Short Course Programme GDPR data statement

Fair Processing Notice for Referrers as part of the Bristol Medical School Short Course Programme

This notice explains how Bristol Medical School Short Course Programme uses and shares personal data relating to referrers (“you/your”) and your rights in relation to the processing of your personal data. The University is a ‘controller’ in relation to your personal data and is registered as such with the Information Commissioner’s Office (ICO) (registration number Z6650067).

How we collect your personal data

We will collect your personal data when you complete our online registration form   and through our booking process as part of the Short Course Programme registration process.

Types of personal data being collected

As part of the scheme, we may collect the following categories of personal data from you: 
•    Name
•    Email address
•    Job role
•    Institution/company
•    Region of residence in the UK 
•    Country of residence
•    Payment information 
•    Dietary requirements 
•    Accessibility requirements 

How we will use your data

We will use this information as part of our public task activities which are performed in the public interest. Your data will be used for the following purposes:
•    To match your information with our student records
•    To ensure discounts for our course programme are correctly distributed
•    Analyse and review booking data
•    Put in place reasonable adjustments/consider dietary needs
•    Monitor course attendance
•    Communicate with you about bookings and payments
•    Provide LEAP Digital Health Hub with anonymised data to assist with the development of their organisation
•    Administer payments

Sharing your personal data

The information you supply us with may be shared with those employed by the University where it is necessary for the performance of their duties. This may include the finance department, course organisers and tutors, staff within the Medical School and the LEAP Digital Health Hub.

Where the University uses third parties (in the case of the Short Course Programme, SkillsForge Ltd, who provide our booking system and database) to process personal data on its behalf (acting as data processors), a written contract will be put in place to ensure that any personal data shared will be held in accordance with the requirements of data protection law and that such data processors have appropriate security measures in place in relation to your personal data.

Please note that we may need to share your personal information with a regulator or to otherwise comply with the law

Keeping your data secure 

Your data will be stored securely on the School’s SharePoint site with appropriate access controls applied and by SkillsForge Ltd  . in their secure servers based in the UK. 
We will not retain your data for longer than is necessary for the purpose for which we have outlined in this notice. Your data will be retained for a maximum of 3 years, at which point it will be securely disposed of  .

Your rights 

You have the following rights regarding the processing of your personal information:
•    to obtain access to, and copies of, the personal data that we hold about you
•    to require us to correct any inaccurate personal data 
•    to require us to restrict our processing of your personal data
•    to object to us processing your personal data
•    to require us to erase your personal data ('right to be forgotten')
•    to obtain from us the personal data which you have provided, in order to transmit it to another organisation ('data portability')

Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions applyYou also have the right to refer your concerns or make a complaint to the Information Commissioner’s Office (ICO) or any other EU supervisory authority in relation to how the University processes your personal data.

To exercise any of the above rights, please contact us using the detail in the “Contact us” section below. 

Contact us

If you have any questions or comments regarding this notice or you wish to exercise any of your rights (see above), you should contact our Data Protection Officer by email at data-protection@bristol.ac.uk

Edit this page