About this document
This privacy notice explains how Bournemouth University ("we", "our", "us") collects, uses and shares your personal data, and your rights in relation to the personal data we hold. This privacy notice concerns our processing of personal data of past, present and prospective students of Bournemouth University ("you", "your").
Bournemouth University is the data controller of your personal data and is subject to the Data Protection Act 1998 ("DPA") (and, once in force, to the General Data Protection Regulation (the "GDPR")).
How we collect your information
We may collect your personal data in a number of ways, for example:
- from the information you provide to us when you interact with us before joining, for example when you express your interest in studying at Bournemouth University;
- when you apply to study at Bournemouth University and complete enrolment forms via the Universities and Colleges Admissions Service (UCAS) and when you complete other admissions processes and procedures;
- when you communicate with us by telephone, email or via our website, for example in order to make enquiries or raise concerns;
- in various other ways as you interact with us during your time as a student of Bournemouth University, for the various purposes set out below;
- from third parties, for example from your previous or current school, sixth form college, university or employers who may provide a reference about you or who may sponsor your studies.
The types of information we collect
We may collect the following types of personal data about you:
- your name, and contact information such as address, email address and telephone number, as well as your date of birth, national insurance number (or other tax identification number) and your passport number or national identity card details, country of domicile and your nationality. We will also allocate you a unique student number;
- information relating to your education and employment history, the school(s), sixth form college(s) and other colleges or universities you have attended and places where you have worked, the courses you have completed, dates of study and examination results. We will also keep records relating to assessments of your work, details of examinations taken, your predicted and actual examination grades and other information in your student record;
- information about your family or personal circumstances, and both academic and extracurricular interests, for example where this is relevant to the assessment of your suitability to receive a bursary or in order to provide you with appropriate pastoral care;
- sensitive personal data and information about criminal convictions and offences, including:
- information concerning your health and medical conditions (e.g. disability and dietary needs);
- certain criminal convictions (e.g. for students on nursing programs, following completion of an annual declaration of “good character”); and
- information about your racial or ethnic origin; religion or similar beliefs; and sexual orientation.
How we use information about our students
The purposes for which we may use personal data (including sensitive personal data) we collect during a student's association with us include:
- recruitment and admissions;
- academic matters, including:
- the provision of our core teaching, learning and research services (e.g. registration, assessment, attendance, managing progress, academic misconduct investigations, certification, graduation);
- maintaining student records;
- assessing your eligibility for bursaries and scholarships, etc.
- providing library, IT and information services;
- non-academic matters in support of our core services, including:
- providing student support services (e.g. through askBU, Disability and Additional Learning Support, Careers and Employability Service, Health and Wellbeing Service, Student Medical Centre, personal supervisors and academic departments);
- monitoring equal opportunities;
- safeguarding and promoting the welfare of students;
- ensuring students' safety and security;
- managing student accommodation;
- managing the use of social media;
- managing car parking on campus;
- administering finance (e.g. fees, scholarships and bursaries);
- other administrative purposes, including:
- carrying out research and statistical analysis;
- carrying out audits (e.g. to ensure compliance with our regulatory and legal obligations);
- providing operational information (e.g. providing IT support, information about building closures or access restrictions on campus, or safety advice);
- promoting our services (e.g. providing information about summer schools, student exchanges, or other events happening on and off campus);
- preventing and detecting crime;
- dealing with grievances and disciplinary actions;
- dealing with complaints and enquiries.
Graduation and degree information
Personal data (including award and classification) will be published in the award ceremony booklet. This information will also be passed to third parties involved in the ceremonies (including our local paper and commemorative clothing suppliers). All published details will be available on our archive and our website following the relevant graduation events.
You may withhold your consent to your name being published for these purposes when you register online to attend the award ceremony or graduate in absentia.
All award ceremonies are broadcast online and will be available to view online afterwards.
The basis for processing your information and how we use it
We may process your personal data because it is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract. In this respect, we use your personal data for the following:
- to interact with you before you are enrolled as a student, as part of the admissions process (e.g. to send you a prospectus or answer enquiries about our courses);
- once you have enrolled, to provide you with the services as set out in our Student Agreement;
- to deal with any concerns or feedback you may have;
- for any other purpose for which you provide us with your personal data.
