1.1 If you apply for a course or enrol
a) We collect the following personal data under GDPR Article 6.1c (Legal Obligation), and 6.1e
(Public Task) in order to meet our legal obligations with the Education & Skills Funding Agency (ESFA) and Office for Students (OfS). They are also necessary in order for us to carry out our public task to provide education and training. We are required by ESFA to retain this data until at least 2030:
- Details about yourself including your name, date of birth, unique learner number and gender
- Contact details – including address, telephone number and email address
- Details of your previous qualifications, employment and educational history
- Information about your nationality and residency, and previous address if applicable
- Information about medical or health conditions, including whether or not you have a learning disability or difficulty, ethnicity
- Household information (this is collected only for the ESFA and is not used by the College)
- Free school meals eligibility
- Attendance marks such as sessions attended, number of absences and absence reasons
- Information to monitor and report on student discipline and progress and support your learning
- Your destination after College.
b) We collect parent/carer/emergency contacts under GDPR Article 6.1d (Vital Interests) and Article 6.1e (Public Task) in order to support your education and learning as fully as possible. For those over age 18 at the start of the academic year, the information is optional.
c) We collect your bank details if you need to pay for your course or you are in receipt of a bursary under GDPR Article 6.1b (Contracts). If you pay for a course online, your card information is not held by us. It is collected by our third party payment processors who specialise in the secure online capture and processing of credit/debit card transactions.
d) We collect the name of your last school under GDPR Article 6.1f (Legitimate Interests) so that we can monitor progression from our feeder schools.
e) We collect your consent to keep in touch with you about our products and services, future events and College news, and to take photography and record audio and video content to showcase the College to prospective students and the community (GDPR Article 6.1a Consent).
f) We take your photograph to display on your College ID card under GDPR Article 6.1b (Contract) ensure the safety of all our students and provide you access to our facilities.
Updated 26th September 2018
g) We collect data about criminal convictions in order to protect vital interests of others under GDPR Article 6.1d (Vital Interest) and also in order to carry out our duty to support those with a conviction GDPR Article 6.1e (Public Task).
h) We collect your sexual orientation and religion under GDPR Article 9.2b so that we can ensure that you are not discriminated against in any way.
Please refer to our policy on Processing Special Category data, GDPR Article 9 and Criminal Convictions data, GDPR Article 10.
1.2 If you make an enquiry, book to attend an event or enter a competition
a) We collect personal contact details under GDPR Article 6.1b (Contracts) including email address and mobile telephone number and postal address so that we can respond to you.
b) For enquiries and events, we collect your date of birth under GDPR Article 6.1b (Contracts) so that we can uniquely identify you if you wish to follow up your enquiry or attendance.
c) In some cases, we collect the name of your last school and your subject interests under GDPR Article 6.1f (Legitimate Interests) so that we can monitor progression from our feeder schools.
d) We collect your consent to keep in touch with you about our products and services, future events and College news (GDPR Article 6.1a Consent).
1.3 If you visit our websites
a) We place cookies and text files on your computer to collect data on your behaviour on our websites under GDPR Article 6.1f (Legitimate Interests) so that we can tailor our website content to you and connect with you online (see our Cookies & Remarketing Policy at www.bedford.ac.uk/downloads).
1.4 If you apply for a job
a) We collect personal information, such as name, address, contact details, employment history, qualifications achieved under GDPR Article 6.1b (Contracts) so that we can process your job application.
b) We also collect special categories of data such as gender, age, ethnic group, religious beliefs, disability and sexual orientation, and information about your health under GDPR Article 6.1c (Legal Obligations) in relation to equalities and non-discrimination.
1.5 If you attend one of our campuses
a) We may capture your image on our CCTV systems under GDPR Article 6.1f (Legitimate Interests) to ensure the safety of our students, staff and visitors, and the protection of our buildings and assets.
b) If you are a visitor, we will also collect your name, company (if applicable) and car registration number under GDPR Article 6.1f (Legitimate interests) for the same reason.
c) We monitor your internet browsing under GDPR Article 6.1f (Legitimate Interests) to ensure the safety of our students.