Privacy Notice
This Privacy Notice is designed to explain how and why information about individuals in the following categories is used and managed:
All personal information will be treated in accordance with the terms of the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). This means that confidentiality will be respected and that appropriate security measures will be taken to prevent unauthorised disclosure. This notice is intended to meet the transparency requirement of the legislation and to ensure that all individuals in the categories above know how their data will be processed.
Using your personal information
Who will process my information?
Under Data Protection law the University is the “data controller”. This means that the University is responsible for how it uses and processes your information and complies with requests relating to your personal data.
Why do we collect and use your personal information?
The Accommodation Support Team provides private accommodation advice and information to students, prospective students, parents, graduates and professional colleagues, both within and outwith the University.
The Accommodation Support Team is responsible for supporting students with private accommodation queries, sending private accommodation newsletters, conducting webinars and drop in sessions, participating in open day events, and for running ‘Find a Flatmate’ service and events. In providing this service the Team collects and manages personal information. The purpose of collecting information is to provide information and support to students seeking any of the services aforementioned.
Keeping information updated
The University strives to ensure that all personal information is accurate and up to date.
Applicants and Student information will be updated during the academic year of studies by the Applicant or Student. The Applicant and/or Student is responsible for notifying the Accommodation Support Team of any incorrect information and updates, as well as, any change in circumstance which may affect their support funding.
How long is the information kept?
The University will retain your information only for as long as necessary for the purposes described.
Further information is available in the University Records Retention Schedules.
Where do we obtain information from?
Information is collected directly from Applicants and Students through emails, drop ins, webinar registrations, MS Forms including information processed using GCU Systems.
Information may also be collected through referrals from other teams in the University as well as Third Party accommodation providers.
What information is being collected and used?
Data will consist of the information provided by the “data subject” or a company acting on behalf of the University. Data Subjects are Applicants and Students who have requested advice and support through the Accommodation Support mailbox, drop ins. Information may be in hard copy or electronic format. This includes:
- Personal information including name, gender, student ID, course/year, and contact information.
- Personal circumstances which may include special category personal information.
Special category personal information is also processed where it is necessary and lawful for us to do so. In most cases, you have the option of whether to provide this information or not. This refers to data revealing:
- Racial or ethnic origin
- Political opinion
- Religious or philosophical beliefs
- Trade Union membership
- Physical or mental health
- Sex life or sexual orientation
Data relating to criminal convictions and offences is also subject to additional protection.
Who is the information shared with?
Your information will be shared internally only with those individuals who require it in the course of their duties.
The University may be required to share your personal information with external organisations. This may happen due to a statutory or legal obligation.
Information is shared among students who sign up for the “Finding a Flatmate” service. Students sign a consent form permitting GCU to share this information among students using this service.
Information will be shared within GCU and external organisations for the purpose of supporting data subjects with their private accommodation search, for example with purpose built student accommodation providers or with temporary accommodation providers.
How is the information kept securely?
Information is kept securely on University equipment in line with University Information Security and Data Protection Policies. Access is restricted to only those staff or authorised agents who require it and on a “need to know” basis.
Where personal information is shared with or processed by Third Parties, the University will ensure that information will be managed and protected through appropriate security procedures and policies.
Will the information be used for automated decision-making?
No.
Is the information transferred outside the European Union?
No.
Your rights
You have the right to:
- Find out what personal data we process about you and to request a copy of the data
- Ask us to correct inaccurate or incomplete data
- Withdraw consent to process your personal data, if you were asked for and provided consent
If you think we are acting unfairly or unlawfully you can:
- Object to the way we are using your data
- Complain to the UK Information Commissioner’s Office
Under certain conditions, you also have the right to ask us to:
- Restrict the use of your data
- Erase your information or tell us to stop using it to make decisions about you
- Provide you with a portable electronic copy of the data you’ve given us
Where consent is the legal basis for processing personal information, the Data Subject (Applicant or Student) has the right to withdraw consent at any time by contacting the Student Funding Team. This means that where consent is withdrawn, the Funding Support Application cannot be processed.
Please contact us if you wish to exercise/enquire about any of these rights.
Contact Details
Data Protection Officer (DPO)
Department of Governance
Britannia Building
Glasgow Caledonian University
Cowcaddens Road
Glasgow G4 0BA
Email: dataprotection@gcu.ac.uk
Legal basis for using your information
The legal condition which enables the University to process personal information is found in Article 6 of the General Data Protection Regulation (GDPR). In particular, we rely on:
- Article 6(1)(a) consent
- Article 6(1)(b) performance of a contract
- Article 6(1)(c) compliance with a legal obligation