We may also process your personal data because it is necessary for the performance of our tasks carried out in the public interest (as set out in our constitutional documents (pdf 31kb), available at: https://www1.bournemouth.ac.uk/about/governance/financial-information/our-charitable-status) or because it is necessary for our or a third party's legitimate interests. In this respect, we may use your personal data for the following:
- to provide you with educational services which may not be set out in our Student Agreement but which are nevertheless a part of our academic and educational mission;
- to monitor and evaluate the performance and effectiveness of the university, including by training our staff or monitoring their performance;
- to maintain and improve the academic, corporate, financial, estate and human resource management of the university;
- to promote equality and diversity throughout the university;
- to seek advice on our rights and obligations, such as where we require our own legal advice;
- recovering money you owe to us;
- for fundraising purposes.
We may also process your personal data for our compliance with our legal obligations. In this respect, we may use your personal data for the following:
- to meet our compliance and regulatory obligations, such as compliance with anti-money laundering laws and safeguarding requirements;
- for the prevention and detection of crime;
- in order to assist with investigations (including criminal investigations) carried out by the police and other competent authorities.
We may also process your personal data where:
- it is necessary for medical purposes (e.g. medical diagnosis, provision of health or social care or treatment, or a contract with a health professional);
- it is necessary to protect your or another person’s vital interests; or
- we have your specific or, where necessary, explicit consent to do so.
Sharing information with others
For the purposes referred to in this privacy notice and relying on the bases for processing as set out above, we may share your personal data with certain third parties. You are given the opportunity to opt out of some of these data sharing arrangements, for example when you register with us, but you should carefully consider the possible impact of doing this. Unless an opt-out is in place, we may disclose limited personal data to a variety of recipients including:
- our employees, agents and contractors where there is a legitimate reason for their receiving the information, including:
- third parties who work with us to provide student accommodation;
- third parties who work with us to provide student support services (e.g. counselling);
- third parties who are contracted to provide out-of-hours IT services for us;
- organisations operating anti-plagiarism software on our behalf (such as Turnitin®, for further details see our Turnitin® UK Information for Students (pdf 26kb) guidance);
- internal and external auditors.
- those with an interest in tracking student progress and attendance, including:
- student sponsors (e.g. the Student Loan Company, research sponsors, Research Councils, NHS);
- current or potential education providers (for example, where you take part in an exchange programme as part of your course);
- current or potential employers (to provide references and, where students are sponsored by their employer and/or where you take part in a placement, to provide details of progress/attendance);
- professional and regulatory bodies (e.g. Nursing and Midwifery Council, Health Care and Professions Council, British Psychological Society, Solicitors Regulation Authority, Bar Standards Board, Association of Chartered Certified Accountants) in relation to the confirmation of qualifications, professional registration and conduct and the accreditation of courses;
- government departments and agencies where we have a statutory obligation to provide information (e.g. the Higher Education Funding Council for England (HEFCE), the Higher Education Statistics Agency (HESA), the Home Office (in connection with UK visas and immigration), Council Tax and Electoral Registration Officers at relevant local authorities (for the purpose of assessing liability for Council Tax and for electoral registration purposes));
- where applicable, Bournemouth University International College (so they can contact you to offer a pre-sessional or preparatory course relevant to your application to us);
- NHS trusts, NHS foundation trusts and Local Authorities (for the purpose of assessing whether you are entitled to free NHS hospital treatment);
- crime prevention or detection agencies (e.g. the police, the Department for Work and Pensions and Trading Standards);
- parents, guardians, and next-of-kin (where there is a legitimate reason for disclosure);
- third parties conducting surveys, for example the National Student Survey.
International data transfers
Some of the personal data we process about you will be transferred to, and stored at, a destination outside the European Economic Area ("EEA"), for example where it is processed by staff operating outside the EEA who work for us or for one of our suppliers, or where personal data is processed by one of our suppliers who is based outside the EEA or who uses storage facilities outside the EEA.
In these circumstances, your personal data will only be transferred on one of the following bases:
- where the transfer is subject to one or more of the "appropriate safeguards" for international transfers prescribed by applicable law (e.g. standard data protection clauses adopted by the European Commission);
- a European Commission decision provides that the country or territory to which the transfer is made ensures an adequate level of protection; or
- there exists another situation where the transfer is permitted under applicable law (e.g. where we have your explicit consent).
