Discovery College General Data Protection Regulation (GDPR) Privacy Notice
Who are we and what do we do?
Sussex Partnership NHS Foundation Trust (SPFT), Discovery College, their partner organisation Culture Shift and our various other partner organisations work together to deliver Discovery College courses. All of these organisations are committed to protecting all personal and sensitive information of our service users and members of staff. SPFT will ensure that our partner organisations protect your information. In order to deliver this service to you, we have to collect certain information.
What data is being collected?
The information you supply to us via Sussex Discovery College website, which includes: name of young person, name of supporter (professional or parent/carer), supporter’s relationship to young person, email address, phone number, date of birth.
The information we will collect from you on your Registration Form includes: name of young person, date of birth, name and contact details of parent/carer if under 16, address, information needed in case of accident or emergency during a session, information needed to give appropriate support during a session, consent for use of your photos on our website.
Use of cookies
See our cookie policy.
What is our legal basis for processing this data?
Our legal basis for processing this information is keeping participants safe in case of accident or emergency, ensuring appropriate support during sessions, demonstrating that appropriate consent has been given, and communicating with course participants and their carers in connection with the courses.
How do we use your data?
Emailing you with information about Discovery College and our partner organisations
Contacting you in relation to courses
Keeping participants safe in case of accident or emergency
Ensuring appropriate support during sessions
Sending out materials for courses
Demonstrating that appropriate consent has been given.
Will this data be shared with any third parties?
Your information will be shared by SPFT with their partner organisations for above purposes only.
Your information will never be shared with anyone else unless we have your consent to do so or we have a statutory obligation to disclose it.
How long will the data be stored for?
SPFT will hold your information will held in line with retention periods set out in the NHS’s Record Management Code of Practice. In some exceptional circumstances, it may be appropriate to have information deleted under the Right to be forgotten.
Where a partner organisation holds your information in relation to a particular course they are delivering to you or your child, they will delete your information by the end of July of the academic year in which your course was held.
Privacy policies of other websites
The Sussex Discovery College website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
What are your rights?
You have the right to be informed of which partner organisations SPFT has shared your information with.
You have the right to be informed of why SPFT and any of their partner organisations are processing your information.
You have the right to request a copy or access to your records held by Discovery College and their partner organisations.
You have the right to request rectification of inaccurate records
You have the right to be forgotten (in certain circumstances)
You have the right to restrict processing (in certain circumstances)
You have the right to data portability
You have the right to object to processing
You have the rights in relation to automated decision making and profiling
If you have any further queries around your rights, please contact SPFT’s Information Governance Team on 0300 304 2210.
How do you complain?
If you have concerns over the way your information is being handled, you are entitled to log a complaint with the Information Commissioner’s Office on 0303 123 1113 or on their website https://ico.org.uk/global/contact-us/email/
SPFT Privacy notice
The Sussex Partnership Foundation Trust privacy notice can be found here.
