Please read it carefully, as by using the pages of the UCM, or our services, you will be deemed to have read and accepted its terms.
“UCM” means University College Isle of Man.
For the purpose of the General Data Protection Regulation (GDPR) 2018 (the Act), the data controller is University College Isle of Man c/o Homefield Road, Douglas. Isle of Man. IM2 6RB. British Isles email: email@example.com.
The Data Protection Officer for UCM and the Department of Education, Sports and Culture is the Legal and Administration Manager, who can be contacted at the Department of Education, Sport and Culture, Hamilton House, Peel Road, Douglas. Isle of Man. IM1 5EZ
Accessing our site
University College, UCM, is a college for higher and further education and we are committed to processing all personal information about our students, staff or visitors in ways that comply with the College’s legal and regulatory obligations, and to being clear about what it does with personal information.
The data we collect to provide our services, we take as a data controller. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.
We may collect personal information when:
• you use our website
• you apply to or enroll with the college as a student
•• you are a recipient of other training or events we provide.
• you use our commercial services such as room hire, salons or commercial restaurant.
We may collect the following types of information:
• Name, Address, Email, Phone/mobile, DOB
• Previous school, Course fees
• Parent name / email, Emergency contact (name/relationship/email/mobile/landlines)
• Car registration
• Referee details (name/address/phone/email)
• Employment status / details
• CCTV footage
• Information obtained through electronic means such as swipe card records.
• Information about your use of our information and communications systems
Special Categories of data
We also collect special category data, necessary for legal requirements and reporting but also to help us provide you with the most effective education and to keep you safe whilst in the College.
Special categories of particularly sensitive personal information require higher levels of protection. We need to have further justification for collecting, storing and using this type of personal information and we do this with either your consent or as permitted by the Isle of Man data protection legislation
The special category information we collect includes:
• Learning difficulty/disabilities
• Sexual Orientation
• Disability & learning support,
• Household status
• Details of any Criminal convictions
Why do we collect this information?
The personal data collected is needed in order to
• provide you with higher and further education;
• to give our staff information necessary to facilitate your learning;
• for necessary funding and administrative purposes;
• to meet our legal and regulatory obligations as a college;
• promote the college to prospective students or clients
Information we may collect through our website is needed
• to help identify your computer;
• analyse data about web page traffic and to help us tailor our website for your needs;
• to allow students, staff and guests to access information they may require.
We also collect personal contacts from our Business and Corporate clients for our legitimate interests. Almost entirely, these contacts are corporate or business individuals and while this is still categorised under Isle of Man legislation as personal data we are aware that it can be used for business-to-business purposes.
How do we collect this information?
We collect personal information:
• directly from students: e.g. when a student applies to join us, attends a promotional pre enrolment event or at enrolment;
• from publicly available sources: eg. networking, social media, internet services, exhibitions, direct referrals, other Corporate bodies;
• from guests or visitors
We are committed to keeping your information up to date as far as is reasonably possible. However, if you believe that we have made an error, then please contact us as we have outlined below and we will use reasonable endeavors to correct your record.
We also capture data using Cookies. A cookie consists of a piece of text sent by a web server to a web browser, and is stored by the browser. The information is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser.
How do we use the data we collect?
The majority of our data is held within our student database, accessible only to those staff who need access.
Any processing activities we undertake are fully compliant with Isle of Man and UK data protection legislation
Information collected may be used for the following:
1. On internal displays (including digital display) – to inform students of college related activities and news;
2. disciplinary/grievance procedures;
3. attendance monitoring;
4. correspondence to students relating programme of study;
5. distribution of examination/registration documents;
6. storage and usage of student image to create ID Cards and for identification purposes;
7. contact to students via text, e-mail or post using information collected on the enrolment/learning agreement;
8. the provision of advice and support to learners via, amongst others, Student Support & Inclusion;
9. registration with awarding bodies;
10. we make use CCTV cameras throughout the College for security, crime prevention and safeguarding purposes, both for the public and vital interests of our visitors, staff and students
12. disclosing information where necessary, either with your consent or as required by law to:
• Local Authority;
• sponsors/employers (where stated on the Learning Agreement)
• external work based training providers;
• professional and statutory bodies;
• Isle of Man Government agencies including the Police, if deemed necessary and within the confines of legislation. In particular in relation to safeguarding of young people and vulnerable adults.
• funding agencies:
13. Disclosing information on your learning status including – attendance, awarding body entry and exam attendance, if you are a 16-18 year old student (at the start of your learning programme). This data will only be disclosed to the next of kin(s) (i.e. parent/guardian) details you provided at enrolment. If your next of kin/guardian details change during your time at the College, please contact UCM’s support team.
14. Marketing purposes, such as to keep you informed of College activities and services which may interest you.
Keeping your information safe and secure.
UCM is committed to keeping your personal information secure to protect it from being inappropriately or accidentally accessed, used, shared or destroyed, or lost.
In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality
In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.
We currently do not share any data outside the UK but should we need to transfer personal information to third parties located outside the UK, we will ensure that information is protected to a level which meets the requirements of the Isle of Man and UK data protection regulations
If we provide you with a login and password in order to access any of our systems, you are responsible for keeping your password and user details confidential and safe. We will never ask you for your password, never disclose it to anyone.
Third party access
Access to your personal information is only allowed when required by law or is required in order to fulfil our service obligations. We do not, and will never, sell or share your personal information with other third parties.
All our third-party service providers and other entities in the College are required to take appropriate security measures to protect your personal information in line with our policies. .
Links to other websites:
Our website and email newsletters and bulletins may contain links to other websites of interest.
However, you should note that we do not have any control over these other websites. Once you have used any of these links to leave our site, therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting these sites and such sites are not governed by this privacy statement.
How long do we keep personal information?
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
• For our students we are required by law to retain all the personal details we collect for as long as they remain a student and only certain personal details after they leave us in line with the UCM Retention Policy.
• For anyone who enquires about joining the college but does not register we will hold these personal details for a maximum of two years
Details of retention periods for other aspects of your personal information are available in our retention policy which is available from the College Data Protection Officer (see contact details below)
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. Once you are no longer a student, worker or contractor of the College we will retain and securely destroy your personal information in accordance with our data retention policy or applicable laws and regulations.
UCM undertake limited marketing activity and only necessary to promote the college to prospective students or sponsors. This is completed for our legitimate interests and will include:
• E-Communications such as keep warm from application to enrolment, emails to event data where you have opted in
• Social Platform activity, sharing information with Facebook, Instagram, Twitter and LinkedIn
• Events to profile the college to new entrants or prospective new markets
Any marketing we undertake is made in a fully compliant manner as governed by Isle of Man data protection regulations with the contacts being given the option to opt out from such contact.
Controlling your personal information
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.
If you want to review, verify, correct or question anything detailed in this policy or anything about your personal information, please contact the Department Data Protection Officer in writing.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances to the extent permitted by law
Under certain circumstances, by law you have the right to:
• request details of personal information which we hold about you
• restrict the collection or use of your personal data
• to withdraw any permission you have given us to use your data
• or even to delete any records that we may hold;
Data Protection Officer
UCM operates within the Department of Education, Sport and Culture who has an appointed Data Protection Officer (DPO) to oversee compliance with this Privacy Notice. If you have any questions about this Privacy Notice or how we handle your personal information, please contact the DPO via the contact details below.
You have the right to make a complaint at any time to the Information
Commissioner's Office (ICO); the Isle of Man supervisory authority for data protection issues.
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
Department of Education, Sport and Culture
Data Protection Officer: Andrew Shipley
Department of Education Sport and Culture