• 1. What information do we hold about you?

    • 1.1. We carry out CCTV recording across the College’s sites. The College is registered with the Information Commissioner’s Office (ICO) for this purpose.

    • 1.2. CCTV covers some interiors and exteriors of buildings. If you attend, visit or work at Leicester College we may record moving images of you as you enter and move about the College.

  • 2. Why do we collect this information?

    • 2.1. We have installed CCTV and make recordings in order to enable us to keep students, staff and visitors safe, to help investigate and provide evidence for any incidents including health and safety incidents, crime prevention and detection and equivalent malpractice.

  • 3. Who might we share your information with?

    • 3.1. We will keep this information about you confidential.

    • 3.2. We may be asked to share data with other third parties where there is a lawful reason for their request. These may include: the police, social services, legal firms acting on your or the College’s behalf, insurance companies, or other government agencies.

    • 3.3. We will not share your details with any other third party including commercial companies without your consent to do so.

  • 4. What do we do with your information?

    • 4.1. We collect this information which is is held on the CCTV system.

    • 4.2. The CCTV may be viewed by security staff and in the event of an accident or other incident may be viewed by other members of the College’s staff.

  • 5. How do we protect your data?

    • 5.1. We take the security of your data seriously and have internal policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed inappropriately.

    • 5.2. Where we engage third parties to process personal data on our behalf, we do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.

  • 6. How long do we keep this information about you?

    • 6.1. We keep information recorded on CCTV for 30 days after which time it is deleted. Where recordings are requested or required to provide evidence of incidents, the relevant section of recording will be downloaded and stored on CD or College servers. These recordings will be kept in line with the College’s records retention guidelines.

  • 7. How can I access the information you hold about me?

    • 7.1. Individuals whose information is recorded have a right to be provided with that information or to view that information. The rights of other individuals will always be taken into account.

    • 7.2. You can make a request by asking at the relevant College site’s Information Centre or by emailing dpo@leicestercollege.ac.uk.

  • 8. WHAT ARE MY RIGHTS?

    Subject access requests

    • 8.1. The General Data Protection Regulation (GDPR) grants you the right to access particular personal data that we hold about you. Right to rectification

    • 8.2. You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data we hold concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

      Right to erasure

    • 8.3. You have the right to obtain from us the erasure of personal data concerning you without undue delay.

      Right to restriction of processing

    • 8.4. Subject to exemptions, you have the right to obtain from us restriction of processing where one of the following applies:

      • The accuracy of the personal data is contested by you and is restricted until the accuracy of the data has been verified;

      • The processing is unlawful and you oppose the erasure of the personal data and instead request the restriction in its use;

      • We no longer need the personal data for the purposes of processing, but it is required by you for the establishment, exercise or defence of legal claims;

      • You have objected to processing of your personal data pending the verification of whether there are legitimate grounds for us to override these objections.

        Notification obligation regarding rectification or erasure of personal data or restriction of processing

    • 8.5. We shall communicate any rectification or erasure of personal data or restriction of processing as described above to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. We shall provide you with information about those recipients if you request it.

      Right to data portability

    • 8.6. You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller, without hindrance from us.

      Right to object

    • 8.7. You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, including any personal profiling; unless this relates to processing that is necessary for the performance of a task carried out in the public interest or an exercise of official authority vested in us. We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of you or for the establishment exercise or defence of legal claims. Right to not be subject to decisions based solely on automated processing

    • 8.8. We do not carry out any automated processing leading to an automated decision based on your personal data. Accuracy of information

    • 8.9. In order to provide the highest level of customer service possible, we need to keep accurate personal data about you. We take reasonable steps to ensure that accuracy of any personal data or sensitive information we obtain. We ensure that the source of any personal data or sensitive information is clear and we carefully consider any challenges to the accuracy of the information. We also consider when it is necessary to update the information, such as name or address changes and you can help us by informing us of these changes when they occur.

  • 9. Who can I contact if I have any questions or concerns?

    • 9.1. If you have any questions or queries which are not answered by this Privacy Notice, or have any potential concerns about how we may use the personal data we hold, please write to the Data Protection Officer at Leicester College, Freemen’s Park Campus, Welford Road, Leicester, LE2 7LW or email dpo@leicestercollege.ac.uk.

    • 9.2. If your complaint is not resolved to your satisfaction and you wish to make a formal complaint to the Information Commissioner’s Office (ICO), you can contact them on 01625 545745 or 0303 123 1113. You also have the right to judicial remedy against a legally binding decision of the ICO where you consider that your rights under this regulation have been infringed as a result of the processing of your personal data. You have the right to appoint a third party to lodge the complaint on your behalf and exercise your right to seek compensation

  • 10. Privacy notice changes

    • 10.1.This Privacy Notice is regularly reviewed. This is to make sure that we continue to meet the highest standards and to protect your privacy. We reserve the right at all times, to update, modify or amend this Notice. We suggest that you review this Privacy Notice from time to time to ensure you are aware of any changes we may have made, however, we will not significantly change how we use information you have already given to us without your prior agreement. The latest version of this Notice can be found at on the College’s website.

Updated August 2023