1.1 We are University Centre Leeds, part of the Luminate Education Group. Our head office and address for correspondence is at University Centre, Park Ln, Leeds LS3 1AA.

1.2 We are committed to ensuring that all personal information we hold is treated properly and in accordance with applicable data protection legislation. We are registered as a data controller with the Information Commissioner’s Office and our registration number is Z5127931. In accordance with applicable data protection legislation, we are required to explain to you how we will treat any personal data which we collect about you.

1.3 This Statement applies to anybody who submits information to us (whether it is submitted via our website, by e-mail, over the telephone, in person or by any other means). However, please note that in certain circumstances we may process your information for additional purposes not mentioned in this Statement (e.g. if you enrol as a student or apply for a job with us), in which case we will provide you with additional details of how we will process your personal data in that context at the appropriate time.

1.4 You have the right to lodge a complaint with the Information Commissioner’s Office if you have any concerns with regard to the way in which we process your personal information. We would however appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

1.5 You warrant that any information you supply to us is accurate and up to date (whether or not the information is about you), that you will inform us if any information that we hold about you requires updating, and that if you submit a third party’s details to us (including but not limited to via our website) you have that third party’s permission or another legal justification for doing so.

2.1 It is possible to visit and browse some sections of our website without being required to tell us who you are or reveal any information about you.

2.2 We may collect information from you when you interact with our website or when you correspond with us by telephone, email or otherwise. This may include your name, contact details and information connected with any related enquiry. We may use this information where necessary for our legitimate interests (so long as our interests are not overridden by the impact on you), for example in responding to any related enquiry.

2.3 Where you use our website, we may also collect information about where you are on the internet (e.g. the URL you came from, IP address and domain names like .co.uk and .com), your browser type, the country where your computer is located, the parts of our website that were viewed during your visit and any search terms that you entered on our website. We may collect this information even if you do not submit any information to us using our website, and will use it for our legitimate interests in administering and improving our website, for internal operations (including troubleshooting, analysis of how our website is used, testing, research and statistical purposes) and as part of our efforts to keep our website safe and secure.

We may disclose information relating to you:

3.1 with third parties who are directly involved in dealing with any request, enquiry, complaint or other correspondence submitted by you which the information is relevant to;

3.2 with third parties who are providing us with professional advice which the information is relevant to where necessary for our legitimate interests and permitted by law;

3.3 in connection with criminal investigations, legal proceedings or prospective legal proceedings which the information is relevant to where necessary for the related legitimate interests of us or a third party and permitted by law;

3.4 in order to establish, exercise or defend our legal rights where necessary for our legitimate interests and permitted by law; and

3.5 where we have stated or informed you otherwise.

4.1 You have a legal right to see a copy of the personal information that we keep about you and to require us to correct any inaccuracies, subject to certain exemptions. In some circumstances you may also have the right to:

(a) request that we erase any personal information held about you;

(b) restrict our processing of your personal information (for example to ask to suspend the processing of personal information to establish its accuracy or the reasons for processing it);

(c) data portability (i.e. to request the transfer of personal information to a third party); and

(d) object to our processing of your personal information where we are relying on a legitimate interest (or those of a third party) or the processing is carried out on the basis that it is necessary for the performance of a task in the public interest.

4.2 Requests in respect of the above should be made in writing to the Data Protection Officer, Leeds City College, Park Lane Campus, Leeds, LS3 1AA or via email to gdpr@leedscitycollege.ac.uk. Please contact the same address if you have any reason to believe that information we hold about you is inaccurate. We will respond to your request as soon as possible and, in any event, within one month from the date of receiving the request. Please note that we may, where legally permitted, reject any such request or limit the scope of our response (e.g. if, in the circumstances, the right does not apply to you).

4.3 In accordance with applicable data protection legislation, we follow security procedures in the storage and disclosure of your information. We may therefore request proof of your identity and rights before complying with any request of a nature described in section 4.1 above.

4.4 You will not generally have to pay a fee to exercise any of your rights described in section 4.1 above. However, we may charge a reasonable fee if you make a request to see a copy of your personal information which is clearly unfounded or excessive. Alternatively we may refuse to comply with your request in such circumstances.

5.1 We have put in place appropriate security measures to prevent personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to such personal information to those employees, agents, contractors and other third parties who have a valid need to know that information. However, the internet is global and no data transmitted via the internet can be guaranteed by us to be completely secure during transmission. We cannot guarantee the security of any information that you disclose online and we will not be responsible for any breach of security unless due to our negligence or wilful default. It is possible that the information that you provide to us will be temporarily transferred via a route outside the European Economic Area as it passes between us.

5.2 In certain circumstances we may use the services of a supplier outside the European Economic Area (EEA) for purposes referred to in this Statement (for example, we may use the services of SurveyMonkey and MailChimp from time to time to send certain types of electronic communications). This may involve your personal information being processed by the relevant supplier on our behalf outside of the EEA. If we do this, we will require the relevant supplier to put in place appropriate technical and organisational data protection security measures (for example, as part of our contract with the relevant supplier or by verifying that they operate under the EU-U.S. Privacy Shield framework (please see www.privacyshield.gov for further details).

5.3 We have put in place procedures to deal with any suspected data security breach and will notify you and/or any applicable regulator of a suspected breach where we are legally required to do so.

5.4 Information submitted for a purpose described in this Statement will be retained for a reasonable period having regard to the relevant purpose for the information being used, following which it will be securely destroyed.

5.5 Whilst taking into consideration our legal obligations, we will on an ongoing basis: review the length of time that we retain personal data; consider the purpose or purposes for which we hold the personal data in deciding whether (and for how long) to retain it; securely delete personal data that is no longer needed for such purpose or purposes; and update, archive or securely delete information if it goes out of date.

6.1 This Statement does not form part of any contract.

6.2 We may amend this Statement at any time. If we make any changes to the way in which we use information submitted to any of our websites we will post a related update on our website’s home page.

7.1 Our website may contain links to other websites which are outside our control and are not covered by this Statement. If you access other websites using the links provided the operators of those websites may collect personal data from you which will be used in accordance with their respective privacy policies which you should read. We are not liable for the practices of such third party website operators in respect of your personal information.

7.2 You acknowledge that any information that you post or submit using any of our social media facilities (such as any of our Facebook, Twitter, Instagram or YouTube pages) will be viewable by anybody that visits those facilities and that such information is also subject to the relevant provider’s privacy policy. You are advised to consult each such privacy policy to see how they will use your data.

(a) personal information relating to a student’s parent/carer will be used as necessary to contact them in relation to matters such as the student’s non-attendance, emergencies and disciplinary matters involving the student; and

(b) personal information relating to a student’s or staff member’s nominated emergency contacts will be used as necessary to contact them in relation to any emergency involving that student/staff member.

8.1 The information described above will be collected using the appropriate College form related to the relevant processing activity.

If you have any questions about this Statement or our use of personal information, please contact our Data Protection Officer by email at gdpr@leedscitycollege.ac.uk or by writing to the Data Protection Officer, Leeds City College part of Luminate Education Group, Park Lane, Campus, Leeds, LS3 1AA.

Who we are? Our website address is: http://luminateeducation.co.uk. What personal data we collect and why we collect it Comments When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it.

The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment. Media If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website. Contact forms Cookies If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed. If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day. Embedded content from other websites Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. Analytics Who we share your data with How long we retain your data If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information. What rights you have over your data If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. Where we send your data Visitor comments may be checked through an automated spam detection service.