UCS College Group is the data controller for personal data.
This refers to Bridgwater College, Cannington College, Strode College, Taunton College, and as well as University Centre Somerset.
Address: UCS College Group, Bath Road, Bridgwater, Somerset, TA6 4PZ
We are registered with the Information Commissioner: Z4677243
Data Protection Officer (DPO): Emma Kilner – dpo@ucscollegegroup.ac.uk
Personal data we collect
Depending on your relationship with us (for example, student, apprentice, applicant, staff member or employer partner), we may collect and process personal data including:
- identity and contact details
- date of birth and demographic information
- education and assessment records
- attendance, progress and support information
- financial and funding‑related information
- special category data, such as health or learning support needs
- photographs, CCTV images and ID documentation
- IT usage data, including access to College systems and networks
Full details of the data collected for each group are set out in the relevant Privacy Notices located below:
Details of what is monitored, why, and how long information is retained are set out in the relevant Privacy Notice located above.
We use personal data for purposes that include:
- administering applications, enrolment and education or training
- delivering teaching, learning, assessment and awarding
meeting legal and regulatory obligations (for example funding, safeguarding and inspection requirements) - providing student support, welfare and safeguarding services
- managing IT systems, security and access to College facilities
- communicating with you about your course, studies or our services.
Each processing activity is explained in more detail in the appropriate Privacy Notice, available above.
Automated decision‑making and profiling
We may use limited forms of automated processing, for example to manage communications or system access. Where automated decision‑making has a legal or significant effect on you, we will explain:
- how the decision is made
- the logic involved
- the consequences for you
- your right to request human intervention
Further information is available in the relevant Privacy Notice located above.
Monitoring and use of College systems
Use of College IT systems, networks and facilities may be monitored for security, legal and operational purposes. This includes logs of system access and activity.
Details of what is monitored, why, and how long information is retained are set out in the relevant Privacy Notice located above.
Your data protection rights
Under GDPR, you have the right to:
Be informed about how your data is used.
Access your personal data.
Request correction of inaccurate or incomplete data.
Request deletion of your data, where applicable.
Restrict how your data is used.
Object to certain types of processing.
Receive your data in a portable format, where applicable.
Withdraw consent at any time, where consent is the lawful basis.
Some rights are subject to legal conditions and exemptions. Full explanations of your rights and how to exercise them are available in our Privacy Notices.
How to exercise your rights
To make a data protection request, including a data subject access request, please contact:
dpo@ucscollegegroup.ac.uk
We may need to verify your identity before responding. Requests are answered within one month.
Complaints
If you are concerned about how we have handled your personal data, please contact the Data Protection Officer in the first instance:
dpo@ucscollegegroup.ac.uk
You also have the right to complain to the Information Commissioner: