First Campus – South East Wales Reaching Wider Partnership Privacy Notice
The South East Wales Reaching Wider Partnership (First Campus) is funded by the Higher education Funding Council for Wales (HEFCW) Reaching Wider Programme. Our partners are University of South Wales including the Royal Welsh College of Music & Drama, Cardiff Metropolitan University, Cardiff University, Open University, Coleg Gwent, Coleg y Cymoedd, Bridgend College, Cardiff and the Vale College, The College, Merthyr Tydfil, local authorities and schools in South East Wales.
First Campus take the protection of the data we hold about participants, teachers and other contacts seriously and is committed to protecting the rights of individuals in line with the Data Protection Laws.
Each of the three partner universities: The University of South Wales, Cardiff University and Cardiff Metropolitan University are data controllers on behalf of First Campus. The University of South Wales is the lead partner and has overall responsibility for ensuring that appropriate processes are in place at each of the three universities for the collection, storage, processing, maintenance, cleansing and retention of personal data including data defined as sensitive. As lead partner, the University of South Wales has a Data Protection Officer who can be contacted through firstname.lastname@example.org
The following document explains why we (First Campus) collect data, how we process it and the steps, we take to ensure data security at all stages.
What information does First Campus collect about participants?
We collect the following compulsory pieces of information for all participants who take part in our activities, this helps First Campus demonstrate that our activities are engaging young people from backgrounds that are currently under-represented in High Education. Information indicated by a * may be shared with third parties for anonymised research purposes including: Swansea University (SAILS); NHS Wales Informatics Service (NWIS) and Universities and Colleges Admissions Service (UCAS).
- * Name
- * Date of birth
- * Gender
- * Home address and postcode
- * Unique Learner Number
- * School / College / Organisation
- * Whether the participant’s parent(s) or brothers and sisters went to University.
(providing this information is not essential but allows First Campus to report on the number of participants who are potentially the First in their Family to go to university)
- Whether the participant has experience of being in the care system.
(providing this information is not essential but it allows First Campus to report on an under-represented group and to provide priority access to some events)
First Campus also request optional information about
- Photographs and films consent – During events First Campus staff or third parties contracted by First Campus to deliver services may take and publish photographs and films to be used for marketing purposes such as on our website, in our newsletter or within social media accounts.
- Whether a participant / parent /guardian would like to receive marketing communication from First Campus about other relevant activities.
- Language preference
1Disability and Ethnicity information will not be shared with third parties but will be used to inform the Equality Impact Assessment.
For residential and out of school activities, First Campus also require additional mandatory information so that First Campus staff and third parties delivering on behalf of First Campus, can provide appropriate support and ensure the health and safety of all participants and staff. These include:
- Disability information
- Emergency contact details
- Dietary requirements
- Cultural requirements
- Medical arrangements
- Medication taken
- Parental consent to provide paracetamol to under 16s should the need arise
What information does First Campus collect about teachers /other contacts?
Through an online form on the First Campus website, we collect the following pieces of information from teachers and other contacts who would like to be kept informed of First Campus activities; the newsletter and other relevant opportunities for their school/college.
- Contact details
- Subject area
- Position held at school/college
- Teaching responsibility for which year groups
- Contact language preference
- School / College
Why does First Campus collect this information?
First Campus collects data on individuals for the following five main reasons.
- For the purposes of monitoring which allows First Campus to:
– fulfil compulsory external reporting requirements to regulatory bodies such as the Higher Education Funding Council for Wales (HEFCW).
– provide a clear picture of the activities we deliver and the people we work with.
– ensure that we are reaching those that could benefit most from outreach activities.
- For the purposes of research and evaluation which helps us to assess the effectiveness of different initiatives on widening participation to Higher Education. This includes the anonymous long-term tracking of participants’ education journeys, to identify how many First Campus participants go on to study at university.
- Identify participants who belong to groups, which are under-represented in Higher Education and to ensure that people from these groups are given priority access to First Campus activities. For further information on this please see www.hefcw.ac.uk/policy_areas/widening_access/reaching_wider_initiative.aspx
- Ensure the health and safety and wellbeing of all participants in our programmes and to assist with pastoral and welfare needs e.g. ensuring that we are aware of medical conditions and disabilities.
