Data Protection and Privacy

About us

Which organisation is processing my personal information? Exeter College Further Education Corporation, Hele Road, Exeter, EX4 4JS 01392 400 500

Who is the person responsible for data protection? The Data Protection Officer is Martina Esser. The Data Protection Officer can be contacted on the telephone number above or by emailing

Exeter College is registered with the ICO – the Registration Number is Z7131274

How does the College collect your personal information?

We may collect your personal information directly from you or from a variety of sources, including:

at a course advice or open event
when you visit our website or enquire about a course
when you submit an application to join and then enrol onto a course
during the course of your studies when you are a student with us

Why does the College collect and use your personal data?

We process personal information in order to manage our processes and deliver services. We may user personal data for different purposes (including sensitive personal data). These include:

to maintain records
visits to one of our sites
providing IT and information services
educational provision
providing support services

Does the College have the right to process your personal information?

We will only process personal data if we have a lawful basis for doing so. Processing for different purposes may have different lawful bases. We will always explain why we are processing personal information whenever we collect it from you.

Which organisations does the College share your personal information with?

The College shares personal information with other organisations where there is a legal requirement to do so. The organisations that we share personal information with can be found here.

What categories of personal information does the College receive from third parties?

The College collects and processes information from third parties. Sources of information may relate: education, finance, careers services, other public sector services.

How long does the College keep your personal information for?

The College will keep personal information for a period of 7 years following the ending of its formal relationship with a person. Within 1 year of the 7th anniversary being achieved, personal data will be anonymised, deleted or securely destroyed.

The Data Retention Exception Schedule lists all permissable exceptions to the 7 year limit and is available on the Data Protection section of the College website. Exceptions may be determined by legal, contractual, business or subject rights requirements.

Does the College transfer personal information to other countries?

The College will only transfer personal data to other countries where it is safe to do so. Where a transfer of personal data is a one-off occurance, the College may ask for your consent.

What are your responsibilities as a data subject?

Exeter College collects and processes personal data necessary for the operation and promotion of the college and in pursuit of the best interests of the data subjects. Individuals must provide accurate and complete personal data to enable the college to fulfill its obligations. Failure to do so may invalidate any contract to which the individual and the College are party. The College will seek consent to process personal data for promotional purposes. Such consent can be withdrawn at any time. The College does not process personal data for the purposes of automated decision-making or profiling.

What rights do you as a data subject have over your personal information?

You have the right to: to ask us for access to information about you that we hold – to have your personal data rectified, if it is inaccurate or incomplete – to request the deletion or removal of personal data where there is no compelling reason for its continued processing -to restrict our processing of your personal data (i.e. permitting its storage but no further processing) -to object to direct marketing (including profiling) and processing for the purposes of scientific/historical research and statistics – not to be subject to decisions based purely on automated processing where it produces a legal or similarly significant effect on you

How should you go about exercising your rights?

To exercise these rights, you should contact the Data Protection Officer by email, telephone or letter. / 01392 400500 / Data Protection Officer, Room T115, Exeter College, Hele Road, Exeter, EX4 4JS.

How can I complain if I have concerns about the way the College is processing my personal information?

Complaints about the use of personal information should be raised with the College by using the Complaints Procedure. Complaints about how the College is processing personal information should be addressed to the Information Commissioner’s Office

Exeter College aims to protect the privacy of those whose personal information it processes.

From this page you can…

Be clear about the organisation(s) controlling and processing your personal dataThe Data Controller is:
Exeter College Further Education Corporation
Hele Road, Exeter, EX4 4JS
01392 400 500

ICO registration number: Z7131274
Access college policies and other documents governing the custodianship of personal informationExeter College Data Protection Policy
Exeter College Information Security Policy
Exeter College Data Retention Schedule
Organisations with which Exeter College may share personal data
Access the college’s general terms for sharing data with employers, other data controllers and processorsExeter College data sharing agreement with employers of work based learners
Exeter College data sharing agreement with joint data controllers
Obtain extended personal privacy information relevant to your relationship with the collegePrivacy information for learners (other than university-level)
Privacy information for students (university-level)
Privacy information for parents, guardians, carers and nexts of kin
Privacy information for Exeter College employees, workers and applicants
Privacy information for children, parents, guardians and carers using Exeter College nurseries
Privacy information for members of the public
Contact the college’s Data Protection OfficerThe Data Protection Officer is:
Martina Esser
Room T115
Exeter College
Hele Road
01392 400 500
Find out information about your rights as a data subjectAll data subjects have the following rights under the law:
The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling.
Find out further information about data protection law from the Information Commissioner’s OfficeInformation Commissioner’s Office.
Access the college’s complaints, comments and complaints procedureExeter College Complaints Procedure.

DPO Contact Form

If you need to contact the DPO, you can contact them using this form.