Data Controller: Escape Campus Limited Data Protection Officer: Alex Re firstname.lastname@example.org 37/39 Oxford Street, London, W1D 2DU
In order to operate in accordance with the services agreed with each of our clients, the business collects and processes personal data relating to Students. The business is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.
The business collects a range of information about you such as :
The business collects this information in a variety of ways. For example, data might be contained in application forms, CVs, obtained from your passport or other identity documents, or collected during meetings or other forms of assessment. This does include online tests and by use of our online platform.
Data will be stored in a range of different places, including on your student record, teachers notes, the business’s contact management system and on other IT systems (including email).
The business needs to process data to ensure proper engagement through the service agreement and for the legitimate interest of both you and the business. It needs to process your data to enter into, maintain and prepare a contract with you and to operate in accordance with that contract in an effective manner.
In some cases, the business needs to process data to ensure that it is complying with its legal obligations and the legitimate interest of both the business and its students.
The business processes the information provided by you with regards to your health and abilities to ensure that reasonable adjustments are made to facilitate the tuition process or generally during the operation of the business’s service agreement for students who have a disability or require further support in areas of their tuition.
Your information will be shared internally for the purposes of your tuition and the legitimate interest as outlined by the service agreement and contracts made between you and the business. This includes mentors, tutors, department managers and IT staff if access to the data is necessary for the proper performance of their roles and for the operation of our agreement.
The business will not share your data with third parties, unless it is in the legitimate interest of both the business and you as its client. The business will ask consent prior to sharing your information externally to third parties for any purpose other than for the operation of our mutual agreements or when it is required by law.
The business takes the security of your data very seriously. It has internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our authorised employees when it is required for the proper performance of their duties.
Retention of data The business will retain your information following the expected completion of your tuition should you return to further your education. Information will be retained for no longer than 12 months following the end of your course unless you have specifically asked and given written consent that we retain your data for a longer period to complement your personal tuition plan.
Your rights As a data subject, you have a number of rights. You can: • access and obtain a copy of your data on request; • require the business to change incorrect or incomplete data; • require the business to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; • object to the processing of your data where the business is relying on its legitimate interests as the legal ground for processing; and • ask the business to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override the business's legitimate grounds for processing data.
In the even that you would like to exercise any of these rights, please contact Alex Re by email at email@example.com. You can also make a subject access request by emailing the business by the above email address.
If you believe that the organisation has not complied with your data protection rights, you can complain to the Information Commissioner following making contact with the business directly in the first instance.
You are under no statutory or contractual obligation to provide data to the business. However, if you do not provide the information requested by the business, the business may not be able to engage in a contract or agreement of any kind through limitations relating to its successful operation.
Contact In the event that you are unclear of any information outlined in this notice, you should contact the business by emailing firstname.lastname@example.org outlining your concerns so that we can rectify or clarify any information you have received.