The privacy of our stakeholders is important to us. The General Data Protection Regulation (GDPR) requires organisations to process personal data in a transparent manner. Our Privacy Notices describes how Derby College Group uses the personal information it is provided with. A copy of all our Privacy Notices can be found at the links below:
The Privacy Notices will be updated when required and the latest version is published on the DCG website. If you have any questions about this policy, please contact the Data Protection Officer.
The Data Protection Act 2018 and Derby College Data Protection Policy gives any individual the right to obtain confirmation that their data is being processed, and where this is the case, access to the personal data. The right of access to this information is referred to as Subject Access Request (SAR).
The College will endeavour to provide access to personal data within one month of receipt of a subject access request. If a request is complex, an extension of a further two months will be requested from the individual making the request.
A copy of the information will be provided free of charge however, a ‘reasonable fee’ may be charged is a request is unfounded or excessive.
Persons who are entitled to access personal data under this procedure are:
Please note Derby College will use reasonable means to verify the identity of the individual making the request
One of the key principles which underpins the Data Protection Act 2018 is the right of an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing. This is also known as the right to be forgotten.
Individuals may have a right to have personal data erased and to prevent processing in specific circumstances such as:
Please complete the form below. Each request will be dealt with on a case by case basis.
Please note that the right to erasure does not provide an absolute ‘right to be forgotten’. Under the Data Protection Act 2018 the College can refuse to comply with a request for erasure where the personal data is processed under one of the specific reasons outlined on the ICO website