We store and use your information for the purposes of managing our suppliers in respect of the supply of goods and services that our College may need. We use CCTV at our buildings for the purposes of crime prevention, security and health and safety and, accordingly, will capture imagery of visitors to the College.
We process this information on the basis of our legitimate interests:
Where we are required by law to hold certain records, then we collect and hold those records to comply with that legal obligation.
We will handle your personal data in accordance with the principles set out below:
Lawfulness, fairness and transparency
Personal Data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.
Purpose limitation
Personal Data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
Data minimisation
Personal Data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
Accuracy
Personal Data shall be accurate and, where necessary, kept up to date.
Storage limitation
Personal Data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
Integrity and confidentiality
Personal Data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Accountability principles
Personal Data shall be able to demonstrate compliance with the above.
We may have to share your personal data with the parties set out below for the purposes outlined above:
We may also receive requests from third parties with authority to obtain disclosure of personal data. We will only fulfil such requests where we are permitted to do so in accordance with applicable law or regulation
We do not transfer your personal data outside Europe.
We do our utmost to protect your privacy. Data Protection Legislation obliges us to follow security procedures regarding the storage and disclosure of personal information in order to avoid unauthorised loss or access. As such we have implemented security systems and procedures to protect information from unauthorised disclosure, misuse or destruction. We have established procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. If you require further information about the College’s retention schedule then please email DataProtection@hsdc.ac.uk.
Under certain circumstances, you may have the following rights in relation to your personal data:
Right 1: A right to access personal data held by us about you.
Right 2: A right to require us to rectify any inaccurate personal data held by us about you.
Right 3: A right to require us to erase personal data held by us about you. This right will only apply where, for example, we no longer need to use the personal data to achieve the purpose we collected it for; or where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (in line with Right 6 below).
Right 4: A right to restrict our processing of personal data held by us about you. This right will only apply where, for example, you dispute the accuracy of the personal data held by us; or where you would have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but we require the data for the purposes of dealing with legal claims.
Right 5: A right to receive personal data, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to require us to transfer this personal data to another organisation.
Right 6: A right to object to our processing of personal data held by us about you.
Right 7: A right to withdraw your consent, where we are relying on it to use your personal data.
Right 8: A right to ask us not to use information about you in a way that allows computers to make decisions about you and ask us to stop.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
If you wish to exercise any of these rights, please contact Data Protection Officer by emailing Dataprotection@hsdc.ac.uk or calling 023 9387 9999.
Separate privacy notices are used whenever we collect personal information from you. They are available by selecting the appropriate link in the “Who are you” section.
Our Privacy Notice may be updated from time to time. Any updates will appear on this webpage. This notice was last updated in May 2018.
You can contact HSDC by telephoning 023 9387 9999 or by writing to South Downs Campus, College Road, Waterlooville, Hampshire, PO7 8AA.
If you have any questions about our privacy notice, please contact the Data Protection Officer by emailing DataProtection@hsdc.ac.uk or calling 023 9387 9999.