- To send relevant and necessary information regarding forthcoming activities as well as marketing communications.
What is the legal basis for processing the data?
Widening participation is a key component of the Welsh Government’s education policy and is represented in the three University’s civic mission. First Campus processes personal data as it is necessary for it to perform a task in the public interest and for its official functions.
The legal basis for processing special category data is on the basis that it is in the substantial public interest and is necessary for statistical purposes to monitor equality of opportunity in accordance with the Equality Act.
The legal basis for processing the use of photographs and marketing communications is Consent.
We do not process any data without explicit consent from the parent/guardian for children aged 16 and under who are still in compulsory education.
How will First Campus process the data
- For initiatives, which are organised directly with schools, a participant information form and explanatory letter are sent home to parents via the school. The form collects information about the participant along with consent for the information to be used for the purposes outlined above. The form is returned to the school and the school arrange the secure transfer of the information to the relevant First Campus coordinator.For initiatives, which involve participants applying directly to First Campus data may be requested either via an online form over a secure URL or via a paper form which is returned directly to the relevant First Campus coordinator.
- The First Campus coordinator may use this information to create a secure attendance register, which will be stored on a secure university server. Access to this information is restricted to First Campus members of staff and third parties contracted to deliver activities.
- Next, the participant information is visually checked and transferred from the paper forms into the secure online database Upshot, Upshot can only be accessed by First Campus staff.
- For the purposes of monitoring and research, compulsory data will be shared with third parties including Swansea University (SAILS); NHS Wales Informatics Service (NWIS) and Universities and Colleges Admissions Service (UCAS) to enable anonymous long-term tracking of participants’ educational journey into Higher Education.
- All internal and external reporting which utilises the collected data, does so in an aggregated fashion, meaning that only totals are shown, so individuals’ data is never disclosed within a report.
How long will First Campus retain the information?
First Campus will retain participants’ data in line with the First Campus Retention Schedule.
In summary: paper copies of information will be retained for 1 complete academic year after the activity took place. E.g. for an event that took place 20th November 2014 the forms would be reviewed and permanently deleted on 31st August 2016.
Electronic records are held on a secure online database ‘Upshot’ for a period of 10 years after an event, with data reviewed annually on 31st August.
Data shared / linked with third parties for research purposes will remain within the third party databases for the lifetime of the third parties’ projects, as individuals are no longer identifiable.
What are my rights?
Under the GDPR you have rights relating to your personal data which could include: to object to the processing of your personal information, to access, to rectify, to erase*, to restrict and to port your personal information.
*The right to be forgotten will only apply to data stored by First Campus which has not been shared. Information which has shared with third parties, such as NWIS, SAILS and UCAS, will have been anonymised and linked to other educational data for research purposes and will NOT have the right to be forgotten, as individuals are no longer identifiable. Data will be shared with third parties on an annual basis on 1st September.
As lead partner for the First Campus Partnership any requests or objections should be made in writing to the University of South Wales’ Data Protection Officer:-
University Secretary’s Office, University of South Wales Pontypridd, CF37 1DL
Security of data?
Data protection legislation requires First Campus to keep your information secure. This means that your confidentiality will be respected and all appropriate measures will be taken to prevent unauthorised access and disclosure. Only members of staff who need access to relevant parts of your information will be authorised to do so. All personal data which is stored electronically will be subject to password and other security restrictions, while paper files will be stored in secure areas with controlled access.
Some processing of data may be undertaken on the behalf of First Campus by an organisation contracted for that purpose. Organisations processing personal data on First Campus’ behalf will be bound by a Data Processing Agreement which will outline their obligation to process personal data in accordance with all Data Protection legislation.
How do I complain?
If you are unhappy with the way in which your personal data has been processed you may in the first instance contact the University Data Protection Officer using the contact details above.
If you remain dissatisfied then you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at: –
Information Commissioner’s Office
Wycliffe House, Water Lane,
Wilmslow, Cheshire, SK9 5AF