City of Glasgow College (“the College”) is a member of Fearless Glasgow, a multi-agency partnership of Universities and Colleges across the West of Scotland seeking to mitigate instances of gender-based violence. The partnership, which has the backing of Police Scotland and the Scottish Government, aims to help raise awareness of gender-based violence and make reporting of incidents more accessible to all via the Report and Support Platform. The purpose of this privacy notice is to provide you with information about how your personal data is processed when you engage with the Report and Support Platform. 

Identity of data controller

City of Glasgow College is the data controller of your personal data. 
 

If you use the Report and Support Platform to report gender-based violence that has affected you, or you use the platform to report an incident on behalf of another person, the College may collect personal data about you. This enables the College to respond to the incident you have reported and provide you with support and assistance, should you need it.

Legal basis

The legal condition which enables the College to process your personal data is found in the UK General Data Protection Regulation (“UK GDPR”): 

Article 6(1)(a) consent 

Where special categories of data are processed we will normally have your explicit consent or another legal reason within Article 9(2) of GDPR will apply. 

Whose personal data is being collected/processed?

Student, staff and visitor personal data may be collected and processed.

What personal data is collected

Personal data will be collected from you when you enter information into the Report and Support Platform. The type of personal data that will be processed depends on the amount of information you provide and may include: 

*You may choose to submit a report anonymously. Please note that if you do submit a report without providing your name and personal contact information, the College will be unable to contact you in connection with its investigation into your report. 

How is the personal data collected?

The personal data is collected directly from you when you enter information into the Report and Support Platform. 
 

The personal data you provide will be treated confidentially. The College does not share your personal data without your consent other than in the circumstances noted below. 

 In these circumstances, the College may share your personal data with Police Scotland and the lawful basis for doing do is that it is necessary to protect the vital interests of you, or another person (Article 6(1)(d) UK GDPR) 

 

The College may disclose personal data where we have been given information which would render it liable to civil or criminal court procedure should it not be disclosed and the lawful basis for doing so is that it is necessary to comply with a legal obligation that the College is subject to (Article 6(1)(c) of UK GDPR). 

 

The Report and Support Platform is provided by a third-party supplier called Culture Shift and Culture Shift may have access to the information you enter into the platform in the course of the provision of its services. Information about Culture Shift can be found here: https://www.culture-shift.co.uk/

How is the personal data stored and kept securely?

Personal data is retained on the Report and Support Platform and the College’s secure systems and kept securely on or in College equipment in line with College information security and data protection policies. 

The College has entered into a contract and data sharing agreement with Culture Shift, and Culture Shift may only process the personal data you provide in accordance with the College’s instructions. 

Please see the College’s Records Retention Schedules. 
 

No
 

No
 

You have a number of rights under data protection law including the right to request access to your personal data, these include: 

Your right of access - You have the right to ask us for copies of your personal information. 

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances. 

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. 

Please contact dpo@cityofglasgowcollege.ac.uk if you wish to make a request. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. 
 

If you have any concerns about our use of your personal information, you can contact dpo@cityofglasgowcollege.ac.uk. 

You can also complain to the ICO if you are unhappy with how we have used your data. 

The ICO’s address:            

Information Commissioner’s Office 

Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 

 

Helpline number: 0303 123 1113 

ICO website: https://www.ico.org.uk 
 

Enquiries relating to data protection should be made to the College’s Data Protection Officer. email: dpo@cityofglasgowcollege.ac.uk.