Who is collecting the information?
Edinburgh College is the Data Controller. We have an appointed Data Protection Officer (DPO), who can be contacted by emailing: DataProtection@edinburghcollege.ac.uk.
Why are we collecting it, and what are we doing with it (Purpose)?
The information collected is used solely for marketing purposes related to alumni of Professional Training courses at Edinburgh College. We will use your information to contact you via email with information about relevant training courses offered by the College.
What personal data do we collect?
Personal data
- Forename
- Surname
- Email addresses
- Course completed
We will also keep a record of your consent to receive this direct marketing via email.
The lawful basis for the processing
Under the UK General Data Protection Regulations (UK GDPR), our basis for processing your personal data is Article 6(1)(a): “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”
You can withdraw your consent at any time; if you wish to withdraw consent to receive direct marketing, please email: marketingteam@edinburghcollege.ac.uk.
Who we share the information with
We use a third-party provider, Mailchimp (Data Processor), to communicate our promotional offers to you. We also gather email open and click statistics in Mailchimp to help us monitor and improve our communication. For more information, please see Mailchimp’s Privacy Policy.
Details of data transfers to any third countries or international organisations
Mailchimp (Data Processor) is a United States (US)-based company, and your information may be transferred to, stored, or processed in the US. Intuit, which owns Mailchimp, is on the UK Extension to the EU-U.S. Data Privacy Framework; therefore, the processing is covered by UK Government adequacy regulations
How long do we hold the personal data?
We will retain your information for 5 years from the date of your consent unless you withdraw your consent/unsubscribe. After this time, we will re-contact current subscribers to confirm they wish to remain on our mailing lists.
Individuals’ rights in relation to this processing
Under data protection law, you have a number of rights; the rights that apply to this particular processing are:
- Right to be Informed – i.e. a privacy notice.
- Right of Access – you have the right to access your personal information.
- Right to Rectification – you have the right to have inaccurate or incomplete personal information corrected.
- Right to Erasure –you can request that your personal data be deleted.
- Right to Data Portability – you have the right to request your information in a machine-readable format (e.g., a .csv file) to be provided to you or transferred in that format to another organisation.
- Right to Restriction – you can restrict the processing of your information and link it with some of the other rights.
- Right to withdraw your consent
If you wish to exercise your rights or have any queries regarding this, please contact the Data Protection Team at DataProtection@edinburghcollege.ac.uk.
Complaints to the UK Information Commissioner’s Office (ICO)
If you are concerned about how your personal data is being used by the College, you can submit a complaint to the College’s Data Protection Team at: dataprotection@edinburghcollege.ac.uk. If you are not satisfied with the outcome, you can complain to the data protection regulator, the UK Information Commissioner’s Office (ICO), via the ICO website.
You can also call them on 0303-123-113 or send a letter to them at;
Customer Contact
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF