One Cumbria Teaching School Hub (OC) is the Data Controller of the personal information you provide to us. This means OC determines the purposes for which, and the manner in which, any personal data relating to delegates, enquirers, contractors, employees and OC partners.
In some cases, your data will be outsourced to a third party processor who provides a service to us. Where the OC outsources data to a third party processor, the same data protection standards that the OC upholds are imposed on the processor.
Kathryn Lee is the Data Protection Officer. Their role is to oversee and monitor OC’s data protection procedures, and to ensure they are compliant with the GDPR. The Data Protection Officer can be contacted at: firstname.lastname@example.org
What information do we collect about you?
We collect information about you when you contact us. e.g. via phone, email or using the contact form on this website. We also collect information on contractors and employees for the purposes of payments and legal processing of HMRC information. The information we collect on partners is used for communication and distributing information.
The categories of this information that we collect, process, hold and share include:
- Personal delegate information (such as name, email address and workplace, DBS status for access to schools, photos)
- Contractor information (such as name, email address, premises address, phone number, DBS status, rates of pay, tax status)
- Employee information (such as name, email address, residence, contact number, DBS status, rates of pay, HMRC PAYE information, H&S records, divulged medical information, next of kin and absence information.)
- Enquirer information (such as name, email address, organisation, job title)
- Partner information (such as name, email address, organisation, job title, biographies, photos)
Why we collect and use this information
We use delegate data to:
- Enable us to carry out specific functions for which we are responsible
- Evaluation with government departments if requested
- Email marketing (if opted in)
We use contractor and employee data to:
- Enable us to carry out specific functions for which we are responsible including safeguarding
- Sharing with required government departments if requested
- Produce annual accounts and PAYE/HMRC returns including payments
- Monitor performance
We use enquirer data to:
- Answer queries raised in enquiry
- Give information on our courses and conferences if consent has been given to receive this information
We use OC partner data to:
- enable communication and distribute information about OC
- provide on–line biographies of our partners on our website
We use OC partner school pupil’s data to:
- Promote OC through their photos on our website and social media channels
- As part of presentations, show reels and films at OC training days
How will we use the information about you?
We collect information about you to process your order, manage your account and, if you agree, to email you about other products and services we think may be of interest to you. Registers and email addresses are kept for up to 7 years after last attendance on a course.
We use your information collected from the courses to personalise your repeat visits to our courses. OC will not share your information for marketing purposes with external companies outside of the OC unless required to do so in order for us to carry out specific functions for which we are responsible. In processing your order, we may send your details to, and also use information from your workplace to complete your course.
Data sharing security
To be granted access to personal information, organisations must comply with GDPR strict terms and conditions covering the confidentiality and handling of the data, security arrangements and retention and use of the data.
We will not without your express consent provide your personal information to any third parties for the purpose of direct marketing.
For more information on how the DfE collects and share data, follow the link below:
To contact DfE:
We would like to send you information about products and services of ours which may be of interest to you. If you have consented to receive marketing, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please email email@example.com or use the unsubscribe link on the bottom of our e–newsletters.
Our lawful basis for processing data
The lawful bases for processing are set out in Article 6 of the GDPR. At least one of these must apply whenever you process personal data:
(a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose.
(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
(c) Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations).
(d) Vital interests: the processing is necessary to protect someone’s life.
(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.
(f) Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks.)
We collect and use information under clause
a: from registers, enquiries, OC partner school pupils
b: from delegates buying into courses and OC partners.
Storing this information
We hold delegate information for up to 7 years after the last attendance on a course. We hold employee and contractor information for tax purposes as per HMRC guidelines of 6 years after the current tax year. Enquiries, OC partner information and photos of OC partner school pupils are held for up to7 years.
Requesting access to your personal data
Under data protection legislation, all data subjects have the right to request access to information about them that we hold. To make a request for your personal information, contact firstname.lastname@example.org
If you have a concern about the way we are collecting or using your personal data, you should raise your concern with our Data Protection Officer: Kathryn Lee at email@example.com in the first instance or directly to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint