Privacy Notice

CAMBRIDGE REGIONAL COLLEGE GENERAL PRIVACY NOTICE

Cambridge Regional College (‘the College’) processes personal information about students, employees, partners, suppliers and service users in order to provide quality education and training. The College processes personal information so that staff can be recruited and paid, courses planned and delivered, students and their parents/carers/guardian/host family and employers kept informed of progress, examination registrations completed, and to comply with legal obligations to funding bodies and government, including monitoring performance and achievements.

This privacy notice has been prepared in accordance with the UK General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Act 2018.

The College takes the protection of personal information very seriously. We aim to explain clearly what it is going to be used for and who we may share it with. Unless required or permitted by law, we will let you know how we ask you before we use it for any other reason.

We keep the personal data we process to the minimum required to carry out each task, remove your personal information from our systems when it is no longer required, and ensure that all personal information supplied is held securely. We keep our privacy notices under regular review.

Whenever you provide us with personal information, we will treat that information in accordance with this statement, our Data Protection Policy, current legislation and our Data Protection Registration (Registration Number: Z7264155)

Click the following links below to find out more about the data we collect and why, how long we keep it, and who we share it with.

How to contact us

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

If you have a data protection concern that cannot or has not been resolved by the College, you have the right to raise it with the data protection regulator, the Information Commissioner’s Office (ICO)
The Information Commissioner’s Office
Wycliffe House

STUDENT INFORMATION (INCLUDING PROSPECTIVE STUDENTS)

Student

The information that you give us

As part of your admission to the College we will collect your personal details including: name, address, date of birth, National Insurance number, residency information, email address, your photographic image, first and second language, dates of attendance, exam/test results, ethnicity, health information, doctor’s details, next-of-kin/emergency contact details, information about support needs, behaviour record, details on your employer, academic references and criminal conviction information. The College will also collect the following sensitive information in order to monitor our performance against equality, diversity and inclusion; sex, gender identity and sexual orientation.

In order to manage the financial affairs of the College we collect and hold the following information about you: funding information including supporting evidence for fee remission, employment status, free meal eligibility, fees paid and bank details.

Additionally, if you are taking part in International programmes; we will also collect copies of your biometric residence card, your passport and police registration form and bank details.

If you are a prospective student at the College we will collect your personal details including name, address, phone number, email address, age, previous/current school, course, apprenticeship and provision interests. Where parents or carers register we will collect their details as above and your child/ward’s details.

The uses made of your personal information

We will use your information to manage and administer your application and ongoing education. This will include putting together class lists, for sending event invitations, for communicating with you, for providing you with a College ID card, for dealing with admission and enrolment, for putting together reports and registers, to check entrance exam results, to allocate you to the correct classes for assessments, to make arrangements for exams or visits, to consider whether to offer places to students, to consider whether special provision or assistance is required for exams and visits and to be able to tell other colleges your attendance dates if you leave.

Whilst on your course this will also include information for making registers, class lists, trip lists, communications, reports, employer information (for example for apprentices and day release students).

We deliver online learning using a range of platforms including Moodle (the college virtual learning environment/VLE), Microsoft Teams and SmartAssessor. We may record taught sessions for quality improvement purposes. These are retained within our college IT infrastructure and protected by network passwords.

We will use your information to ensure your place is appropriately funded, to pay/receive payments from you.

We will use your information to send you information and resources about your course and the college, for example if you need to work remotely.

For prospective students your data will be used to manage delivery of college information events, this will include making delegate lists, communicating with registrants about the event and college courses and for compiling reports.

Any student that is under 18 years of age at the time of enrolment, the college will share information on progress, attendance or any issue that may affect your education or wellbeing with parents/carers/guardians.

The legal basis on which we collect and use your personal information

Your information is processed because it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

Where that information is special category personal information (e.g. medical information) we will process it because there is a substantial public interest for us to do so.

Cambridge Regional College aims to be equitable and to meet the legal obligations of the Rehabilitation of Offenders Act 1974, the Data Protection Act 2018 and the Human Rights Act.

We have a legal obligation known as “Duty of Care” to do everything reasonable to protect students, staff and visitors from potential harm. We therefore require students to declare if they:

Are serving/have served a custodial sentence
Are currently/have been on licence
Have served or are serving any type of order (expect pre-court orders such as reprimanded or final warnings)
Are currently on, or having been on and Intensive Supervision and Surveillance Programme (ISSP)
Have Caution/s Warning/s or Reprimand/s (the college does not need to know about convictions that are spent)

The information disclosed will not prevent you from studying the course of your choice. However, if you have a previous conviction(s) that you do not disclose and which is subsequently discovered, you may be refused a place or asked to leave the course. There may be occasions whereby a current/previous conviction may affect the outcome of your course (for example Childcare courses) but we will discuss this with you in full and offer alternatives where appropriate. If you would like to disclose information regarding criminal offenses prior to enrolment, or during the course of your studies, please call the Safeguarding Manager on 01223 418470. Please note that information given will be treated as sensitive data under the Data Protection Act 2018.

In the event that the college is required to carry out Covid-19 testing, or process information about positive test results, it will do so in accordance with obligations set out by law.

How long we keep your personal information

Unsuccessful applications – Current academic year + 1 year
Successful applications – End of student relationship + 10 years
Successful applications – End of student relationship + 6 years
Successful applications potentially match funded by ESF – 31st December 2030.
Recorded material – for the duration of the academic year, unless the recording contains assessment evidence, in which case may be retained for longer, in line with the college Data Retention Schedule.

How we share your personal information

We share your information internally to enable us to manage and administer your education effectively. We use a ‘permissions’ system to make sure that staff only have access to the information they need to carry out their jobs.

We may also share the personal information that you give us with the following organisations (or types of organisation) for the following purposes: If you are on a course that receives public funding, we will share your information with the following organisations, as appropriate

The Education and Skills Funding Agency (ESFA) – ESFA Privacy Notice
The Higher Education Statistics Agency (HESA) – HESA Privacy Notice
The Office for Students (OfS) – OfS Privacy Notice
The Cambridgeshire and Peterborough Combined Authority – CPCA Privacy Notice

Organisation:
The Learner Records Service

Purpose:
To create and or maintain a Personal Learning Record (PLR) on your behalf. Full details about the PLR can be found here https://www.gov.uk/guidance/how-to-access-your-personal-learning-record

Type of organisation:
Awarding Organisations that accredit your course or qualification.

Purpose:
To register you with an awarding organisation so you can be entered for examinations or other work that we assess can be used to claim a certificate when you have finished your course successfully. In the event of an academic appeal, the college may be required to share your name, candidate number and details regarding exam concession with the respective awarding organisations.

Type of organisation:
Schools
If you are a school leaver; we will confirm your enrolment with your school, and request further details to support your application from them, such a reference and other application details eg exam results.

Organisation
Cambridgeshire County Council or other local authorities for school leavers outside of Cambridge, or for those aged 16-24 with an Education and Health Care Plan (EHCP) and the police
If you are a school leaver; we will confirm your enrolment with Cambridgeshire County Council to enable their confirmation of the September Guarantee (which requires local authorities to find suitable education and training places for 16- and 17-year-olds). If you are aged 16-24 and have an EHCP (Education, Health and Care Plan) the College will share information with relevant local authorities to ensure appropriate support is made available to you during your studies. We will also share information relating to safeguarding, prevent and child protection with relevant authorities to keep students and staff safe.

The Cambridgeshire and Peterborough Combined Authority – CPCA Privacy Notice
Cambridgeshire Local Authority – CLA Privacy Notice
Hertfordshire Local Authority – HLA Privacy Notice
Norfolk Local Authority – NLA Privacy Notice
Suffolk Local Authority – SLA Privacy Notice
Essex Local Authority – ELA Privacy Notice
Bedfordshire Local Authority – BLA Privacy Notice

If you join the college as a student we may share your name, student identifier, email address, postcode, active directory and IP address with the following third-party organisations in order to support the learning and delivery of your course:

Electoral Registration

Where you choose to opt in to electoral registration, we will use your personal data (including your National Insurance number) to submit your details to the Electoral Registration Officer (ERO) for your local authority.

You may withdraw your consent at any time before your information is shared with the ERO. If you do so, we will not submit your details for electoral registration.

Once your information has been shared with the ERO, they become the data controller for that information. This means they are responsible for how your data is used for electoral registration purposes.

If you wish to withdraw, amend, or update your electoral registration after your data has been shared, you will need to contact the ERO directly. We do not manage electoral records on behalf of the ERO and cannot amend or withdraw your registration after submission.

Contact details for the relevant ERO’s are as follows:

Cambridge City Council – infogov@3csharedservices.org.
East Cambridgeshire District Council –
Fenland District Council –
Huntingdonshire District Council –
South Cambridgeshire District Council – mysouthcambs@scambs.gov.uk#

Filtering and monitoring to help keep students safe online

The College is required under the DfE’s statutory guidance, ‘Keeping Children Safe in Education’ to keep students safe online whilst at College. This includes use of appropriate filters and monitoring systems to limit exposure to potential risks and inappropriate or harmful content while using the College’s IT systems.

