- + General
New College Durham is the Data Controller for the Personal Data we collect and hold. Our Data Protection Officer (DPO) can be contacted at firstname.lastname@example.org. Please contact the DPO if you have an enquiry about how the College manages your personal data or if you want to make a request in relation to your personal data rights, including to access information we may hold about you.
We have a Data Protection Policy that you are welcome to review. It contains more information about personal data rights.
- + Enquiries
If you create an online account with us we will hold your information and use it to contact you, or an appropriate parent/carer, in relation to your enquiries or applications, interviews and offers, or about courses you have favourited. You or your parent/carer may be invited to an event on this basis. We will hold and use your parent/carer's details to ensure we deliver to our public task of ensuring young people are able to access Education when not in Employment.
You can manage these contact preferences and favourites on the 'My Account' screen or by contacting email@example.com
If you have asked us to provide you with course information or support or registered to attend an event using our 'Ask a Question', LiveChat, School Survey or EventBrite services you will get the option to create an online account with us.
If you've used these services but haven't created an online account with us we will store your contact history for up to 6 years, only for use in case you decide to follow up the enquiry.
If you don't choose to join a course of study within 6 years of creating an account or making an enquiry, or if you don't want us to keep your information anymore, we will remove your details from our system.
Once you have opted to receive marketing information from us we will provide you with information about how to opt out each time we contact you. We share your email address with our processors Campaign Monitor and Text Anywhere to send these mailings but only on a temporary basis per mailing. None of your data is stored with them once the campaign is closed.
If you have asked us to provide you with information using our 'Contact Us' service we will use your contact details to respond to your enquiry and then discard them.
If you go on to apply for a course or enrol with the College we will collect and use other Personal Data, more information on how this data is managed and used can be found below.
- + Application
When you apply for a course we will create an account to store information about your application and use it to contact you, or an appropriate parent/carer, in relation to your application, interviews, events and offers. You can manage your application, including these contact preferences and your favourites on the 'My Account' screen of the website or by contacting firstname.lastname@example.org
If you don't choose to join a course of study within 6 years of creating the account, or if you don't want us to keep your information anymore, we will remove your application details from our system.
The information provided on the Application Form will be used to determine the offer we make to you. Along with the other personal details collected at interview, if you are subsequently enrolled, we will keep it for 6 years after you have left the College to ensure we have adequate records to deal with enquiries and complaints.
For under 18 applicants to FE courses, information may be shared with your previous school as part of our public task to assist local authorities in promoting participation of vulnerable young people not in education, employment or training (NEET).
More information about how we manage the data you provide at enrolment can be found below.
- + Enrolment
If you want to update or remove any of the personal data you have provided at enrolment you can make a request to do so by contacting email@example.com
Most of the information collected at enrolment is required by us to deliver your course and to prove you are studying with us. To do this and to fulfil our contract with you we will share relevant information about you with our Funding Providers, Validating and Awarding Bodies, End Point Assessment organisations, sub-contracted service providers and with any of our partner institutions that are contracted to deliver your course(s). If we are asked by a local authority or school to confirm that you are studying with us we will only do so if we are required by law or government authority; if we know you have given consent; or in order to enable you to receive a benefit (eg. Council Tax Benefit).
Information on how Durham County Council may process your data can be found here: http://www.durham.gov.uk/dataprivacy
We will retain data that is required by the College and our Funding Providers for 6 years after your course ends in order to administrate your enrolment contract with us. If you are studying on a course funded by ESF we will need to retain some of your personal data relating to the administration of your enrolment and progress on the course that is required by our Funding Providers until 2030.
We will retain some data indefinitely as a permanent record to show who you are, when you attended the College, what your assessment marks were and what award you achieved. This will help us to supply you with a reference or transcript if you request one as part of our public task and ultimately for archival purposes in the public interest.
For information about provision of transcripts please see https://newcollegedurham.ac.uk/higher-education/confirmation-of-awards/
We will need you to provide a photograph for your College ID Card. This is so we can ensure the safety and security of everyone at the College and we'll keep this photo with your student record for 6 years after your course ends.
