Reports, Policies & Legal
<p dir="ltr">As a student of Arts University Plymouth, your privacy is important to us. The <strong><a>privacy notice for students</a></strong> explains how the university collects, uses and shares your personal data and your rights in relation to the personal data we hold. This privacy notice concerns our processing of personal data of past, present and prospective students of Arts University Plymouth.<br /></p>
<p dir="ltr">Arts University Plymouth is the data controller of your personal data and is subject to the Data Protection Act 2018 and UK General Data Protection Regulation replacing (EU) 2016/679 (“GDPR”). <br /></p>
<p dir="ltr">The university is registered with the Information Commissioner's Office (ICO) with the registration number Z677722X.<br /></p>
<p dir="ltr">For further information or if you wish to exercise any of your rights or if you have a complaint about the way you believe your data is being processed, in the first instance, please see <a href="https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/" target="_blank" rel="noreferrer noopener">Your Information Rights</a> (on the Information Commissioner’s Office (ICO) website) or email the university's Data Protection Officer at <a href="mailto:jwright@aup.ac.uk" target="_blank" rel="noreferrer noopener">jwright@aup.ac.uk</a> <br /></p>
<p dir="ltr">If you have a complaint and you remain dissatisfied with how your complaint has been dealt with you can take your complaint to the Information Commissioner’s Office (ICO) for a review. They can be contacted at <a href="mailto:casework@ico.org.uk" target="_blank" rel="noreferrer noopener">casework@ico.org.uk</a><strong>.</strong></p>
How do we collect your data?
<p>We collect data to operate effectively and provide you the best experience at Arts University Plymouth. We may collect your personal data in a number of ways, for example:</p><ul><li>from the information you provide when you interact with us before joining - for example, when you express an interest in studying at Arts University Plymouth (e.g signing up to one of our Open Days)</li><li>when you apply to study via the Universities and Colleges Admissions Service (UCAS) and when you complete other admissions processes</li><li>when you communicate with us by telephone, email or via our website</li><li>in various other ways as you interact with us during your time as a student</li><li>from third parties, for example from your previous or current school, sixth form college, other college or employers who may provide a reference about you.</li></ul>
What data do we hold?
<p>We collect a range of data from you at various stages of your journey with Arts University Plymouth, which under the GDPR are defined as personal data and sensitive personal data.</p>
<p>Personal data is data relating to a living individual who can be identified from that information or from that data and other information in the university's possession (for example: name, address, telephone number, student number). It can also include expressions of opinions about an individual.</p>
<p>Sensitive data relates to racial or ethnic origin, religious beliefs, trade union membership, health, criminal convictions. Personal data concerning disability is sensitive data.</p>
How long do we retain data?
<p>We may retain your personal data for a period of six years after your association with us has come to an end. However, information such as your name and date of birth, course/programme studied and final grade will be retained indefinitely by us in order to maintain your academic record for archiving purposes.</p>
<p>The purposes for which we may use personal data (including sensitive personal data) we collect during your time with us include (but is not limited to):</p><ul><li>Progress on your course/programme, including:<ol><li>Enquiry</li><li>Application</li><li>Enrolment</li><li>Registration</li><li>Assessment</li><li>Attendance</li><li>Tutorials</li><li>Graduation</li></ol></li><li>Providing IT, equipment resource and library services</li><li>Providing student support services, including:<ul><li> Student wellbeing</li><li>Additional learning support</li><li>Careers and employability</li></ul></li><li>Safeguarding</li><li>Monitoring equality and diversity</li><li>Administering finance (e.g. fees, bursaries)</li><li>Other administrative purposes, including:<ol><li>maintaining student records</li><li>carrying out statistical analysis</li><li>carrying out audits (e.g. to ensure compliance with our regulatory and legal obligations)</li><li>promoting our services</li><li>preventing and detecting crime</li><li>dealing with grievances and disciplinary actions</li><li>dealing with complaints and enquiries</li></ol></li></ul>