The College monitors search terms used on all devices linked to the College’s WiFi system. The College also uses cloud-based software, Senso, which is installed onto College-owned devices for the purpose of filtering and monitoring. Senso uses artificial intelligence to check search terms and the content of every website a student attempts to visit, Senso contains a detections library of trigger words. Should any of the trigger words be detected the College’s safeguarding team will be notified of your name and the content of your search, and they may follow this up with you.

The College monitors PCs and laptops in classrooms and workshops and allows the teacher to view and access student machines as well as share in real-time, for the purpose of teaching, class management and safeguarding. This includes PCs and laptops used for exams and controlled assessments, to ensure exam regulations have been followed.

The College also uses Senso to block potentially inappropriate or harmful websites from access from College devices. Computer usage during lessons must be course related at all times.

Type of organisation: third party software vendors

We will share your name and may share your email address with the following software vendors so that we host resources to support access to online and blended learning. Click the links to find out more.

Overt Software Services https://www.overtsoftware.com/ to create and maintain a virtual learning environment (VLE) account for you.
Ally – https://pitchbook.com/privacy-policy – Ally is used as an extension to the College virtual learning environment and is integrated with Microsoft 365.
Microsoft 365 – https://www.microsoft.com/en-gb – The college uses Microsoft Teams to support the online delivery of study programmes
Eden Network Development – www.endsolutions.net provides survey and teaching observation software used in College
Padlet – https://padlet.com/ – Padlet is used as an extension to the College virtual learning environment and is integrated with Microsoft 365.
Urkund – https://www.microsoft.com/en-gb is an anti-plagiarism software that the college uses when marking assignments.

Students enrolling on an online course via our portal:

The Skills Network – https://www.theskillsnetwork.com/ – CRC use an online learning portal called EQUAL which is provided by The Skills Network to deliver AEB funded and full cost L1 & L2 courses. We also use software called e-commerce, which is also provided by TSN and is used to enrol students onto EQUAL.

Students studying English and/or maths:

BKSB https://www.bksb.co.uk to create an English and maths initial assessment account for you.
MathsPad – https://www.mathspad.co.uk/ – online learning platform for maths courses
Century – https://www.century.tech/ –. we will share your name, college email address and date of birth with Century so you can access English and maths courses and resources.

Students studying a qualification in the Creative Industries department:

The college will share your name and college email address for the purpose of setting up an account.

Adobe Creative Suite – is a suite of graphic design, video editing and web development application software. . Adobe Privacy Centre
Logic Pro – is software used for editing and mixing music. We will also share your audio if using this software – Legal – Privacy Policy – Apple
Pro Tools – is music production software. We will also share your audio if using this software – https://www.avid.com/legal/privacy-policy-statement
Sibelius – is software used to compose music – https://www.avid.com/legal/privacy-policy-statement
Trello – Planning/production management software that supports the creation of Gant charts and project related information/work flow – https://support.atlassian.com/trello/docs/trellos-privacy-policy-update-faqs/
Unity- Games development tool/Engine that is industry standard to create 2d and 3d games – Privacy Policy Terms and Conditions | PureWeb
Unreal Engine – is gaming software that helps developers produce games –https://unrealcommunity.wiki/wiki/privacy-policy
Steam – used for installing games – Privacy Policy Agreement (steampowered.com)
Riot Client – used to install Riot games – Privacy Notice | Riot Games
Ubisoft Connect – used to install Ubisoft games – PRIVACY NOTICE (ubi.com)
Battle.net – Used for installing Blizzard games – Blizzard Entertainment Privacy Policy – Legal – Blizzard Entertainment

These organisations may transfer your data outside of the EU. We carry out privacy impact assessments to minimise risk where data is shared with a third party

Students studying other qualifications:

Cogbooks – https://www.cogbooks.com/ – online learning platform for HNC business courses

If you are an apprentice:

we will share your name, phone number, email address, student support needs, education history, qualifications, employer and attendance data with SmartAssessor http://www.smartassessor.com/ in order to provide learning resources, deliver our programmes, and to monitor and track your progress
Microsoft Dynamics – CRM system the college uses to support apprentices and identify leads – Privacy and personal data in Microsoft Dynamics 365 – Dynamics 365 | Microsoft Learn

For all students, we may share the following personal information with these organisations in order to provide services to students and parents whilst you are at CRC:

Organisation: Navigatr

The College issue students with digital badges to recognise specific learning and skills that are demonstrated. We will share your first name with Navigatr who will issue the digital badge on behalf of the College – Privacy Policy — Navigatr

Organisation: School Cloud

School Cloud is an online booking system that the College uses to book parents’ evening events. The college will process your name to enable parents to book a session with your tutor. https://www.schoolcloud.co.uk/

Organisation: RNIB

RNIB book share is an online platform for students with visual impairment or other related disabilities, providing access to free, adapted e-books and electronic reading material. To create your account, we will share your name and college email address with RNIB solely for this purpose.

Organisation: Accessit

Accessit is an online library management system that students use when borrowing books and resources from the LRC. Your name and email address will be used to create an account and keep track of books and resources borrowed – https://accessitlibrary.com/privacy-policy/

Organisation: Pay My Student

Pay My Student is an online bursary management system. Your name, date of birth, age, address, contact details, residency status, asylum seeking status, care arrangement and bank details will be used to support bursary applications and to track payments if this applies to you. https://www.paymystudent.com/

Organisation: Symmetry

The College may share your name, contact details, email address and bank details with symmetry for the purpose of maintaining direct debit payment plans.

Organisation: ACT Credit

ACT is a debt recovery agency. The College may pass on your name, address, contact details, email address and date of birth to ACT credit for the purposes of recovering any outstanding debt. https://www.actcredit.com/

In turn, Purlos share your data with a company called Twilio to allow integration with WhatsApp, however all data is encrypted and not visible to them.

Organisation: Horizon

The College uses Horizon parking to manage the parking spaces within its car parks. In the event of having to issue a penalty notice, the college will share your name and car registration number https://horizonparking.co.uk/

Organisation: Evolve
Evolve is an online system that is used to manage information relating to trips. The system will hold details of students attending trips including, name, address, contact number, next of kin details, and medical history. The system is used so the trip organiser can ensure the safety of all students while outside of the college premises. The system is also used to process payments for school trips. Students/parents/carers will be sent a secure link which will outline the trip details, this link also provides a means of paying for the trip through Evolve; however, the College still accept payments via BAC’s if preferred – https://evolve.edufocus.co.uk

Organisation: The Network for East Anglian Collaborative Outreach (NEACO) project

The College participates in a project aimed at increasing the number of young people going into higher education. More information can be found at https://www.takeyourplace.ac.uk/how-we-use-participant-data.

Anglian Ruskin University host events in college to help students prepare for higher education. You will be asked to share your name, postcode, date of birth, email address, gender, ethnicity and disability and care leaver status with ARU. The data will be used to look at student participation in HE. If at any point you no longer want your data used for this purpose, you can email

Organisation: The University of Nottingham

The College receives funding from Nottingham University as part of the Mastering Maths Research Study. As part of the study the College may share information with The University for research purposes. The type of information that will be shared is your name, date of birth and unique learner number.

If you are aged 16 or 17: your parent/carer/guardian(s).

If you are aged 16 or 17; we will share information including your attendance, punctuality and academic progress with your parent/carer/guardians(s) unless you specifically withdraw your consent for us to do so.

If you are an international student:

Organisation: UK Visas and Immigration (UKVI) https://www.gov.uk/government/organisations/uk-visas-and-immigration
The College holds a Tier 4 Licence and may be asked to share information with UKVI if you are an overseas student. We share this information as part of our public interest task of providing education to you.
We may also share your personal information with third parties who provide services to the College.

Organisation: Host families
If you are under 18 and taking part in an international programme and have been placed with a host family; we will share your name, date of birth, email address, gender, nationality and medical information. We share will share this information as part of our public interest task of providing education to you.

Organisation: Homestay agents

In cases where accommodation is required, the College uses the services of homestay agents to support with finding suitable accommodation for the duration of your studies. We will share your name, date of birth, email address, gender, nationality and medical information. The College uses the services of Homestay Consultation and C.L.A.S.S.I.C

Organisation: Travelsights

Students who attend trips as part of their course; the College use Travelsights to organise and facilitate some trips. We will share your name, contact number and any medical information so that you can be kept safe during the trip.

If you are an apprentice:

Organisation: your employer.
If you an apprentice; we will share information including your attendance, punctuality and academic progress with your employer. We do this as we have entered into a tri party agreement with you and your employer (as detailed in the Apprenticeship Training Agreement). We share information as part of our public interest task of providing education to you.

Organisations: ePortfolio software providers

The college uses ePortfolio software to support apprentices throughout their apprenticeship. The college uses SmartAssessor – Privacy Policy | Advanced (oneadvanced.com) and if you are a Motor Vehicle apprentice, the college uses IMI. Your name, date of birth and college email address will be shared in order to set up your ePortfolio.