We will ask if you want to provide an image of your fingerprint so we can give you access to Library and Cashless Catering Facilities. The code based on this image will only be held on our systems for the academic years during which you are studying with us.
In addition to this we will ask you to declare if you have a relevant criminal conviction. If you do we will use this information to decide whether to make you an offer to study with us. However we will discuss this with you to ensure we understand your situation fully.
We will ask for information about your current personal situation in order to allow us to provide suitable support and in order to fulfil requirements of our regulators like ESFA and OfS.
If you tick to receive marketing and market research information from us on the enrolment form we (or our funding partners) may contact you about courses or for feedback on your experience at College.
If we collect other data from you in the course of your study we will inform you why we have asked for it, what we will use it for, who we may pass it to and how long we intend to keep it for. Please see our Post-enrolment Privacy Notice below.
- + Post-Enrolment
We will only collect and use personal information that you have provided to us during your study to help both you and your Tutor manage your progress on the course(s) in line with our contract with you and as part of our Public Task; and also to ensure your personal details are up to date.
We will not pass data to any third parties unless it is required by law or governmental authority.
Your permanent record (name, address, date of birth, courses attended, awards and dates of study) will be held by the College so we can supply you with a reference or transcript if requested and ultimately the data will be held for archival purposes in the public interest.
Your progress records will be held for 6 years after you finish the course to ensure we have adequate records to deal with enquiries and complaints.
If we collect other data from you in the course of your study you can expect to be informed why we have asked for it, what we will use it for, who we may pass it to and how long we intend to keep it for.
Where we store progress information in a system which is hosted offsite we try to ensure your personal data is anonymised and we always make sure the company holding the data has the most appropriate security in place.
Any personal data held on Schoology will be removed when your enrolment at the College ends. Your coursework may be held by the College for up to 5 years after your course ends depending on the requirements of the relevant Exam Board.
For some courses, we will submit your work to Turnitin so we can do an anti-plagiarism check.
If applicable to your programme we will share enrolment data with system providers in order to facilitate your access to external systems and portals that you need to access to complete your course. This will only be shared during your time of study with the College.
Your MS365 account, which includes your College email, is held on the Microsoft cloud and is provided for your use during your course of study at New College Durham.
The College uses MyConcern to store personal data for some students in relation to safeguarding as part of its legal obligation under the statutory guidance 'Keeping Children Safe in Education'. This data is retained for 6 years after the student leaves the College.
- + Services
If you choose to become a customer or client of New College Durham you can expect to be informed about how your data will be processed when you take advantage of the service offered.
Customers can also contact our Data Protection Officer with enquiries by emailing firstname.lastname@example.org
We will collect information relating to special educational needs, disabilities and additional support so we can work with you to ensure that you receive the appropriate help and advice. Further information on how this information is used is provided on the forms we use to collect the data. If you have any questions about our use of this data please contact the Additional Learning Support team at ALS@newdur.ac.uk
The Library uses personal information collected during the enrolment process, in order to provide its lending services. If you want to amend any of this data please contact email@example.com
Our Podiatry Service collects and manages patient records securely. We only use this information to manage your treatment with us and will only share it with student and staff practitioners within the clinic unless we have your additional consent to provide it to a third party. Your information will be held for 7 years from your last appointment with us and then will be securely disposed of. If you want to make any amendment to your personal details held by us please contact your clinic administrator.
If you are a visitor to the College the information we collect from you is used to verify your identity and ensure your visit is authorised. The information you provide will be stored for 1 year after your last visit to us. Any badges are confidentially destroyed when no longer required.
If you are a supplier of services to the College or a student who has been paid a bursary or refund you can expect us to hold your data in our finance system for up to 7 years from the last date we paid you, this is so we can ensure we have adequate records to deal with audits, enquiries and complaints.
- + Employees
Applying for a position at New College Durham
When applying for a position at New College Durham, you must be aware that New College Durham are not responsible or liable for how other sites collect and use your information. Please check the individual third-party websites' privacy policies before submitting your personal information to those websites.
The personal data that the application form collects about you will be used for the purposes of processing your application. If your application is successful it will be used to form the basis of your staff record.
