Privacy Policy

Privacy Notice

Notice about how we use your personal information

The Windsor Forest Colleges Group (referred to below as “we”) is the data controller of personal information about you. Our address is Langley Campus, Station Road, Langley, Slough, SL3 8BY. The College Group’s registration number with the Information Commissioner’s Office (ICO) is Z465993X.

If you have any questions about this policy or the ways in which we use your personal information, please contact our Data Protection Officer at Langley Campus, Station Road, Langley, Slough, SL3 8BY or by email data.protection@windsor-forest.ac.uk.

This privacy notice has been prepared in accordance with the UK General Data Protection Regulation (“GDPR”) and the Data Protection Act 2018.

This notice sets out how we use your personal information as a prospective employee and in particular:

the information that you give us;
the uses made of your personal information;
the legal basis on which we collect and use your personal information;
how long we keep your personal information:
how we share your personal information;
how we transfer your personal information outside of the UK; and
your rights over your personal information.

THE INFORMATION THAT YOU GIVE US

We will collect personal information from you when you apply for a job with us. This will include your: name; address; phone number; email; date of birth; Teacher Reference Number, NI number; current employment details including job title, start and end dates, current salary, notice period, reason for leaving; all past employment details; education details; interests; whether you are related to any personnel of the College or Governing Body; references; special arrangement details for interview; criminal record details; Disclosure Barring Service check, including European Economic Area (EEA) check; Prohibition from Management check; Prohibition from Teaching check; Check of Barred List/List 99; Pre‑employment Health Questionnaire/Medical Report.

We will collect personal information from you when you are a new starter and become an employee of the College. This will be your: name; marital status; previous surname(s); address; date of birth; occupation/department; type of employment; referee details; phone number; email addresses, car details, driving licence details; NI number; start date; next of kin and contact details; bank details; pension details; statement about employment; student loan details; offer letters; employment terms and conditions; changes to your terms and conditions; certifications/qualifications, disciplinary, grievance, capability, job descriptions, sickness absences, maternity/paternity/adoption information; accidents and injuries at work; working time information; annual leave records; recruitment information; photo; payroll details; gender; flexible working; exit interviews; return to work notifications; parental leave request forms; appraisal/performance; door access systems; bank account number; sort code; disqualification information; sickness absences; medical information. We will collect sensitive information for equal opportunity monitoring; ethnicity, religion, sexual orientation, disability status.

THE USES MADE OF YOUR PERSONAL INFORMATION

We will use your personal information set out above as follows:

for the recruitment process and for carrying out pre‑employment checks;
for safeguarding students;
for checking your identity and right to work in the UK;
for checking your qualifications;
to keep an audit trail of the checks we have made and our relationship with you in case of employment claims;
to set up payroll and pension and to reimburse expenses;
for dealing with HMRC;
for communicating with you, including for marketing purposes;
for wellbeing, monitoring sickness, absences and health and safety;
for conducting any investigations for any capability or disciplinary processes, only when required;
for carrying out our role as your employer or potential employer.

We treat your personal information with confidentiality and we do not use it for any other purposes.

THE LEGAL BASIS ON WHICH WE COLLECT AND USE YOUR PERSONAL INFORMATION

We collect and use your personal information on the basis that it is necessary for performing our employment contract with you, or it is necessary to take steps before entering into the contract with you. We also collect and use your personal information on the basis that we need to do so in order to comply with our legal obligations.

Where we collect your special category personal information, we do this on the basis that it is necessary for the purposes of carrying out our obligations in the field of employment law. Special categories of personal data are personal data that reveal a person’s racial or ethnic origin, political opinions, religions or philosophical beliefs, trade union membership, genetic data (i.e. information about their inherited or acquired genetic characteristics, information about their physical, physiological or behavioural characteristics (such as facial images and fingerprints), physical or mental health, sexual life or sexual orientation and criminal records).

HOW LONG WE KEEP YOUR PERSONAL INFORMATION

We will not keep your personal information for longer than we need it for the purposes we have explained above.

When you apply for a job with us, but your application is unsuccessful, we will keep your personal information for 12 months post-campaign.

When you are an employee, we will keep your personal information for as long as you work with us and then after you leave, we will keep your personal information for 6 years post-employment.

Please refer to the Privacy Notice for Staff for further information on how the college collects and processes personal information for staff employed by the college.

HOW WE SHARE YOUR PERSONAL INFORMATION

We may share the personal information that you give us with the following organisations (or types of organisation) for the following purposes.

Organisation / type of organisation:	Purpose:
HMRC	In our legal requirement as an employer
Pensions Providers	In providing your pension
iTrent	In administering our payroll
Department for Work and Pensions	In providing details as requested
ESFA	As part of a contractual obligation to gain funding
OfS	As part of a legal obligation. The OfS is the regulator of the higher education sector in England and has certain statutory functions set out in the Higher Education and Research Act 2017
Microsoft Azure	At the point of joining the College create your IT Account using Azure Active Directory, now called Microsoft Entra. The Group also uses Microsoft’s UK South data centres for storage and processing of data - including Cognitive/AI Search services for information retrieval and App Services to run internal web applications. All staff applicant data held within Microsoft data centres is held and processed within the UK South region.
Google Workspace	At the point of joining we create your IT Account within Google Workspace. We use Google Workspace for online learning and storage and processing of data. All staff applicant data remains within the European union.

We may also share your personal information with third parties who provide services to the College.

Organisation / type of organisation:

Purpose:

Healthcare, Childcare Vouchers, Transave.

Details are only provided where you as an employee has opted into these services

HOW WE TRANSFER YOUR PERSONAL INFORMATION OUTSIDE OF THE UK

We do not store or transfer your personal data outside of the UK, except in circumstances where a contract or data sharing agreement exists.

YOUR RIGHTS OVER YOUR PERSONAL INFORMATION

You have a number of rights over your personal information, which are:

the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly ‑used, machine ‑readable format.

CHANGES TO OUR PRIVACY POLICY

We keep our privacy policy under regular review.