If you are an adult student learning with one of our partners:

Type of organisation:
Subcontractors/training partners
The College uses sub-contractors for the delivery of some of its courses and programmes. As such these third parties have access to students personal details including name, address, date of birth, gender, nationality, parent/guardian contact names, phone number, email address, student support needs, medical information, education history, qualifications, references, ethnic origin, employment history, attendance data, and other relevant information.
Appropriate contracts are in place with College sub-contractors as data processors to ensure they process personal data in line with the law

Type of organisation: Third party survey companies

The College is required to return details of your progression/destination to organisations that fund us. We also use satisfaction surveys as part of our public interest task of assessing the quality of the education we are providing to you. We procure the services of specialist companies to do this on our behalf. We have data sharing agreements in place with any third parties that provide these services on our behalf.

J2 Research Ltd. http://www.j2research.co.uk/ conduct destination surveys on behalf of the College.
QDP Services http://www.qdpservices.co.uk/ conduct on programme satisfactions surveys on behalf of the College.

Survey Monkey https://www.surveymonkey.co.uk/ may be used to conduct feedback surveys so the College can improve its service

Organisation: DHL
The college may share your name and address with DHL if we need to send you equipment to enable you to work remotely, for example due to illness.

Organisation: Panther Taxis | F&S Taxis

The college may share your name, address and image with a taxi company if we need to arrange transport for you, for example if you become unwell whilst at College and need to go home, or to arrange transfers from the airport to your host family.

Organisation: DS Repro

DS Repro are an external printing service the College uses. There may be occasions when the College is required to use Ricoh’s printing service to print information that includes personal and/or sensitive information.

Organisation: Shuttle ID

Shuttle ID provide QR codes that students can store on their mobile device that replace paper bus pass tickets. In order to provide you with a QR code, we need to provide your name, email address and mobile number.

Organisation: Bus Companies

The college has contracts with the following bus companies so that students can travel to and from college safely; Dews Coaches, Cambridge Bus and Coach Company, Miller Bros & Andrews and Youngs. We will share your name, email and contact number with the relevant bus company.

Organisation: My Concern

The College use My Concern to record and store all safeguarding records. The information contained within My Concern will be your name, date of birth, gender and ethnicity as well as other personal sensitive information in relation to any safeguarding concerns. Privacy Policy | The Safeguarding Company

Type of organisation:

Third party software vendors: which support our Marketing department with the management of images, projects and events. These include:

If you attend one of our events, we may share your name, address, email address, address, phone numbers, IP address with Eventbrite https://www.eventbrite.co.uk/ to enable us to manage your attendance at our events. For example, so we know how many are likely to come to an open evening or Festival of Achievement.
Ticketsource is an online ticketing and event management system. You may be required to share your name, email address and contact number when booking onto an event within the College – https://www.ticketsource.co.uk/kb/terms-of-use/customer-data-privacy-policy
Dash – is a digital asset management system that the College uses to catalogue images for marketing purposes. The data that will be stored within Dash will include your name, image, contact details and age. – Dash privacy policy
Adobe Creative Suite – is used to edit videos and photos for the use of promotional marketing activity. The data that will be stored within Adobe will include your image and audio. Adobe Privacy Centre
Click Up – is a Marketing project management software that will allow the College to manage events. The data that will be stored within Click Up will include your name, contact details and email address. ClickUp™ | Privacy Policy
WordPress – is used to host the College’s website. The College has a chat function that will allow you to contact us to enquire about our services. The software will allow you to request a call back from a member of our team. WordPress will collect your name, email address and contact number. Siteground Web Hosting – Privacy Policy Details
Jotform is an online form creator the College uses to track and see the impact the college/courses has/have on individual students and society, and to gather case studies from alumni students signature. Jotform Privacy Policy
Recite Me – read aloud accessibility software that integrates with the College website – Privacy Policy | Recite Me
Hubspot – a digital marketing platform and email marketing platform used to track and see the impact the college/courses has/have on individual students and society, and to gather case studies from alumni students – https://legal.hubspot.com/privacy-policy

The College will seek your consent before using any of your data for Marketing purposes.

Type of organisation:

Third party Software Vendors: which support our MIS department with the management of student information:

Advanced – Privacy Policy | Advanced (oneadvanced.com) provide management information systems used for managing student information in relation to funding, and student ePortfolios (ProMonitor, ProPortal and SmartAssessor). They provide English and maths initial and diagnostic assessment systems (BKSB). The College may be required to share all records with Advanced for technical support purposes. The College has a data sharing agreement in place and where the College is required to share all data, this will remain in the UK.
Tribal – https://www.tribalgroup.com/privacy-policy provides the College with EBS; an Education Business System. This system is a management information system used to store and process

How we transfer your personal information outside Europe

Where you register on an event with the College, whether a prospective or current student or relation, your details including name, address, email address, phone, emergency contact details, access information, travel requests, courses preferences will be stored in Eventbrite to administer the event. Eventbrite is a US based organisation – please find a link to their privacy notice – Eventbrite privacy notice

If you are a student taking part in an international programme, information including: name, address, date of birth or age, emergency contacts, host family accommodation and other relevant information may be shared with travel organisations, host schools/colleges/education providers/education agents and a host family (where relevant). Staff and students will be asked to give their explicit consent to the sharing of data where this is relevant.

The following organisations may transfer your data outside of the EU. We carry out privacy impact assessments to minimise risk where data is shared with a third party. Please note that where data is shared below, it is encrypted:

Purlos (WhatsApp chat software) – Purlos uses a sub-processor, Twilio to support the integration between their system and WhatsApp. Your personal information may be processed in the Unites States; but your data will be encrypted. Their privacy notice can be found here – Public Policy – Twilio.

Microsoft Teams – your data will be processed in the United States. All data is encrypted and their privacy notice can be found here https://privacy.microsoft.com/en-gb

Microsoft Dynamics – CRM system the college uses to support apprentices and identify leads – – Privacy and personal data in Microsoft Dynamics 365 – Dynamics 365 | Microsoft Learn

Survey Monkey – your data may be processed in the United States if the College are required to access technical support out of hours. Their privacy notice can be found here https://www.surveymonkey.co.uk/

Jotform – your data may be processed in the United States if the College are required to access technical support out of hours. Their privacy notice can be found here – Jotform Privacy Policy

The software the College uses to support our MIS department with the management of student information:

Advanced – Privacy Policy | Advanced (oneadvanced.com) provide management information systems used for managing student information in relation to funding, and student ePortfolios (ProMonitor, ProPortal and SmartAssessor). They provide English and maths initial and diagnostic assessment systems (BKSB).
Tribal – https://www.tribalgroup.com/privacy-policy provides the College with EBS; an Education Business System. This system is a management information system used to store and process

Both software vendors have offices in multiple locations, including offices situated outside of the EEA. Sometimes there may be a requirement to share personal data between offices to deliver their services effectively, for example, to provide technical support.

If you are a student studying in the Creative Industries department, the following third-party software vendors may process your information in the Unites States:

Adobe Creative Suite – is a suite of graphic design, video editing and web development application software. . Adobe Privacy Centre
Logic Pro – is software used for editing and mixing music. We will also share your audio if using this software – Legal – Privacy Policy – Apple
Pro Tools – is music production software. We will also share your audio if using this software – https://www.avid.com/legal/privacy-policy-statement
Sibelius – is software used to compose music – https://www.avid.com/legal/privacy-policy-statement
Trello – Planning/production management software that supports the creation of Gant charts and project related information/work flow – https://support.atlassian.com/trello/docs/trellos-privacy-policy-update-faqs/
Unity- Games development tool/Engine that is industry standard to create 2d and 3d games – Privacy Policy Terms and Conditions | PureWeb
Unreal Engine – is gaming software that helps developers produce games –https://unrealcommunity.wiki/wiki/privacy-policy
Steam – used for installing games – Privacy Policy Agreement (steampowered.com)
Riot Client – used to install Riot games – Privacy Notice | Riot Games
Ubisoft Connect – used to install Ubisoft games – PRIVACY NOTICE (ubi.com)
Battle.net – Used for installing Blizzard games – Blizzard Entertainment Privacy Policy – Legal – Blizzard Entertainment

Your rights over your personal information

You have a number of rights over your personal information, which are:

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly-used, machine-readable format.

Changes to our Privacy Notice

We keep our privacy notice under regular review. If any changes are made to our privacy notice in the future we will contact you.

How to contact us

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

PARENT/CARER/GUARDIAN

The information that you give us

As part of the admission of your son/daughter/dependant to the College we may collect parent/carer/guardian details including: parent/carer/guardian name, emergency contact telephone number, address and email address.

The uses made of your personal information

We keep this information so we can contact you in case of emergency. In addition, we will contact you to ask for feedback about the College so we can make improvements to the services we deliver.

Any student that is under 18 years of age at the time of enrolment, the College will share information on the progress, attendance or other issues that may affect the education or wellbeing of students under the age of 18.

Students can request the college not share personal information with a third party, including a parent or carer. The College must comply with this request unless there is another legal basis on which to share information.

The legal basis on which we collect and use your personal information

Information is processed as part of our public interest task of providing education to your son/daughter/dependant.

How long we keep your personal information.

Unsuccessful application of your son/daughter/dependant – Current academic year + 1 year
Successful application of your son/daughter/dependant – End of student relationship + 6 years
Host Family – as long as you are still employed by the College

How we share your personal information.

We will share your information internally to enable us to manage and administer your son/daughter/dependants education effectively. We use a ‘permissions’ system to make sure that staff only have access to the information they need to carry out their jobs.