<p>The university relies on several different legal basis depending on the processing being performed:</p><ul><li>Necessary for the progress of your studies - on many occasions the university will process your data to enable it to meet its commitments to you e.g. those relating to education and assessment.</li><li>Necessary to comply with a legal obligation - the university may have legal obligations to provide your personal data to others e.g. the Office for Students (OFS), <a href="https://www.hesa.ac.uk/about/regulation/data-protection/notices" target="_blank" rel="noreferrer noopener">HESA</a> and others.</li><li>For the purpose of protecting the vital interest of yourself or another - sometimes in extreme circumstances the university will have to release information to protect your interests or the interests of others e.g. in medical emergencies.</li></ul><p>Processing is necessary for the purposes of legitimate interest of the university or a third party subject to overridden interests of the data subject - the university (and sometimes third parties) has a broad legitimate interest in activities that connect to the activities and education of students. Subject to those interests not being overridden by the interests of fundamental rights and freedom of students, it will pursue those interests. A good example of this legitimate interest would be its Alumni activities.</p><ul><li>Consent - on specific occasions the university will only process certain data if you give consent.</li></ul>
<p>For the purposes referred to in this privacy notice and relying on the bases for processing as set out above, we may share your personal data with certain third parties.</p>
<p>This list is not intended to be exhaustive but to give you an idea of the various kinds of processing of information which the university may need to undertake:</p><ul><li>our employees, agents and contractors where there is a legitimate reason for their receiving the information</li><li>awarding bodies such as the Open University, University of the Arts London and Pearson</li><li>those with an interest in tracking student progress and attendance, including:<ol><li>student sponsors (e.g. the Student Loans Company)</li><li>current or potential education providers (for example, where you take part in an exchange programme as part of your course)</li><li>current or potential employers (to provide references)</li></ol></li><li>government departments and agencies where we have a statutory obligation to provide information:<ol><li>the Office for Students (OfS)</li><li>the Higher Education Statistics Agency (HESA)</li><li>the Home Office (in connection with UK visas and immigration)</li><li>solicitors/debt recovery agents/Courts (should you fall into arrears of payment to the university)</li></ol></li><li>council tax and electoral registration officers at Plymouth City Council (for the purpose of Council Tax and for electoral registration purposes)</li><li>crime prevention or detection agencies (e.g. the police)</li><li>parents, guardians, and next-of-kin (where there is a legitimate reason for disclosure)</li><li>third parties conducting surveys, for example, the National Student Survey.</li></ul>
Profiling
<p>The university does not currently undertake any profiling activities or make automated decisions about you.</p>
Other Countries
<p>The university does not usually transfer your data to other countries. Where this situation may arise (e.g if you take part in an Erasmus or international exchange, or are involved in European or international project) we will contact you directly to seek consent to do this.</p>
Your Rights
<p>You have the following rights:</p><ul><li>To ask for a copy of the data we hold on you. This is known as the right of subject access.</li><li>Rights to rectification and erasure. You have the right to correct any inaccurate personal data held by the university. Once information the university has collected is no longer necessary for the purpose for which it was collected and processed, you sometimes have the right to have your data erased.</li><li>To ask us to stop processing your data temporarily if you think it is wrong until we work out what is correct</li><li>To ask us to let you take a copy of your data in a portable format to another organisation</li></ul><p>Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.</p>
<p>If you have given your consent and you wish to withdraw it, please contact our Data Protection Officer using the contact details set out below. Please note that where our processing of your personal data relies on your consent and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services.</p>
<p>If you have any queries about this privacy notice or how we process your personal data, or to request access to the personal data that we hold about you, you can contact our Data Protection Officer at: Arts University Plymouth, Tavistock Place, Plymouth, PL4 8AT or email <a href="mailto:jwright@aup.ac.uk">jwright@aup.ac.uk</a>.</p>
<p>If you are unsatisfied with the way in which we process your personal data, we ask that you let us know so that we can try and put things right. If we cannot resolve it you can make a complaint to the Information Commissioner.<br /><br />You can find out more about your rights under data protection legislation from the Information Commissioner's Office website available at: <a href="http://www.ico.org.uk/" target="_blank" rel="noreferrer noopener">www.ico.org.uk</a>.</p>