Fearless Glasgow Privacy Notice

Identity of data controller

Glasgow Clyde College is the data controller of your personal data.

Purpose for collection/processing

If you use the Report and Support Platform to report gender-based violence that has affected you, or you use the platform to report an incident on behalf of another person, the College may collect personal data about you. This enables the College to respond to the incident you have reported and provide you with support and assistance, should you need it.

Legal basis

The legal condition which enables the College to process your personal data is found in the UK General Data Protection Regulation (“UK GDPR”):

Article 6(1)(a) consent

Where special categories of data are processed we will normally have your explicit consent or another legal reason within Article 9(2) of GDPR will apply.

Whose personal data is being collected/processed?

Student, staff and visitor personal data may be collected and processed.

What personal data is collected

Personal data will be collected from you when you enter information into the Report and Support Platform. The type of personal data that will be processed depends on the amount of information you provide and may include:

·         Your name and contact information*;

·         Names and contact details of third parties; and

·         Details of the incident you wish to report, which may contain personal data which is sensitive in nature and is considered special category data.

*You may choose to submit a report anonymously. Please note that if you do submit a report without providing your name and personal contact information, the College will be unable to contact you in connection with its investigation into your report. 

How is the personal data collected?

•         The personal data is collected directly from you when you enter information into the Report and Support Platform.

Sharing your personal data with third parties.

The personal data you provide will be treated confidentially. The College does not share your personal data without your consent other than in the circumstances noted below.

•         If your physical or emotional wellbeing is at risk.

•         If we believe you, or another person are in danger of serious harm.

In these circumstances, the College may share your personal data with Police Scotland and the lawful basis for doing do is that it is necessary to protect the vital interests of you, or another person (Article 6(1)(d) UK GDPR)

The College may disclose personal data where we have been given information which would render it liable to civil or criminal court procedure should it not be disclosed and the lawful basis for doing so is that it is necessary to comply with a legal obligation that the College is subject to (Article 6(1)(c) of UK GDPR).

The Report and Support Platform is provided by a third-party supplier called Culture Shift and Culture Shift may have access to the information you enter into the platform in the course of the provision of its services. Information about Culture Shift can be found here: https://www.culture-shift.co.uk/

How is the personal data stored and kept securely?  

Personal data is retained on the Report and Support Platform and the College’s secure systems and kept securely on or in College equipment in line with College information security and data protection policies.

The College has entered into a contract and data sharing agreement with Culture Shift, and Culture Shift may only process the personal data you provide in accordance with the College’s instructions.

How long is the personal data kept?

Please see the College’s Records Retention Schedules.

Will the information be used for any automated decision making?

No

Is personal data transferred outside the European Economic Area?

No

Your rights

You have a number of rights under data protection law including the right to request access to your personal data, these include:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

 Please contact dpo@glasgowclyde.ac.uk if you wish to make a request. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

How to complain

If you have any concerns about our use of your personal information, you can contact dpo@glasgowclyde.ac.uk.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:           

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Data protection officer

Enquiries relating to data protection should be made to the College’s Data Protection Officer. email: dpo@glasgowclyde.ac.uk.