Organisation: QDP Services http://www.qdpservices.co.uk/ conduct parent/carer/guardian satisfactions surveys on behalf of the College.

We use satisfaction surveys as part of our public interest task of assessing the quality of the education we are providing to your son/daughter/dependant. We may procure the services of specialist companies to do this on our behalf. We will have data sharing agreements in place with any third parties that provide these services on our behalf.

Organisation: Parent Portal

If your son/daughter/dependant is under the age of 18, the College will set up an account using your email address on the College Parent Portal. The portal will share information on the progress of your son/daughter/dependant. Once your son/daughter/dependant turns 18, access to the account will become obsolete. Consent will be required from your son/daughter/dependant to reinstate your account. If your son/daughter/dependant is over the age of 18, we will have to gain consent from the student before setting up an account on the Parent Portal – https://proportal.camre.ac.uk/

Organisation: School Cloud

Organisation: Evolve

Evolve is an online system that is used to manage information relating to trips. The system will hold details of students attending trips including, and it will include next of kin details – name and contact details. The system is used so the trip organiser can ensure the safety of all students while outside of the college premises. The system is also used to process payments for school trips. Students/parents/carers will be sent a secure link which will outline the trip details, this link also provides a means of paying for the trip through Evolve; however, the College still accept payments via BAC’s if preferred – https://evolve.edufocus.co.uk

Third party software vendors: which support with communication and the management of events. These include:

Hubspot – is a marketing platform which will be used to communicate the college’s Parental Newsletter. You name and email address will be processed so that the newsletter can be sent to you – https://legal.hubspot.com/privacy-policy
Jotform – is an online form creator the College uses when it requires information from you to help us provide you with a service or manage events, such as student trips. The data that will be collected may include your name and signature. Jotform Privacy Policy

Eventbrite – Eventbrite – If you attend one of our events, we may share your name, address, email address, address, phone numbers, IP address with Eventbrite to enable us to manage your attendance at our events. For example, so we know how many are likely to come to an open evening or Festival of Achievement – https://www.eventbrite.co.uk/help/en-gb/articles/460838/eventbrite-privacy-policy/
Ticketsource is an online ticketing and event management system. You may be required to share your name, email address and contact number when booking onto an event within the College – https://www.ticketsource.co.uk/kb/terms-of-use/customer-data-privacy-policy

How we transfer your personal information outside Europe

Hubspot – https://dotdigital.com/terms/privacy-policy/
Jotform – Jotform Privacy Policy
Eventbrite – https://www.eventbrite.co.uk/help/en-gb/articles/460838/eventbrite-privacy-policy/

Please click on the links above to access their privacy notices.

Your rights over your personal information

You have a number of rights over your personal information, which are:

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly-used, machine-readable format.

Changes to our Privacy Notice

We keep our privacy notice under regular review. If any changes are made to our privacy notice in the future we will contact you.

How to contact us

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

EMPLOYER INFORMATION

The information that you give us

As part of the admission of a student on work placement or an apprentice employed by you; or in order to match you with a prospective apprentice, the College will collect details of you as the named employer. This will include: employer name, number of employees, address, main contact name, position, telephone number and email address. Nature of employer business, normal working pattern, name details of other supervisors, details of Employers Liability Insurance, Health & Safety risk assessment and bank details.

The uses made of your personal information

We will use your information to manage and administer the education of students on work placements or apprentices employed by you. This will include securing an effective working relationship between us as the training provider and you as the employer to protect the interests of the student or apprentice.

We will also use your information to ensure students on work placements or apprentices employed by you are appropriately funded, and/or to receive payment from you.

The legal basis on which we collect and use your personal information.

This information is processed as part of our public interest task of providing education to students on work placements or apprentices employed by you.

How long we keep your personal information.

Unsuccessful application of a student on work placement or an apprentice employed by you – Current academic year + 1 year
Successful application of a student on work placement or an apprentice employed by you potentially match funded by ESF – 31st December 2030.

How we share your personal information.

We will share your information internally to enable us manage and administer the education of students on work placements or apprentices employed by you effectively. We use a ‘permissions’ system to make sure that staff only have access to the information they need to carry out their jobs.

We may also share the information that you give us with the following organisations (or types of organisation) for the following purposes.

Type of organisation:

If you are on a course that receives public funding, we will share your information with the following organisations, as appropriate:

The Education and Skills Funding Agency (ESFA) – ESFA Privacy Notice
The Higher Education Statistics Agency (HESA) – HESA Privacy Notice
The Office for Students (OfS) – OfS Privacy Notice
The Cambridgeshire and Peterborough Combined Authority – CPCA Privacy Notice

To fund or co-fund the College course for students on work placements or apprentices employed by you. Full details of how the funding agencies may use your information can be found by following the links above.

Host Families:

As part of your employment with the College we will need to collect your contact details including: mobile/telephone number, address, and email address. As we work with a large variety of hosts, photos of communal areas of your home may be stored as an aide memoire. We may wish to share your details such as name(s) and photos with students in order to better prepare them for arrival, you will be notified if this is the case.

We will also need to see but not store: an ID document e.g. driver’s license/passport, a proof of address, and your DBS certificate.

The College work with several overseas agents who act as the link between the student and host family. The College may share host family contact details with one or more of these agents. The College has data sharing agreements in place with each of them. Some of the agents the College work with are located outside of the EEA, meaning your data will be shared outside of the EEA.

We also use the services of certain taxi companies who arrange to pick up the student from the airport and transport them to their location. If this service is used, we will share your name, contact number and address with that taxi company to ensure safe arrival of the student. The taxi companies the College currently use are Lords, Panther and Cambridge Connect.

Organisation:

The Employment Data Service (EDS).

To obtain a valid employer number which identifies you as an employer in the College’s Individualised Learner Record (ILR). This is required for us to ensure apprentices employed by you or students on a work placement are appropriately funded.

Type of organisation:
Subcontractors/training partners

The College uses sub-contractors for the delivery of some of its courses and programmes. As such these third parties collect/have access to employer details including: employer name, number of employees, address, main contact name, position, telephone number and email address. Nature of employer business, normal working pattern, name details of other supervisors, details of Employers Liability Insurance, Health & Safety risk assessment and bank details.
Appropriate contracts are in place with College sub-contractors as data processors to ensure they process personal data in line with the law.

We may also share your personal information with third parties who provide services to the College.

Organisation:
QDP Services http://qdpservices.co.uk/ conduct employer satisfactions surveys on behalf of the College.

We use satisfaction surveys as part of our public interest task of assessing the quality of the education we are providing to apprentices employed by you. We may procure the services of specialist companies to do this on our behalf. We have data sharing agreements in place with any third parties that provide these services on our behalf.

Type of organisation:
Third party Software Vendors:

We may share your company name, address, main contact name, position, telephone number and email with SmartAssessor http://www.smartassessor.com/ to create and maintain an e-portfolio for apprentices employed by you. We have data sharing agreements in place with any third parties that provide these services on our behalf.

Organisation:

Microsoft Dynamics – https://dynamics.microsoft.com

The College uses Microsoft Dynamics – a Customer Relationship Management (CRM) platform which allows us to effectively manage employer customer service expectations.

Organisation

Collsys

Collsys is a system used to support students finding work placements as part of their study programme. The college will process named contacts which will be used to link students to their relevant work placements and so that tutors can make contact to discuss feedback and progress. https://www.collsys.co.uk/

How we transfer your personal information outside Europe.

Microsoft Dynamics – your data will be processed in the United States. All data is encrypted and their privacy notice can be found here https://privacy.microsoft.com/en-gb

If you are a host family member hosting a student that has come from a country outside of the EEA, the college may share your contact information with an overseas agent.

Your rights over your personal information

You have a number of rights over your personal information, which are:

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly-used, machine-readable format.

Changes to our Privacy Notice

We keep our privacy notice under regular review. If any changes are made to our privacy notice in the future we will contact you.

How to contact us

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

INFORMATION RELATING TO COMPLAINTS AND COMPLIMENTS

The information that you give us

To ensure your matter is dealt with appropriately, the College will require the following information:

Complainant contact details: name, address, email, telephone number
Student details if not complainant: name and EBS number

The uses made of your personal information

To enable us to respond to the you
Ensure we are talking about right student
To check if we need consent from a student if a complaint is made on their behalf

The legal basis on which we collect and use your personal information

We are a public body with an obligation to collect data on complaints and compliments

Low long we keep your personal information

6 years after the last action on your complaint/compliment

How we share your personal information

College staff – We use a ‘permissions’ system to make sure that staff only have access to the information they need to carry out their jobs.
We share anonymised complaint statistics with external bodies such as Ofsted and the Office of the Independent Adjudicator
The college will not share personal information with anyone outside of the college without your consent
Your employer if you are an apprentice or student on a work placement.

How we transfer your personal information outside of Europe

We do not store or transfer your personal data outside Europe.

Your rights over your personal data

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly-used, machine-readable format.

If you request that your data is not processed by us, please be aware that we will not be able to provide a response to your complaint.

Changes to our Privacy Notice

We keep our privacy notice under regular review. If any changes are made to our privacy notice in the future we will contact you.

