This Privacy Notice explains who we are, how and why we collect and use personal information about you, our lawful basis, relevant retention periods, and how you can exercise your privacy rights. Please do read this notice to understand our practices and if you have any questions please contact us using the contact details provided below.
The Manchester Metropolitan University (‘the University’) is the Data Controller in respect of the personal data you provide. The University is registered as a Data Controller with the Information Commissioner’s Office (ICO) and manages personal data in accordance with the General Data Protection Regulation (GDPR) and the University’s Data Protection Policy.
The personal data we collect about you may include the following:
Personal details such as title, name, address, telephone number, email address, date of birth, sex and gender;
We may also process the following special category personal data:
Most of this information comes from your application, either via your Universities and Colleges Admission Service (UCAS) or your direct application. We may also collect additional information from third parties, including the Disclosure and Barring Service, referees, previous schools, colleges and universities. We may also share your information with third parties, if those third parties form or are part of a panel that will make a decision on your application.
Contract: We process personal data with a view to entering into a contractual relationship with you. We process personal data in order to fulfil our contractual obligations to you. Public task: As a public authority conducting activites in the public interest which have a basis in law.
Legitimate interests: we process personal data for these purposes in ways which you would reasonably expect and which we believe have minimal privacy impact.
Consent: we offer you as real choice and control whether you wish to participate in these activities unless the requirements form part of the terms and conditions of the scholarship in which case we process your information under contract.
Legal obligation: under the Equality Act 2010 we are obliged to consider reasonable adjustments and offer support on the grounds on health and disability. We will also seek your consent to process personal data in relation to medical and disability data.
If we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. You can withdraw your consent by writing to email@example.com
Your personal data will only be retained for as long as it is necessary in accordance with the University’s Retention and Disposal Schedule. This is a publically available document and can be viewed here. Specifically, applications forms / scholarship related information relating to unsuccessful applicants will be retained for 12 months from the end of the application process. We will retain the personal data relating to financial support and student tuition fees of successful applicants until the termination of our scholarship relationship with you + 6 years. This includes:
The General Data Protection Regulation provides data subjects with the following data subject rights:
The right to be informed – this privacy notice assists with fulfilling these obligations.
Please note, that these rights apply in certain circumstances, for example according to the lawful basis utilised by the University. To exercise these rights please write to: firstname.lastname@example.org.
For information about the data subject rights please refer to the main Student Privacy Notice.
For questions or concerns about this Privacy Notice, or our use of your personal information our Data Protection Officer can also be contacted using email@example.com, by calling 0161 247 3331 or in writing to: Data Protection Officer, Legal Services, All Saints Building, Manchester Metropolitan University, Manchester, M15 6BH.
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) as the supervisory authority in respect of the processing of your personal data. We would encourage you to expend our internal complaints procedure through our initial contact and the University Data Protection Officer, prior to contacting the ICO. Please contact: firstname.lastname@example.org or telephone: 0303 123 1113. For any further contact information please see: https://ico.org.uk/global/contact-us/.
We may update this privacy notice from time to time in response to changing legal, technical or business developments. When we update our privacy notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.