Data Protection
Purpose
The purpose of this Data Protection Policy is to outline Edunova College's commitment to safeguarding personal information in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
Policy Statement
Compliance: Edunova College is fully committed to complying with the GDPR and other applicable data protection laws in the UK.
Data Collection and Processing: We collect and process personal data only for lawful and legitimate purposes, and we ensure data minimisation, accuracy, and purpose limitation.
Transparency: The college provides transparent information about data processing through privacy notices and policies to individuals whose data is collected.
Data Security: Personal data is securely stored and protected from unauthorised access, disclosure, alteration, or destruction.
Data Subject Rights: Learners, staff, and partners have the right to access, rectify, delete, or restrict the processing of their personal data as defined by data protection laws.
Data Protection Measures
Data Privacy Training: All staff members receive training on data protection principles, GDPR compliance, and their role in ensuring data security.
Privacy by Design: Edunova College implements a "privacy by design" approach in the development of systems, processes, and services that involve personal data.
Data Security: Strong technical and organisational measures are in place to protect personal data. Access to data is controlled and limited to authorised personnel.
Data Breach Management: The college has a robust protocol for managing and reporting data breaches in line with GDPR requirements.
Data Sharing and Third Parties
Data sharing with third parties is carried out in compliance with GDPR and other applicable data protection laws. Contractual safeguards, including data processing agreements, are employed as necessary.
The college maintains a record of third-party data processing activities and conducts assessments of their compliance with data protection laws.
Continuous Improvement
Edunova College commits to regularly reviewing and updating this Data Protection Policy and related procedures to ensure compliance with legal requirements, educational objectives, and best practices in data protection.
Effective Date: 14 July 2023