How to contact us

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

JOB APPLICANTS, CURRENT AND FORMER EMPLOYEES AND VOLUNTEERS

The information that you give us

We will collect personal information from you when you apply for a job with us or to volunteer with us. This will include names; address; phone number; email; date of birth; NI number; current employment details including job title, start and end dates, current salary, notice period, reason for leaving; all past employment details; education and qualification details; professional memberships; personal, sensitive data (gender, sexual orientation, ethnicity, religion, marital status, disability), whether you are related to any personnel of the College or Governing Body; references; criminal record details; Disclosure Barring Service check, including European Economic Area (EEA) check; Check of Barred List/List 99; Pre employment Health Questionnaire/Medical Report, any relevant information from an on-line check that may cause concern about your ability to work with children and/or young adults or that may bring the College in to disrepute.

We will collect personal information from you when you are a new starter and become an employee of the College or a Volunteer. This will be your name; marital status; previous surname(s); address; contact details; date of birth; qualification details including copies of original certificates; occupation/department; type of employment; NI number; start date; signature; sensitive data (gender, sexual orientation, ethnicity, religion, marital status, disability); criminal record details; copies of proof of identity and right to work in the UK; next of kin and emergency contact details; bank details including account number and sort code; fit-to work certificate from Occupational Health, pension details; student loan details; offer letters; employment terms and conditions; changes to your terms and conditions; certifications/qualifications, disciplinary, grievance, capability, job description, sickness absence details, maternity/paternity/adoption information; accidents and injuries at work; working time information; annual leave records; recruitment information; photo; payroll details; flexible working; exit interviews; return to work notifications; training/cpd records; parental leave request forms; appraisal/ probationary/performance review documentation; disqualification information; disclosed medical information and agreed risk assessments.

The uses made of your personal information

We will use your personal information set out above as follows:

for the recruitment process and for carrying out pre employment checks;
for safeguarding students;
for checking your identity and right to work in UK;
for checking your qualifications;
to keep an audit trail of the checks we have made and our relationship with you in case of employment claims;
to set up payroll and pension and to reimburse expenses;
for dealing with HMRC;
for communicating with you, including for marketing purposes;
for carrying out our role as your employer or potential employer;
for providing facilities such as IT services;
for providing wellbeing and support services, ensuring we maintain our duty to provide a safe and supportive work environment;
for monitoring equal opportunities and meeting our legal reporting requirements, eg. Equality and Diversity reporting, Gender Pay Gap;
with your consent, for ensuring that third party bookings/enrolments are made on your behalf eg. booking training courses, BUPA membership.
for preventing and detecting crime, such as using CCTV and using photo ID on ID Badges and IT Systems;
for contacting past employees where required;
for compliance with legal obligations eg. making external/statutory returns.
for confirming your responsibilities relating to College policies and procedures
for creation of accounts so that blended learning resources can be accessed
For staff development purposes, if you undertake a qualification during your employment with the college, your information may be shared across the college to ensure you receive relevant arrangements, such as Exam Access Arrangements.

We treat your personal information with confidentiality and we do not use it for any other purposes.

The legal basis on which we collect and use your personal information

We collect and use your personal information on the basis that it is necessary for performing our employment contract with you, or it is necessary to take steps before entering into the contract with you. We also collect and use your personal information on the basis that we need to do so in order to comply with our legal obligations.

Where we collect your special category personal information, we do this on the basis that it is necessary for the purposes of carrying out our obligations in the field of employment law. Special categories of personal data are personal data that reveal a person’s racial or ethnic origin, political opinions, religions or philosophical beliefs, trade union membership, genetic data (i.e. information about their inherited or acquired genetic characteristics), information about their physical, physiological or behavioural characteristics (such as facial images), physical or mental health, sexual life or sexual orientation and criminal records.

How long we keep your personal information

We will not keep your personal information for longer than we need it for the purposes we have explained above.

When you apply for a job with us, but your application is unsuccessful, we will keep your personal information for a period of 12 months after the completion of the appointment.

When you are an employee, we will keep your personal information for as long as you work with us. After you leave, we will keep your personal information for the period of time we are legally required to, or the period of time in which any employment claims may be made against the College and for which the information would be required for such claims. College staff are able to view the College’s Retention Schedule for further details.

How we share your personal information

We may need to share the personal information and sensitive personal information that you give us with third parties outside of the College who are contracted to work on the College’s behalf, for example pension providers, HMRC or legal consultants.

The College may also disclose data to auditors undertaking audits or investigations.

If you apply for a position within the College your application will be processed through Blue Octopus, which is a recruitment and onboarding platform. As part of the application process you will be asked to provide your contact details, diversity information, health and disability information, details of criminal convictions, next of kin information, bank details and reference details – https://www.blueoctopus.co.uk/privacy-policy/

If your application is successful, your information will be stored in iTrent, the College’s HR and payroll system – https://mhrglobal.com/uk/en/privacy-policy

If you are issued with IT equipment, such as a College laptop, phone or iPad, the College uses asset management software Snipe IT to keep a record of what assets have been issued for audit purposes – Privacy Policy – Snipe-IT Free open source IT asset management (snipeitapp.com)

Staff at the College utilise Microsoft 365 tools, including Copilot, to support teaching, learning, and administrative functions. These tools are accessed under the College’s enterprise licence, which provides enhanced safeguards for data protection and information security. Staff are expected to use these systems responsibly and in accordance with the College’s data privacy, safeguarding, and acceptable use policies.

Staff members who work in the Creative Industries department may be required to share their name, college email address and audio with the following third-party software vendors, in order to set up an account to support the teaching of Creative Industries courses:

Adobe Creative Suite – is a suite of graphic design, video editing and web development application software. . Adobe Privacy Centre
Logic Pro – is software used for editing and mixing music. We will also share your audio if using this software – Legal – Privacy Policy – Apple
Pro Tools – is music production software. We will also share your audio if using this software – https://www.avid.com/legal/privacy-policy-statement
Sibelius – is software used to compose music – https://www.avid.com/legal/privacy-policy-statement
Discord – is a communication tool for Esports in order to arrange matches across the college network nationally. – https://discord.com/privacy#8
Trello – Planning/production management software that supports the creation of Gant charts and project related information/work flow – https://support.atlassian.com/trello/docs/trellos-privacy-policy-update-faqs/
Unity- Games development tool/Engine that is industry standard to create 2d and 3d games – Privacy Policy Terms and Conditions | PureWeb
Unreal Engine – is gaming software that helps developers produce games –https://unrealcommunity.wiki/wiki/privacy-policy
Mid Journey – Design and visualisation tool for staff to create resources for delivery –https://docs.midjourney.com/docs/privacy-policy
Chat GTP- Research Tool for AI – this is used for login purpose to access the platform to research the abilities of the app for wider use. https://openai.com/policies/privacy-policy

Staff members in other areas may be required to share their name and college email address with the following third-party software providers in order to set up an account to access blended learning resources:

Teachermatic – Privacy Policy – TeacherMatic
Go Teach Maths – Microsoft Word – Privacy Policy (goteachmaths.co.uk)
Wayground – https://wayground.com/privacy?lng=en
Booklet – https://www.blooket.com/privacy
Linguahouse – https://www.linguahouse.com/privacy-policy
Wordwall – https://wordwall.net/account/privacy

These organisations may transfer your data outside of the EU. We carry out privacy impact assessments to minimise risk where data is shared with a third party

If a staff member is involved in an accident, their name, address, contact details and date of birth will be entered into Smartlog – accident reporting software. The College uses Smartlog to track all incidents and accidents for reporting purposes.

The College also uses Smartlog to manage the mandatory training all college staff have to undertake on an annual basis – https://safesmart.co.uk/privacy-policy/

Any staff member involved in taking students on trips, the College will keep a signed record which confirms your responsibilities in line with College policy and procedure for taking students on trips. This will be stored on the College trip system, Evolve – https://evolve.edufocus.co.uk. The system is used so the trip organiser can ensure the safety of all students while outside of the college premises.

As part of the College’s application for registration with the Office for Students, the College may be asked to provide the following information about its senior staff: salutation; legal first names; preferred first name; surname; role title; month and year of birth; phone number; e-mail address; directorships or trusteeships at other organisations company/charity number and name.

The College will often confirm dates and nature of an individual’s employment to a prospective employer in a reference.

Where a member of staff’s employment with the College requires study, or placement at another organisation it may be necessary for the College to transfer personal data to the third party.

The College may also have to share your personal data with third parties outside the College for other purposes with your consent. However, there may be circumstances where information is shared without consent. This will only be if:

The disclosure is in the legitimate interests of the College or the third party to whom the information is being disclosed.
There is a statutory duty obligation to share the data;
Disclosure is required for the performance of a contract;
Disclosure is necessary to protect your vital interest; for example in medical emergency situations;
Disclosure is made to assist with prevention or detection of crime, or the apprehension or prosecution of offenders;
Disclosure is required by a Court Order;
Disclosure is necessary to assist the College to obtain legal advice.

