Privacy Notice – Student Funding
This Privacy Notice is designed to explain how and why information about individuals in the following categories is used and managed:
All of the personal information will be treated in accordance with the terms of the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). This means that confidentiality will be respected and that appropriate security measures will be taken to prevent unauthorised disclosure. This notice is intended to meet the transparency requirement of the legislation and to ensure that all individuals in the categories above know how their data will be processed.
Using your personal information
Who will process my information?
Under Data Protection law the University is the “data controller”. This means that the University is responsible for how it uses and processes your information and complying with requests relating to your personal data.
Why do we collect and use your personal information?
The Student Funding Team provides funding advice and information to students, prospective students, parents, graduates and professional colleagues, both within and out with the University.
The Student Funding Team are responsible for the administration of various funds, namely the Discretionary Fund, GCU Childcare Fund and the Higher Education Childcare Fund. In providing this service the Team manages personal information.
The purpose for collecting information is to assess and process Applicant and Student Applications for funding support, for example Discretionary Fund, Childcare Fund, Care & Kinship Experience Funding, US Federal Loan and other funding providers.
Keeping information updated
The University strives to ensure that all personal information is accurate and up to date.
Applicants and Student information will be updated during the funding period/course of studies by the Applicant or Student. The Applicant and/or Student is responsible for notify the Student Funding Team of any incorrect information and updates, as well as, any change in circumstance which may affect their support funding.
The University will notify where appropriate, information updates/change of circumstances to Third Parties.
How long is the information kept?
The University will retain your information only for as long as necessary for the purposes described.
Further information is available in the University Records Retention Schedules:
Where do we obtain information from?
Information is collected directly from Applicants and Students through their Funding Application including information processed using GCU Systems.
Information may also be collected by loan providers to support the Funding Application process.
What information is being collected and used?
Data will consist of the information provided by the “data subject” or a company acting on behalf of the University. Information may be in hard copy or electronic format. This includes:
Special category personal information is also processed where it is necessary and lawful for us to do so. In most cases you have the option whether to provide this information or not. This refers to data revealing:
Data relating to criminal convictions and offences is also subject to additional protection.
Who is the information shared with?
Your information will be shared internally only with those individuals who require it in the course of their duties.
The University may be required to share your personal information with external organisations. This may happen due to a statutory or legal obligation.
Information will be shared within GCU and external organisations for the purpose of supporting and processing Funding Applications, for example Student Loan Company, funders, Benefit Agencies. For Scholarship recipients where relevant we may share information to donors to assist with the selection process and/or reporting on spend For US students who obtain financial support from the US Government or Sallie Mae, GCU will share information with them.
How is the information kept securely?
Information is kept securely on University equipment in line with University Information Security and Data Protection Policies. Access is restricted to only those staff or authorised agents who require it and on a “need to know” basis.
Where personal information is shared with or processed by Third Parties, the University will ensure that information will be managed and protected through appropriate security procedures and policies.
Will the information be used for automated decision-making?
Is the information transferred outside the European Union?
Yes. In some circumstances personal information may be transferred, for example for the purpose of processing US Federal Loans.
You have the right to:
If you think we are acting unfairly or unlawfully you can:
Under certain conditions you also have the right to ask us to:
Where consent is the legal basis for processing personal information, the Data Subject (Applicant or Student) has the right to withdraw consent at any time by contacting the Student Funding Team. This means that where consent is withdrawn, the Funding Support Application cannot be processed.
Please contact us if you wish to exercise/enquire about any of these rights.
Data Protection Officer (DPO)
Department of Governance
Glasgow Caledonian University
Legal basis for using your information
The legal condition which enables the University to process personal information is found in Article 6 of the General Data Protection Regulation (GDPR). In particular we rely on: