Pre-applicant enquirer privacy notice
Mont Rose College is the Data Controller and Processor for your personal information and is subject to the Data Protection Act 2018 (DPA) and the General Data Protection Regulation (GDPR).
Mont Rose College will be referred to as The College in this privacy notice.
This privacy notice explains how the College uses and shares your personal data and outlines your rights in relation to the personal data we hold.
What information are we collecting?
Mont Rose College may obtain, hold and process data of individuals who enquire about the College or book an event including personal and contact details.
Personal data held by the College relating to enquirers/event bookers are obtained directly from the service user, or in some cases from a third party organisation involved in providing data to the College (e.g. UCAS or a listings website you have registered with).
Under GDPR, we are able to process and control your personal data with your fully and freely given consent.
Why are we collecting your data?
Mont Rose College holds the personal data of its enquirers and event bookers in order to manage our student recruitment services and processes. The only information required for these purposes is obtained and processed, and without it the College may not be able to provide its services to you.
How will we use this information?
Mont Rose College will use personal data to administer your request for course information or process your event booking.
We will also use your data to undertake statistical analysis, conduct market research and internal filtering purposes in order to ensure the information we send is relevant to you.
Viewing and maintaining personal data
Users of our service are able to view personal data and communication preferences via the Preference Centre or opt-out on the bottom of emails. Please contact the Processor and Controller, Mont Rose College, for further information or if you have any questions about the data we hold.
What is the legal basis for processing the data?
Prospective student personal data is collected and processed by the College as necessary for the performance of a contract under which the College provides services to applicants.
How long will you retain data?
Our retention policy has been developed in accordance with The General Data Protection Regulation (GDPR) “Data Protection Principles” set out in GDPR Article 5.
GDPR article 5 sets out 7 key principles:
- Lawfulness, fairness and transparency
- Purpose limitation
- Data minimisation
- Storage limitation
- Integrity and confidentiality (security)
The College, in line with the above principles, states in its own policy that data is:
- Adequate, relevant and limited to what is necessary in relation to the purposes
- Kept in a form which permits identification of data subjects for no longer than is necessary;
- Accurate and, where necessary, kept up to date.
What are my rights and how can I enforce them?
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling.
How can you raise concerns about the processing of personal data?
If you have any feedback or concerns in relation to the processing of your personal data please contact Mont Rose College. If attempts to resolve a concern or complaint informally are not successful and you feel you have reason to complain, you may submit a formal complaint. For more information, see our policy for appeals and complaints (can also be found: https://mrcollege.ac.uk/policy-procedure-for-admissions-appeals-and-complaints-2/ )
External advice is available from the Information Commissioner who can be contacted via:
- Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK95AF
- 0303 123 1113
- ICO website