Sensitive Personal Data
Circumstances may arise where sensitive personal data is shared outside of the College within the EU without first obtaining your explicit consent. This will only occur where one of the following conditions has been met:

The processing is necessary to protect:

Your vital interests and you cannot give your consent or your consent cannot be reasonably obtained
Another person’s vital interest and you have unreasonably withheld your consent

The processing is necessary for the discharge of any function which is designed for the provision of confidential counselling, advice, support or any other service and:

Your consent cannot be given;
We cannot reasonably obtain your explicit consent; or
Requiring your explicit consent would prejudice the provision of that counselling, advice, support or other service.

The processing is necessary to meet our statutory obligations in relation to equality and diversity monitoring.

The disclosure is made for the purpose of prevention or detection of crime, the apprehension or prosecution of offenders and we have received a notice from the police confirming that the disclosure is required for these purposes:

Pursuant to a Court Order requiring disclosure; or
In order for the College to obtain legal advice or for the purposes of any legal proceedings.

Community Speed Watch

The College has signed up to this scheme to support the Cambridgeshire Constabulary in identifying speeding vehicles around the College vicinity, in order to keep the local area safe for students, staff and local members of the community. Personal data of staff who volunteer will be used by the College’s local scheme coordinator and the Constabulary solely for Speedwatch purposes, and their data will be held securely by both parties. Staff who are volunteers will sign an Indemnity Form, agreeing that their data can be held for these purposes. Volunteers can request that their personal contact details be deleted by e-mailing

Volunteers and scheme coordinators are not involved in recording or processing any personal information on speeding drivers. This activity is solely performed by Constabulary personnel within the Speedwatch scheme, and it is processed for a Law Enforcement Function under the Law Enforcement Directive of the GDPR Act

How we transfer your personal information outside of Europe

The following organisations may transfer your data outside of the EU as they are all based in the United States. We carry out privacy impact assessments to minimise risk where data is shared with a third party. Please note that where data is shared below, it is encrypted:

Adobe Creative Suite – . . Adobe Privacy Centre
Logic Pro – Legal – Privacy Policy – Apple
Pro Tools – https://www.avid.com/legal/privacy-policy-statement
Sibelius – https://www.avid.com/legal/privacy-policy-statement
Discord – https://discord.com/privacy#8
Trello – https://support.atlassian.com/trello/docs/trellos-privacy-policy-update-faqs/
Unity- Privacy Policy Terms and Conditions | PureWeb
Unreal Engine – https://unrealcommunity.wiki/wiki/privacy-policy
Mid Journey – https://docs.midjourney.com/docs/privacy-policy
Chat GTP-. https://openai.com/policies/privacy-policy
Wayground – https://wayground.com/privacy?lng=en
Booklet – https://www.blooket.com/privacy
Wordwall – https://wordwall.net/account/privacy

Your rights over your personal information

You have a number of rights over your personal information, which are:

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly used, machine readable format.

Changes to our Privacy Notice

We keep our privacy notice under regular review. If any changes are made to our privacy notice in the future we will contact you.

How to contact us

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

GOVERNORS

The information that you give us

Personal contact details – As part of the College’s Governing Body, the College will collect personal information from you. This will include: name, address, employer’s name, job title, telephone number, email address, gender, disability details and ethnicity and NoK contact details in case of an emergency.
Register of Interests – As part of the Register of Interests, we will collect information on your current employment; appointments (voluntary or otherwise); membership of professional bodies, groups or organisations; companies in which you hold more than 1% of the share capital; gifts in accordance with our Anti-Bribery policy; any other interests not covered by the above. (Register of Interests)
DBS checks – Your name, address and date of birth, and relevant identity documents, will be collected for the Government’s Disclosure and Barring Service (DBS) checks
Images – Images of you (photos or videos) may be used in publicity material, such as adverts, information leaflets, newsletters, press releases or on the internet (websites), to raise awareness of the services provided by the College. We will ask for your consent before using any images in this way.

The uses made of your personal information

Contact you regarding meetings and other relevant events.
Identify possible conflicts of interest, i.e. situations where your interests may (or may appear to) influence your decision making.
Check whether you have any previous convictions which would make you unsuitable for working with children and young people.
Raise awareness of the College’s governance arrangements.
To provide equality and diversity data to the DfE to enable them to monitor sector governance and compliance with equality duties.

The legal basis on which we collect and use your personal information

The Corporation is under a legal obligation, under the Further and Higher Education Act 1992, to maintain a Governing Body as it senior decision-making body. The Corporation’s Instrument and Articles, defined by that statute require the Corporation to maintain contact with governors to conduct the College’s business and the information above is necessary for these purposes. Under the Children Act 2004 the College has a statutory duty to safeguard and promote the welfare of its learners. In addition, the College, as an exempt charity under the Charities Act 2011, as amended has a statutory duty to ensure that its Governors are eligible to act as trustees and therefore collects their declarations and conducts checks to satisfy this requirement.

How long we keep your personal information

Periods of time as set out in the Retention Schedule for governance data which specifies the maximum period data should be kept for business purposes and is available from the Clerk on request.

How we share your personal information

Except as set out below, your contact information will be held securely and not shared with anyone else or made public. However, other Governors will have access to your email address and telephone number.
Governors email addresses will be made available to the FE Commissioner and relevant contacts at the Education and Skills Funding Agency on request where they need direct contact with the Governors.
The Chair’s personal email address will be made available to the FE Commissioner and relevant contacts at the Education and Skills Funding Agency on request where they need direct contact with the Chair.
Your personal information will be made available to the Office for Students as part of the College’s registration application
Your email address will be made available to selected College staff in order to facilitate College Governance business.
A summary of information in the Register of Interests will be made available on the College website
Information for DBS checks will be shared with the Government’s DBS service so that they can check whether you have any previous convictions which would make you unsuitable for working with children and young people.
Where consent is given, photographic images will be stored in a database and may be used for publication (as described above) and will be viewed by the public.

Your rights over your personal information

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly used, machine readable format.

Changes to our Privacy Notice

We keep our privacy notice under regular review. If any changes are made to our privacy notice in the future we will contact you.

How to contact us

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

CCTV DATA

The information that you give us

The College will collect still and video footage from its CCTV and body-mounted cameras (bodycams).
To meet awarding body (CITB) testing centre requirements, the College will collect audio alongside images within exam rooms

The uses made of your personal information

prevent, deter, and detect crime
help provide a safer environment for our students, staff, visitors, and contractors.
protect public safety
meet awarding body requirements
help to provide improved customer service, for example by enabling staff to see customers requiring assistance
monitor operational and safety related incidents
assist with the verification of claims
apprehend and prosecute offenders, and provide evidence to take civil action in the courts

The legal basis on which we collect and use your personal information

The College has a legal obligation to keep students, staff, contractors, and visitors safe when on site and uses CCTV footage where necessary to fulfil its public task of delivering high quality education and training

How long we keep your personal information

We will keep CCTV data for 85 days before it is deleted
Audio and image captured for CITB exam regulations purposes will be stored for 30 days.
In certain circumstances we may need to disclose CCTV images for legal reasons. When this is done there is a requirement for the organisation that has received the images to adhere to the Data Protection Act.
Bodycam footage will be reviewed within 24hrs of recording and if the footage is required for an investigation, the footage will be kept for the duration of the investigation, after which it will be deleted. If the footage is reviewed and no follow-up is required, the footage will be deleted within the 24hr review period.
The College is a registered CITB testing centre. Footage and audio may be shared with CITB in line with their testing centre requirements. You can find their privacy notice here: CITB Privacy policy

How we share your personal information

CCTV footage is accessed only by trained CCTV operators and engineers undertaking system testing and configuration.
We may share footage with the police to assist with the prevention of crime.
To assist with the investigation of potential breaches of college policy, images may be viewed by college managers
Bodycams are used by the College’s Student Liaison Officers. The bodycams will be switched off unless activated by one of the officers. If activated, the officer will alert those in the surrounding area that they intend to record footage. Footage will be captured in situations where there is a risk of harm or where there are concerns over the safety or security of the College or its community. Footage will also be captured where a student is acting in breach of student regulations and expected behaviours and evidence is required.
The College is a registered CITB testing centre. Footage and audio may be shared with CITB in line with their testing centre requirements. You can find their privacy notice here: CITB Privacy policy

How we transfer your personal information outside of Europe

We do not store or transfer your personal data outside Europe.

Your rights over your personal information

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly used, machine readable format.

Changes to our Privacy Notice

We keep our privacy notice under regular review. If any changes are made to our privacy notice in the future we will contact you.

How to contact us

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

WEBSITES AND COOKIES

Our websites, www.camre.ac.uk, www.thepark-cambridge.co.uk use cookies to help provide you with the best experience we can.

Cookies are small text files that are placed on your computer or mobile phone when you browse websites. Our cookies help us to:

Make our website work as you’d expect
Improve the speed/security of the site
Continuously improve our website for you.

We do not use cookies to:

Collect any personally identifiable information (without your express permission)
Pass data to advertising networks
Pass personally identifiable data to third parties
Pay sales commissions.

You can learn more about all the cookies we use below.

Cookie Consent

When you visit our websites, you will be presented with a cookie banner that allows you to choose which types of cookies you consent to. We will not set non-essential cookies (such as performance or functionality cookies) unless you actively give your consent.

You can change your cookie preferences at any time via the cookie settings link on our websites.

More about our cookies

Necessary

Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.

