Privacy Notice for University of Glasgow Reach programme
Your Personal Data
The University of Glasgow will be what is known as the ‘Data Controller’ of your personal data processed in relation to services and provision provided by the University of Glasgow Reach programme. This privacy notice will explain how The University of Glasgow will process your personal data.
Why we need it
We are collecting your basic personal data such as name, email address, and Scottish Candidate Number (SCN)] and, where relevant, limited special categories data (such as disability, ethnicity and gender) in order to support your participation in and progression through the University of Glasgow Reach programme. This data will also help us to support you throughout your Higher Education learner journey (pre-entry, application, admission, on-degree, post-degree), at the University of Glasgow or another university of your choice.
For more detailed information on each of the categories of data that we collect, why we do so and what we do with it, please read our additional information sheet available at the following link – What we do with your data
Legal basis for processing your data
We must have a legal basis for processing all personal data. In this instance, the legal basis is
- Public task/Official authority – this covers activities undertaken as part of the core functions of the University.
In addition, we must have a legal basis for collecting and processing all special categories/sensitive personal information data (disability, ethnicity, gender). In this instance, the legal basis is:
- Explicit Consent – by completing each of the programme registration forms you are giving us consent to use your data in the ways outlined in this form and the accompanying statement
What we do with it and who we share it with
All the personal data you submit will be stored in a secure database and will only be processed by staff at the University of Glasgow in the United Kingdom. We shall share your data with staff at the University of Glasgow and other partner universities to ensure that you benefit from any available widening participation contextualised admissions agreements and support. We shall also share limited data with the Scottish Government Educational Analytical Services. Your data will never be shared in a manner which would disadvantage your chances of entry to university.
For more detailed information on what we do with your data and who we share it with, please read the additional information available at the following link – What we do with your data
How long do we keep it for
Your data will be retained by the University for a maximum of 10 years. After this time, your data will be securely deleted.
What are your rights?
You can request access to the information we process about you at any time. If at any point you believe that the information we process relating to you is incorrect, you can request to see this information and may in some instances request to have it restricted, corrected or, erased. You may also have the right to object to the processing of data and the right to data portability.
Where we have relied upon your consent to process your data (special categories/sensitive personal information data (disability, ethnicity, gender), you have the right to withdraw your consent at any time.
If you wish to exercise any of these rights, please contact firstname.lastname@example.org.
*Please note that the ability to exercise these rights will depend on the legal basis on which the processing is being carried out.
If you wish to raise a complaint on how we have handled your personal data, you can contact the University Data Protection Officer who will investigate the matter.
Our Data Protection Officer can be contacted at email@example.com
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO) https://ico.org.uk/