Privacy and Data Protection

EKC Group is committed to ensuring the privacy of any personal data that it processes.


Introduction

EKC Group processes a substantial amount of personal data in relation to students, staff and other individuals that we work with. In all cases, we commit to ensuring that personal data is handled, stored and disposed of confidentially and securely. This page tells you about how we protect personal data, what your rights are and where you can get help. 

Our status 
EKC Group is the Data Controller. Our registered address is:

Ramsgate Road 
Broadstairs 
Kent 
CT10 1PN 

What we do to protect personal data 

Our Data Protection policy outlines the technical and organisational measure that we take to protect personal data. 
We will only process your data if it meets one or more of the following lawful bases: 

  • Consent – where an individual has given their consent via clear, affirmative action e.g. providing a signature or ticking a box; 
  • Performance of a contract e.g. an employment contract, learning agreement etc; 
  • Legal obligation – because the law requires the data to be processed e.g. for the purposes of HMRC payments;
  • Vital interest – to protect the individual in the case of an emergency;  
  • Public interest or exercise of official authority e.g. provision of statistical returns, to comply with government funding requirements etc;

We have a records retention schedule in place and will not keep personal data for any longer than we need to. When we dispose of personal data, we use a secure, confidential waste service. 

Who to contact

The Data Protection Officer is Alison Gray, Head of Student and Community Affairs. She can be contacted at DPO@eastkent.ac.uk or on 01843 605024. 

If you have a complaint about how we’ve handled your personal data, you should firstly contact DPO@eastkent.ac.uk. If you’re still not satisfied, you may complain to the Information Commissioners’ Office. 

Your rights as a Data Subject

The right to be informed

We have Privacy Notices for each stage of data processing so that you’re clear about how your data is used. Our Privacy Notices tell you: 

  • What personal data we collect
  • How we use it 
  • The legal basis for collecting and using your data 
  • Who may have access to your data
  • How long we keep your data for 
  • What your rights are 
  • Who to contact 

If we need to process your data for any purpose not detailed in our Privacy Notice, we will give you further information and obtain your consent where appropriate.

Our main Privacy Notices are as follows: 

EKC Group’s Colleges and business units have Privacy Notices in place for specific services such as the Canterbury Sports Centre, counselling etc. 
We also publish a Register of Processing Activities which gives details about the personal data we collect and use in respect of our students and staff.  

If you wish to request personal data that we hold about you, you can make your request verbally or in writing. To enable us to provide you with the information in a timely manner, we would prefer you to complete this form and submit it to the department that you’re requesting the information from.   

If you are not known to us, we will have to validate your identity which can be done by showing us one or more of the following original documents:    

  • Passport 
  • Driving licence 
  • Bank statement 
  • Utilities bill  

We won’t normally charge to provide information but there may be certain circumstances when a charge can be made: for example, where the request is manifestly unfounded or excessive, we may charge a ‘reasonable fee’ for the administrative costs of complying with the request. 
We can also charge a reasonable fee if you request further copies of your data when we’ve already responded to your request. In all cases, we will follow guidance from the Information Commissioner’s Officer and will tell you if any charges apply.

When you ask for your personal data to be amended we will do this within 20 working days of you telling us. You may advise us verbally of any changes to your personal data (address, telephone number, emergency contact details etc) but we would prefer it if you put it in writing to the relevant department.  Please ensure that you tell us when your personal data needs to be amended so that we can maintain accurate records for you. 

You have the right to ask for your personal data to be deleted if there is no lawful basis for its continued processing. All requests should be made, preferably in writing, to the relevant department. Please note that we do have the right to refuse a request for erasure/deletion if we are obliged to continuing processing your data to meet a lawful basis.  Requests for erasure/deletion will be actioned within 20 working days. 

Requests to restrict us from processing your personal data can be made, however there may be reasons why we may not be able to comply, for example if we need to continue processing the data to meet a lawful basis.   

You may object to processing under certain circumstances and requests should be made to the relevant department, preferably in writing. 

Disclosure of personal data to third parties 

If you are an employer or another education institution and require a student reference, please complete and return this form.

Enforcing bodies such as the Police, HMRC, law courts etc may request disclosure of personal data in connection with the investigation of crime or other relevant matter.  In such cases, this form should be completed and returned. Please note that EKC Group does not need to gain consent from a data subject in order in these circumstances.