Performance cookies

Performance cookies are used to understand and analyse the key performance indexes of the website which helps in delivering a better user experience for the visitors.

Functionality cookies

These cookies allow the website to remember choices you make (such as user-names) and information you’ve provided (such as applications in progress). This gives a more personal feel to the site and improves usability. The information these cookies collect may be anonymised and they cannot track browsing activity on other sites.

Analytics cookies

Analytics cookies are cookies that track how users navigate and interact with a website. The information collected is used to help the website owner improve the website.

Marketing cookies:

Our website displays advertisements. These cookies are used to personalise the advertisements that we show to you so that they are meaningful to you. These cookies also help us keep track of the efficiency of these ad campaigns.

The information stored in these cookies may also be used by the third-party ad providers to show you ads on other websites on the browser as well.

Turning cookies off

You can switch cookies off by adjusting your browser settings to stop it from accepting cookies (more information on how to do this is available here). Doing so however will likely limit the functionality of our site and a large proportion of the world’s websites use as cookies are a standard part of most modern websites.

Links to other websites

This privacy notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.

How to contact us

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

MARKETING

What this notice applies to:

It applies to information we collect about:

People who use or may use our services. This includes for example:
individuals who study a course with us

employers who purchase training from us
employers who take a student on work experience or placement
employers who seek to recruit or employ an Apprentice with us
Individuals who attend events or webinars with us.
Individuals who are interested in the college’s courses and educational offerings.
Individuals who are customers or interested in the college’s commercial operations eg The Park, Seasons Restaurant and Café, Elements Beauty, Hair Salon, our Gym and Sports Centres, Vitality Salon and venue hire.
Former students may be contacted about relevant courses, alumni information and opportunities or for research purposes
Individuals who request information from us.

If you are asked to provide information to us, it will only be used in the ways described in this Privacy Notice.

The information that you give us

The College collects contact information such as your name and email address to share information about our courses when requested, and to book you onto an event, and takes photos of some students and staff for marketing purposes.

We only ask for as much information as we need to fulfil your enquiry, request or booking and meet our legal obligations. This might include, but is not limited to, the following:

name, date of birth, profession, employer, current school
contact information including, phone, email and postal addresses
information about personal preferences and interests
company information eg financial, staff, training needs analysis
Access and dietary requirements
website and email usage data.

The uses made of your personal information

We use contact information to send you details of our courses or offering, including by email, e-newsletter, SMS, WhatsApp, by phone or mail.
We use your name and contact details to book you onto an open day or other event to find out about our services when you ask us to.
We use your access or dietary requirements to ensure provision is made for you at events or meetings.
We use information collected for events, or registration forms, such as what school you are from, or subjects/ types of course you are interested in, in aggregate form to analyse trends and interest levels to continually improve and inform the college provision.
We gather anonymous statistics about how effective our marketing material is
We use website and email usage data in aggregate to inform performance and improvements of our email communications and website and to improve the relevance of communications to you
We use images of some students and staff on our website, prospectus and other publications for marketing purposes with the consent of those involved
We occasionally use the names of some students and staff in articles on social media, in the press, and on websites to share good news stories.

The legal basis on which we collect and use your personal information

We seek your consent to contact you via email or phone about services, products, offers and other things provided by us which we think may be relevant to you.
We seek your consent to collect and use your personal information in this way. If you sign up to receive one of our e-newsletters, communications or email updates through one of our websites, event registrations or request to receive one of our publications, we will explicitly ask for your consent to contact you by email and phone and to keep your details on file.
We only use these details to provide the service you have requested and for other closely related purposes. For example, we might use information about people who have requested a publication to carry out a survey to find out if they are happy with the level of service they received. When people do subscribe to our services, they can cancel their subscription at any time and are given an easy way of doing this. You have the right at any time to unsubscribe and can do so by clicking unsubscribe on the email or by emailing .
We collect data to provide a service such as an event or webinar, in order to comply with our contractual obligations
We seek consent from our students to use photos in marketing materials such as on our website or in a prospectus. We collect this from enrolment and we check that we have consent in place before we take any photos.
If we wish to use other personal information, for example your name in an article or social media post, we will always ask you first.

How long we keep your personal information

We will keep this data for as long as you are subscribed to our communications. Should you unsubscribe, we will remove your details from any mailing lists, but will retain your details for historic reporting purposes only.

We retain images used for marketing for up to 5 years after collection, for the life of the publication/ communication and for historical archiving purposes.

How we share your personal information

We do not sell or rent your personal information to others.

We share your personal information within the marketing, admissions and enquiries teams, but only to those who need to know it. Or where interest is expressed in a particular service of the college, this data will be shared with that area or our business development or customer enquiry management team.

We may use third party software tools and platforms for processing data or performing specialist services and functions. We will only ever use recognised suppliers who can demonstrate their compliance with GDPR. These include for example:

Hubspot – a digital marketing platform and email marketing platform – to deliver our e-newsletters and marketing emails, push notifications, SMS, Whatsapp and WebChat. We gather statistics around email opening, clicks and website engagement behaviour using industry standard technologies to help us monitor and improve our e-newsletter, email, advertising and website performance and to enable more relevant communications from CRC –https://legal.hubspot.com/privacy-policy
Microsoft Dynamics CRM – a CRM platform to manage customer services for employers, commercial customers, event delegates, training courses and apprentice applicants and to manage marketing contacts, behaviours and interactions and preferences – Privacy and personal data in Microsoft Dynamics 365 – Dynamics 365 | Microsoft Learn
Dash – Digital Asset Management tool to store, sort and organise student and customer images and videos – https://www.dash.app/privacy-policy
EventBrite – an event booking and management tool – https://www.eventbrite.co.uk/help/en-gb/articles/460838/eventbrite-privacy-policy/
Jot Form – to take online applications for college courses, registration forms, consent forms, event bookings and surveys.
Adobe Creative Suite – is a suite of graphic design, video editing and web development application software. . Adobe Privacy Centre
Click Up – Marketing project management system – individuals may be contacted in relation to marketing activities and events- https://clickup.com/terms/privacy
Recite Me – read aloud accessibility software that integrates with the College website – Privacy Policy | Recite Me
Meta – sponsored adverts are used to advertise college open days, events, courses, staff development opportunities and to support with apprenticeship recruitment as well as for our college restaurant, gym and salons. If you engage with one of our advertisements, you will provide your name and contact details so we can provide you with more information about your interest – Meta Privacy Notice
o The college uses Facebook Pixel on the website. This conversion tracking helps us to measure the return on investment of our Meta Ads by reporting on the actions people take after viewing those ads. Advertisers can create pixels that track conversions, add them to the pages of their website where the conversions will happen, and then track these conversions back to ads they are running on Meta. We use the conversion pixel to retarget adverts towards people who have visited the college website on occasion. To opt out of these, click here to update your settings on Meta.
o The college uses WhatsApp Business (part of Meta) to send WhatsApp messages to applicants, event registrants, customers and students.
o We use Lead Generation forms within these platforms to generate enquiries for Cambridge Regional College, we ask you to provide contact details as well as information about course interests and personal circumstances to be able to contact you about appropriate courses. Information submitted within these forms is processed within HubSpot and relies on your Consent. These websites use cookies to collect information about your activities on this and other
LinkedIn – sponsored adverts are used to advertise college open days, courses, staff development opportunities and to support with apprenticeship recruitment as well as for our college restaurant, gym and salons. If you engage with one of our advertisements, you will provide your name and contact details so we can provide you with more information about your interest – LinkedIn Privacy Policy
Google – sponsored adverts are used to advertise college open days, events, courses, staff development opportunities and to support with apprenticeship recruitment. If you engage with one of our advertisements, you will provide your name and contact details so we can provide you with more information about your interest – Google Privacy Notice
Remarketing – We use remarketing services from Google Ads and Meta to display ads based on your previous visits to our website. If the user has accepted our cookie consent banner message, this acts as consent mechanism to enable remarketing/advertising features for these services. These services use cookies and similar technologies to collect information such as your IP address and device identifiers. We only process this data with your consent. You can manage your preferences or withdraw consent at any time via our cookie settings or by visiting Google Ads Settings and Meta Ad Preferences. o You can set your advertising preferences in relation to how Google advertises to you o You can manage your Meta Ad Preferences here.

We may also share your personal information with any data processors we use to carry out certain functions, for example, a mailing house, email service providers, SMS messaging service, or for telemarketing services.

How we transfer your personal information outside Europe

Dash –- https://www.dash.app/privacy-policy
EventBrite –https://www.eventbrite.co.uk/help/en-gb/articles/460838/eventbrite-privacy-policy/
Hubspot – https://legal.hubspot.com/privacy-policy
Microsoft Dynamics CRM –Privacy and personal data in Microsoft Dynamics 365 – Dynamics 365 | Microsoft Learn
Google– https://policies.google.com/privacy?hl=en-GB
Meta – Meta Privacy Notice
LinkedIn – LinkedIn Privacy Policy
WhatsApp Business – WhatsApp Business Privacy Notice

Your rights over your personal information

You have a number of rights over your personal information, which are:

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly-used, machine-readable format.

Changes to our Privacy Notice

We keep our privacy notice under regular review. If any changes are made to our privacy notice in the future we will contact you.

