Skip to main content
Newbattle Abbey College

Data Protection 

At Newbattle Abbey College (the College) we collect personal information from our staff and students and from visitors to our campus so we can deliver our services.   

This makes the College what’s known as a “data controller” and as such we must meet certain obligations under various Data Protection laws.   

The responsible handling of your personal information is very important to us, and we will always take great care with how we use (process) your information.  This includes how and why we collect it, store it and share it. 

Our Data Protection Policy sets out how the College protects your personal data and you can view it here: Data Protection Policy.

Data Protection Principles 

When we process personal data, we will adhere to the Principles laid out in UK GDPR.  

 This means we must (and will): 

  1. Have a justifiable legal reason for processing your personal data and will explain this reason clearly to you. 
  2. Only use your personal data for the purpose for which you gave it to us.  
  3. Minimise the personal data we process to what is relevant, adequate and necessary to what is needed. 
  4. Ensure we keep your personal data up to date and accurate. 
  5. Only keep personal data that identifies you for as long as is necessary. 
  6. Keep personal data secure and take reasonable steps to protect it from unauthorised access or processing and prevent it from being accidently lost, destroyed or damaged. 
  7. Be able to show that we are responsible in processing of personal data and are complying with the principles listed above.  

If you have any concerns or questions about how we manage and use your data or would like more information about anything Data Protection related, please contact our Data Protection Officer at DPO@nac.ac.uk  

Your Rights 

You have rights in Data Protection law.  These rights give you a say in how your personal information is processed. These are: 

  • Right to be informed 
  • Right of access 
  • Right to Rectification 
  • Right to erasure (known as the right to be forgotten) 
  • Right to restrict processing 
  • Right to data portability 
  • Right to Object 
  • Rights relating to automated decision-making and profiling 

 

Read more about your rights on the website for the Information Commissioner’s Office (who govern data protection in the UK) at https://ico.org.uk/for-the-public/ 

If you would like to exercise any of these rights or ask for more information on how we handle your personal information, please contact us 

Privacy Notices 

We use privacy notices to meet our obligations under the Data Protection Principle of transparency.  These notices inform you about how we use personal information in different circumstances across the College. 

You can read and download a copy of our current privacy notices here: 

Employee and Applicant Privacy Notice

 

 

Please bear with us. We are currently in the process of updating this page.