PRIVACY STATEMENT

Your privacy is important to us. That’s why we treat your data with the utmost care, and we don’t release it to outside companies for their marketing purposes.

Data Security

The rules about how companies can store, process and use your personal data changed on May 25 in 2018, when the General Data Protection Regulations (GDPR) came into effect. This page has been created to help you understand how we use your data and why, and what your rights are. We know there’s a lot of information here, but we want you to be fully informed.

We use your data to help us give you the best possible service. That includes helping students through the application process and helping them to succeed on their courses, and working closely with employers. You can find out more about how long we store your data by reading our Data Retention Policy on our Policies page.

If you have any questions you’re welcome to contact our Data Protection Officer, Susanne Wicks, using the contact details below.

Data Protection Officer, Susanne Wicks

dataprotection@nescot.ac.uk
020 8394 3004
Nescot, Reigate Road, Ewell, Epsom, KT17 3DS

For the purposes of GDPR, Nescot is the ‘data controller’ of personal information about you. You have certain rights concerning your data, including getting it corrected or deleted, and getting a copy of it. You also have a right to complain. This privacy notice has been prepared in accordance with the GDPR (EU) 2016/679 and the Data Protection Act 2018.

Updating your data

Change of details form

Complete this form to request a change to the personal information that we hold about you.

"*" indicates required fields

Part 1 – Your details

Name*
DD slash MM slash YYYY

Part 2 – Information that you would like changed

Part 3 – Evidence (change of name only)

We require a copy of official documentation to support this request. Once the evidence has been received it will be immediately destroyed.
Evidence provided
Max. file size: 5 MB.

Data subject access requests

Data subject access request form

This form should be completed by any individuals that wish to access their personal data, or those acting on behalf of those individuals. Please complete all sections and read through the Guidance Note at the end of the form.

1. Personal details of the data subject

Name(Required)
Previous name(s) where applicable
Date of birth(Required)
Current address(Required)
Previous address
(if the above address is different to that which the college holds)

2. Data subject's relationship with the college

Please choose from the following
Please specify
College start date
College end date (if applicable)
Staff only

3. Your details (if different to section 1)

Otherwise, please go to Section 4.
Name
Date of birth

4. Proof of ID and address

If you are requesting a copy of your own personal data, you must provide proof of your identity and proof of your address, to ensure that nobody can access your information illegally.
Passport, driving licence, birth certificate, ID card.
Drop files here or
Max. file size: 5 MB.
    Utility bill, bank statement, credit card statement.
    Drop files here or
    Max. file size: 5 MB.
      If you are a third party requesting personal data on behalf of someone else, you must provide written signed authority of the individual and proof of their identity.
      Drop files here or
      Max. file size: 5 MB.

        5. The data request

        In order to assist us with your request, please specify the information you require by ticking the relevant box(es).
        Students(Required)
        Staff(Required)
        Please specify
        Date range from
        Please specify the date range you would like to receive emails from and to
        Date range to
        Please specify the names of email account holder(s) (if known) that you believe hold emails “about you”

        Guidance notes

        1. When will I hear back?

        The College will aim to send you an acknowledgement email within five working days. However please note this may not be possible in busy periods and outside of term time. Our term dates can be found on our website. We will always aim to send you your response within a month of receipt of the completed documentation. However, in some cases, where a request is particularly complex, there may be a requirement to extend this time. In these cases, we will communicate the revised timescales with you in advance of undertaking the request.

        2. Fees

        The College will not generally charge for subject access requests, but we may charge a ‘reasonable fee’ when a request is complex or excessive. We may also charge a reasonable fee to comply with requests for further copies of the same information. Any fee will be based on the administrative cost of providing the information and will be communicated to you in advance of undertaking the request. If your request were to change after the College has commenced the collation of the data, then any agreed fee may be revisited.

        3. Please remember

        When submitting your request, please ensure that you have completed all relevant sections to the best of your ability, signed the declaration, enclosed relevant forms of identification, enclosed a copy of written authority from the Data Subject or written authority such as Power of Attorney (if applicable), provided as much information as you can to help us fulfil your request. Failure to submit a completed an accurate form could result in delays or the request being rejected. We will not action your request until all relevant information and evidence has been provided.