party websites are also included in our websites.
- School of Business London does not have any control over, and is not responsible for, the privacy policies and practices of any third parties.
12. Identity and contact details of the Data Controller
The School of Business London is registered with the Information Commissioner’s Office as a Data Controller and is committed to protecting the rights of individuals in line with Data Protection legislation. A copy of this registration can be found here.
13.How to make a complaint
If you have queries, concerns or wish to raise a complaint regarding the way in which your personal data has been processed you should contact the Data Protection Officer in the first instance, using the contact details under Section 2 above.
Data Protection Officer
School of Business London, 35 New Broad Street, London, EC2M 1NH
United Kingdom, Email: email@example.com
If you still remain dissatisfied, then you have the right to apply directly to the Information Commissioner’s Office (ICO) for a decision. The ICO can be contacted at:
Information Commissioner’s Office, Wycliffe House,
Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
This Privacy Notice may be updated from time to time to ensure continued compliance with Data Protection legislation and to reflect best practice.