We share some of the information we hold about you (including your name, date of birth, nationality, BU email address and programme of study) with the Students' Union at Bournemouth University ("SUBU") unless you notify us that you wish to opt out of SUBU membership.
SUBU use this information to administer membership of the Students' Union. SUBU will also send some of the student data we provide to the National Union of Students ("NUS") to enable them to operate UnionCloud, a system through which SUBU's website is hosted.
SUBU and the NUS will give students the chance to opt out of various categories of processing when they register on the SUBU website, and to update their preferences by amending the privacy options on their profile page.
Fundraising and Alumni Relations
We pass certain of your personal data to our Fundraising and Alumni Relations Department ("F&ARD") when you graduate. This information will be used for alumni activities, including sending Bournemouth University publications, promotion of alumni benefits, services, events and programmes. Your personal data may also be used in fundraising programmes. We may also disclose limited personal data to our contractors for analysis in connection with fundraising activities.
For more information about how your personal data is used by the F&ARD, please see the fundraising and alumni relationsprivacy statement, available at: https://www1.bournemouth.ac.uk/collaborate/support-bu/contact-us.
If you do not want your personal data to be used for any of these purposes, please email: firstname.lastname@example.org.
We will send some of the student information we hold to the Higher Education Statistics Agency ("HESA"). HESA collects and is responsible for the database in which HESA student records are stored. Details of how HESA will process this information can be found at: https://www.hesa.ac.uk/about/regulation/data-protection/notices.
National Student Survey and Leaver Surveys
We may pass student contact details to survey contractors to carry out the National Student Survey and surveys of student finances for the organisations identified by HESA in their data protection notices referred to above. These organisations and their contractors will use student’s details only for this purpose, and will then delete them.
About six months after graduation, we will contact each student to ask him or her to fill in the HESA “Destination of Leavers from HE” questionnaire. Students may also be contacted as part of an audit to check that we have undertaken this survey properly. We will not give your contact details to HESA.
Students may also be included in surveys that track the progress of leavers in the years after they graduate. If so, we will pass your contact details to the organisation that has been contracted to carry out that survey. The organisation will use your details only for that purpose and will then delete them.
If you do not want to take part in any of these surveys, please let us know.
Changes to your personal data
Please tell us promptly about any changes to the information we hold about you. This is particularly important for your contact details. You can do this through the Student Portal Log-in services at https://evision.bournemouth.ac.uk/urd/sits.urd/run/siw_lgn.
How long your information is kept
Subject to any other notices that we may provide to you, we may retain your personal data for a period of six years after your association with us has come to an end. However, some information may be retained indefinitely by us in order to maintain your academic record for archiving purposes (or by the F&ARD for the purposes of supporting your lifelong relationship with Bournemouth University).
Under the DPA you have the following rights:
- to obtain access to, and copies of, the personal data that we hold about you;
- to require that we cease processing your personal data if the processing is causing you damage or distress;
- to require us not to send you marketing communications.
Once the GDPR comes into force in May 2018, you will also have the following additional rights:
- to require us to correct the personal data we hold about you if it is incorrect;
- to require us to erase your personal data;
- to require us to restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal);
- to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller;
- to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights.
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.
If you have given your consent and you wish to withdraw it, please contact our Data Protection Officer using the contact details set out below. Please note that where our processing of your personal data relies on your consent and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services.
If you have any queries about this privacy notice or how we process your personal data, you can contact our Data Protection Officer by email: email@example.com; by telephone: +44 (0) 1202 962554; or by post: Data Protection Officer, Bournemouth University, Poole House 5th Floor, Fern Barrow, Poole, Dorset, BH12 5BB.
To request access to the personal data that we hold about you, you may contact our Data Protection Office by email: DPA@bournemouth.ac.uk; by telephone: +44 (0) 1202 961315; or by post: Data Protection Office c/o Legal Services, Bournemouth University, Melbury House M209, 1-3 Oxford Road, Bournemouth, Dorset, BH8 8ES.
If you are not satisfied with how we are processing your personal data, you can make a complaint to the Information Commissioner.
You can find out more about your rights under data protection legislation from the Information Commissioner's Office website available at: www.ico.org.uk.