Where you are unsuccessful in the selection process, manual records will be kept for 6 months and then destroyed.
Working for New College Durham
While you are employed by New College Durham, we will keep your information in a Personal File to enable us to administrate your contract of employment. We will keep you informed of the reasons for any extra information we collect from you and the purposes this will be used for as well as the length of time for which it will be held.
More information may be found in our policies on Data Protection and the Management and Monitoring of Electronic Communications.
You have the right to make a request for information about yourself by emailing firstname.lastname@example.org. You may find the College's guidance on Making a Data Protection Request useful in such matters which can be located on the intranet.
You can also edit your personal details via the employee self-service whenever you wish. Alternatively, you can email email@example.com to do this.
The College collects CV and CPD data for all staff and occasionally is required to share this information with external parties with whom the College has a contract. This will usually be information about staff involved in the delivery under the contract in order to prove the fitness of the appointed person to perform the services which the College is contracted to provide. The legal basis for the sharing is that it is necessary in order to facilitate the contract of employment we have with our staff.
During your employment you will have access to an Office 365 account which will be hosted externally by Microsoft.
What happens to your data when you leave employment?
When you leave employment at New College Durham, most of your employment records will be disposed of 6 years after you have left. However we will retain limited evidence of your employment, such as your employment dates and any payroll / pension information. This is to ensure we have sufficient information in case you have any enquires about your pension, or if you require a factual reference. We consider this processing to be in your legitimate interest. This limited information will be kept for 75 years. You have the right to request that this information is removed from your record. In order to request this, email firstname.lastname@example.org.
We will not pass your data to any third parties without your consent unless it is required by law.
Your network account, including email, home folder and Office 365 account will be disposed of 4 months after your employment ends.
Human Resources administrate an annual cleanse on the Supply Pool every March. During this cleanse, if you are registered on the Supply Pool you will receive an email to determine whether you wish to remain registered. Where you confirm to remain registered, New College Durham will keep your personal data (as explained in the ‘Working for New College Durham' section).
If you wish to be removed from the Supply Pool, most of your employment records will be disposed of 6 years after you have left. However we will retain limited evidence of your employment, such as your employment dates and specific payroll information. This is to ensure we have sufficient information in case you have any enquires about your pension. We consider this processing to be in your legitimate interest. This limited information will be kept for 75 years.
You have the right to request for information about yourself by emailing email@example.com. You also have the right to request that this information is removed from your record. In order to request this, email firstname.lastname@example.org.
- + CCTV Privacy Notice
The use of Closed Circuit Television (CCTV) has been recognised as a powerful tool in the fight against crime, both in its prevention and detection. The College uses a CCTV system around the campus covering many of the entrances, main public access areas and car parks. The CCTV recordings are used for public safety interests, crime prevention and assisting to provide a safe and secure environment for the benefit of those who work, study and visit the College.
Under what legal basis does the processing of my personal data take place?
The General Data Protection Regulations (GDPR) and Data Protection Act 2018 provide a number of different legal bases under which processing of personal data may take place. In this case the following bases apply:
Processing is necessary for the performance of a task carried out in the public interest
The tasks carried out in the public interest are undertaken to:
- Maintain public safety
- Assist in the prevention and investigation of crime and disorder
- Facilitate the apprehension and prosecution of offenders in relation to crime and disorder
- Maintain a healthy, safe and secure environment throughout our sites
Furthermore, the following laws apply to the use of CCTV:
- Section 163 of the Criminal Justice and Public Order Act 1994
- Crime and Disorder Act 1998
- Protection of Freedoms Act 2012; and in certain circumstances, the Regulation of Investigatory Powers Act 2000
The system is NOT used for monitoring staff day to day activities. The system may be used in specific circumstances to locate any individuals believed to be at risk.
Where do we get your personal data from?
Personal data is obtained from individuals who are filmed by CCTV cameras which are located across College sites both inside and outside buildings.
What do we use your information for?
CCTV recordings are processed in the interests of public safety and for the prevention and detection of crime. Recordings are also provide enforcement agencies with evidence of criminal activity, for formal actions including prosecutions in court and identification of offenders in investigations. The College Security Team may record other information which may be used to supplement that captured on CCTV as further evidence if required.