How to contact us

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

CUSTOMER INFORMATION – COMMERCIAL OUTLETS – THE PARK

The Park is a series of commercial outlets at the Cambridge Campus that Cambridge Regional College operates for the public that provides valuable work experience for our students. This includes the restaurant, bistro, hair and beauty salons, sports centre and gym. This notice aims to give you the information on how we collect and process the personal data that you provide when you:

visit one of our salons
visit our website
sign up for a membership or rewards scheme
register an online booking
make an appointment by the phone
sign up to the Park or Salon email alerts

The information that you give us

As customers of the Park services we will collect a range of personal information dependent on the services you use, in the form of:

Identity data – name, title, date of birth, gender
Contact data – email, telephone numbers, address
Transaction data – details about payments to and from you
Profile data – your interest in areas of the Park, and any marketing / communication preferences and opt ins
Allergy test data – including allergy test information and any medical conditions that may affect services.
Usage data – including information about how you use our email communications.

The uses made of your personal information

Administer your bookings and appointments for the restaurant, gym, sports centre, hair and or beauty treatments
Maintain and manage your gym membership
Manage your table bookings
Communicate with you about offers from the Park where you have signed up for information.

The legal basis on which we collect and use your personal information

We need to fulfil our contract with you for the purposes of the service or product purchased.
For marketing purposes where consent is provided.

How long we keep your personal information

Your data will be kept for 6 years

How we share your personal information

The College will share information with College and Park staff to ensure your needs are met while visiting The Park. We may also share your information with the following organisations to administer the services of the Park which act as data processors, these include:

Organisation: Table Agent

Software used for restaurant bookings at The Park

Organisation: Clubwise

For the management of gym membership https://www.clubwise.com/

Organisation: Hubspot

To email customers and subscribers and track web activity.

The College may use third-party contractors to deliver beauty treatments or personal training session. The contractors are obliged to comply with the Colleges data protection and GDPR policy when processing personal data, relating to any client of the commercial salons.

How we transfer your personal information outside of Europe

We do not store or transfer your personal data outside Europe.

Your rights over your personal information

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly used, machine readable format.

If you withdraw your consent, please be aware that we may not be able to proceed with your booking or appointment.

To unsubscribe from Park email and text marketing you can unsubscribe at any time through the unsubscribe link on the email or by emailing

Changes to our Privacy Notice

We keep our privacy notice under regular review. If any changes are made to our privacy notice in the future we will contact you.

How to lodge a complaint

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

COLLEGE VISITORS

The information that you give us

To ensure we deal with all visitors safely while on College premises, we require the following information from all visitors:

Full name
Car registration if applicable

The uses made of your personal information

issue visitors with a visitor pass
ensure we know who is on site in case of emergency
to comply with Health and Safety regulations

The legal basis on which we collect and use your personal information

We are obliged to keep records of visitors to the site to comply with Health and Safety laws.

How long we keep your personal information

We will hold your information for 1 year

How we share your personal information

Organisation: Envoy/Horizon Parking

We are required by Health and Safety law to keep an accurate record of all visitors to the site. Envoy and Horizon Parking are online databases the College uses to store the first and last names of all visitors to the site; as well as your vehicle registration number if you park within one of the College’s car parks. This information is retained within the College and will only be shared with a third party such as the Police for the purpose of preventing crime.

How we transfer your personal information outside of Europe

We do not transfer your personal information outside of Europe.

Your rights over your personal information

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this ();
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly used, machine readable format.

Please note that is you object to the processing of your information, you will not be allowed entry to the site.

Changes to our Privacy Notice

We keep our privacy notice under regular review. If any changes are made to our privacy notice in the future we will contact you.

How to contact us

If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

SUPPLIER INFORMATION

The information that you give us

The College will collect information which is relevant to the procuring of goods and/or services, and making payments. This includes:

Contact details such as names of contacts, address, telephone number(s) and email address
Bank account details

The uses made of your personal information

To ensure the College has contact details and information to support the smooth running of contracts, and to ensure the College pays for procured items and/or services provided.

The legal basis on which we collect and use your personal information
As a publicly funded body the College is required to keep accurate records of financial expenditure.

How long we keep your personal information
6 years after the termination of contract.

The College will share information with staff who are responsible for the procuring of goods and/or services, and making payments. We use a ‘permissions’ system to make sure that staff only have access to the information they need to carry out their jobs. We may also share the information that you give us with the following organisations (or types of organisation) for the following purposes.

Organisations: Funding bodies

Purpose:

As a publicly funded body the College is required to keep accurate records of financial expenditure and may be required to share information with funding bodies such as:

The Education and Skills Funding Agency (ESFA) – ESFA Privacy Notice
The Cambridgeshire and Peterborough Combined Authority – CPCA Privacy Notice
Cambridgeshire Local Authority – CLA Privacy Notice

Organisations: College auditors

As part of our public task, the College will share information with external auditors to ensure internal and regulatory processes with regards to the College’s financial expenditure are being followed. Please get in touch for more information about which auditors we use.

How we transfer your personal information outside of Europe
We do not store or transfer your personal data outside Europe.

Your rights over your personal information

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly used, machine readable format.

If you withdraw your consent, please be aware that we may not be able to continue to work with you as a supplier.

Changes to our Privacy Notice
We keep our privacy notice under regular review. If any changes are made to our privacy notice in the future we will contact you.

How to lodge a complaint
If you want to make a complaint about the way we have processed your personal information, please contact:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

Your Rights

Data Protection law provides the following rights for individuals:

The right to be informed
The right of access
The right to rectification
The right to erase
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling.

You may ask us at any time for information about any personal data we hold about you, or you may request that we correct or delete that information. Where you ask us not to contact you again or to delete information we may need to retain limited information to respect those wishes.

Where we are relying on your consent as a condition for processing your personal data you may revoke your consent to the processing of your data by contacting us.

We may disclose your personal information in circumstances where we have reason to believe that disclosing this information is reasonably necessary to comply with the law or we have another legal basis to do so.

More information can be found in our Data Protection Policy and on the Information Commissioner’s website https://ico.org.uk/

Complaints or queries

If you want to make a complaint about the way we have processed your personal information, please contact our Data Protection Officer Corrin Hoyes:
Data Protection Officer
Cambridge Regional College
Kings Hedges Road
Cambridge CB4 2QT

Freedom of Information

For details on our Freedom of Information Publication Scheme, read more here

SEARCH FOR A COURSE
SEARCH FOR A CAREER

SEARCH FOR A COURSE

Search for a Career

#WeAreCRC

SERVICES FOR THE PUBLIC

The Park Restaurant & Cafe

The Park Gym & Sports Centre

Vitality Hair & Beauty Salon

Energy Training Centre

CAMBRIDGE CAMPUS

Kings Hedges Road
Cambridge
CB4 2QT

01223 418200

HUNTINGDON CAMPUS

California Road
Huntingdon
PE29 1BL

01480 379100
huntingdon@camre.ac.uk

COURSE ENQUIRIES

01223 226315
enquiry@camre.ac.uk

HOW TO FIND US

Cookie	Duration	Description
__atuvc	13 Months	Cookie is used by: AddThis The functionality is: to store performed actions on the website. The purpose is: Necessary
__atuvs	1 Year	Cookie is used by: AddThis The functionality is: to store performed actions on the website. The purpose is: Necessary
__hssc	30 minutes	This cookie keeps track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp. It expires in 30 minutes.
__hssrc	session	Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie doesn't exist when HubSpot manages cookies, it's considered a new session. It contains the value "1" when present. Expires at the end of the session.
__hstc	13 months	The main cookie used for tracking visitors. Contains the domain, HubSpotutk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). Expires in six months.
CONSENT	2 Years	YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data.
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Necessary".
CookieLawInfoConsent	Session	Store whether the user has agreed to cookies
courseBasket	1 Month
hubspotutk	13 months	Tracks a visitor's identity. It's passed to HubSpot on form submission and used when deduplicating contacts. It contains an opaque GUID to represent the current visitor.
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
VISITOR_INFO1_LIVE	5 months 27 days	A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface.
wordpress_test_cookie	Session	Cookie is used by: WordPress The functionality is: to read if cookies can be placed. The purpose is: Functional
wp_lang	Session	Cookie is used by: WordPress The functionality is: to store language settings. The purpose is: Functional

Cookie	Duration	Description
__atssc	Session	Cookie is used by: AddThis
_fbp	3 Months	Cookie is placed by: Facebook The functionality is: to store and track visits across websites. The purpose is: Marketing/Tracking
at-rand	never	AddThis sets this cookie to track page visits, sources of traffic and share counts.

Cookie	Duration	Description
_ga	2 Years	Cookie is used by: Google Analytics The functionality is: to store and count pageviews. The purpose is: Analytics
_gat_UA-4634400-1	90 Days	Cookie is used by: Google Ads, Google Analytics The functionality is: to store and count pageviews. The purpose is: Analytics
_gid	1 Day	Cookie is placed by: Google Analytics The functionality is: to store and count pageviews. The purpose is: Analytics
loc	1 Year, 1 Month	AddThis sets this geolocation cookie to help understand the location of users who share the information.
YSC	session	YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages.