This Student Placement Privacy Notice should be read in conjunction with the College’s privacy notice, further information on GDPR and your Rights can be found by clicking this link: https://www.serc.ac.uk/PrivacyNotice/

This element of our privacy notice is for College students participating in work placement or work experience through the College’s work placement scheme.

SERC (the “College”) takes the privacy of its students very seriously and this notice explains how the College processes and manages your personal data when you attend a College scheme work placement. The College will process all personal data in compliance with GDPR and the Data Protection Act 2018 to provide you with the work placement and to meet our statutory obligations. We will never ask for information that is unnecessary to deliver this service. One of our responsibilities is to tell you about the different ways we collect and use your personal data.

The Data Protection Officer for the College is Sian Harvey.

Categories of Personal Data

Whilst a student of the College, you may participate in a work placement or work experience scheme with an external placement provider. In order to provide you with a placement in a safe and secure manner, the College will need to process the following categories of personal data and special category personal data, which in addition to our usual methods (as set out in our privacy notice) we collect from our health questionnaire as part of the work placement portal sign up:

Name
Address
Contact details
Next of kin (emergency contact)
Course details
Over/under 18 years of age
Disabilities and/or learning difficulties (special category personal data)
Medical conditions (special category personal data)

Lawful Basis - Personal Data

Our lawful basis for processing your personal data in relation to your work placement or work experience are as follows:

Article 6.1(b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Article 9(2)(b) processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject;
Schedule 1 (16)(1) Support for individuals with a particular disability or medical condition

Placement Providers

Your work placement provider is a joint “data controller” in relation to the above types of personal data (and special category personal data) which they hold for the provision of the placement. Accordingly, your work placement provider shall only process your personal data in accordance with GDPR and the Data Protection Act 2018 and the College has entered into a joint data sharing framework with each placement provider in an effort to ensure compliance by each provider.

Who will have access to my information, or who will you share it with?

The College will only share your personal information (including your sensitive personal data) as outlined above with the placement provider under the lawful basis set out above and for the purpose of fulfilling our legal obligations to you including for the purposes of preventative or occupational medicine, provision of health or social care or treatment, carried out under the provider through a duty of secrecy.