Who else do we pass this information on to?
- Police Forces
- Other law enforcement agencies or emergency services
- Requestors who make requests under Data Protection or Freedom of Information legislation
CCTV may also be shared with College partners where appropriate and where there is lawful basis to do so.
How long do we keep this information?
Images are retained on the server for approximately 30 days. Footage which has been saved off the system will be retained for a period of three months. Footage which has been saved off the system for evidentiary purpose, at the request of the Police or for pending civil claims will be retained for six years.
- + Covid 19 Testing
The data the College collects in order to process your COVID 19 Lateral Flow Device test will be held in two places, on the medical consent form you signed so we can demonstrate consent was given and on our booking register. The consent form and booking data will be held until the testing programme is finalised and then destroyed, the register will then be anonymised to remove any other personal data. We will use this anonymised data afterwards for our own statistical purposes.
The medical consent form fields are not all mandatory.
We share your test results with the Department of Health and Social Care so that they can send you a text or an email to confirm.
- + NHS Test and Trace
To support public health and as a legal obligation pursuant to the Public Health Control of Diseases Act 1984, as modified by the Health and Social Care Act 2008 and the Health Protection (Local Authority Powers) Regs 2010, New College Durham intends to collect and disclose certain personal data of staff, students and visitors to the College on request to the NHS Test and Trace Service.
NHS Test and Trace is a key part of the country's ongoing COVID-19 response and is run by DHSC to help to identify people who may have been exposed to the virus.
The Privacy Information available from the DHSC on the NHS Test and Trace programme can be viewed here.
If you are a member of staff you will have been passed the information in this notice directly by HR.
If you are a student you will have been presented with this information at enrolment, either as part of the declaration on your enrolment form or in a separate statement. The information that will be used to enable us to identify if you are at risk will include staff rotas agreed with your managers.
If you are a visitor you will have been presented with this information when signing in at a reception desk.
The information that will be shared in the event you were present at the College during a time when there was a potential risk of you contracting COVID-19:
- Your name
- Your contact phone number
We would usually hold this information for all staff, students and visitors so this notice is to inform you we may pass it to NHS Test and Trace if requested.
You have rights in relation to Data Protection as outlined in the College Data Protection Policy and if you have any enquiries about this please contact email@example.com
You have a right to:
- get copies of your information: you have the right to ask for a copy of any information about you that is used
- get your information corrected: you have the right to ask for any information held about you that you think is inaccurate, to be corrected
- limit how your information is used: you have the right to ask for any of the information held about you to be restricted, for example, if you think inaccurate information is being used
- object to your information being used: you can ask for any information held about you to not be used. However, this is not an absolute right, and we may need to continue using your information, and we will tell you if this is the case
- get information deleted: this is not an absolute right, and we may need to continue to use your information, and we will tell you if this is the case
- + Our Website Information
New College Durham makes all reasonable efforts to ensure that the information on the website is correct and current. Please note however that the content is naturally subject to change from time to time. If you have an enquiry about the information on the site please email us at firstname.lastname@example.org.
All materials on this web site are the copyright of New College Durham or are reproduced with permission from other copyright owners. All rights are reserved. The materials on this web site may be retrieved and downloaded solely for personal use. No materials may otherwise be copied, modified, published, broadcast or otherwise distributed without the prior written permission of the College unless explicitly stated.
- + Cookies
A cookie is a small file which a website may place on your device so it remembers who you are. Though most web browsers automatically accept them, you can block or remove cookies yourself by altering your browser settings at any time.
These cookies help our website to remember your preferred settings and credentials or allow you to share information with other websites with which you may have an account (eg. Facebook). You can block or remove these yourself within your internet browser or change your account settings within the other websites.
Some functionality on our website (eg. LiveChat) may not work if cookies are blocked.
We use Google Analytics cookies to collect information about how visitors use the site to identify where we could make improvements. We don't use personal data to do this.
Use of your data for interest based advertising
You can opt out of all data collection for the purposes of interest based advertising at http://www.youronlinechoices.com/uk/