Doodle Ease - Creative Neurographic Mindfulness CourseInfo Location Contact More Info Course Information This unique course invites individuals of all artistic levels to explore the intersection of creativity and the mind-body connection. Whether you're an art enthusiast, a beginner seeking new adventures, or you are interested in integrating art into your day-to-day life, this course is designed for you! Course CodeAPOAS8DoodleNK Course LeaderNikolett Kovacs
Location
Additional InformationPrivacy Notice – COAS Flywire Course Bookings The following notice describes how your data is managed by Cardiff Metropolitan University for the purpose of course bookings and payment in accordance with data protection legislation - the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA18).
Introduction Cardiff Metropolitan University is the Data Controller and is committed to protecting the rights of individuals in line with the UK GDPR and the DPA18. Data Protection Contact Cardiff Metropolitan University’s Information and Data Compliance Officer can be contacted via the following routes (if you have any further queries regarding the processing of your data):
Email: [email protected].
Overview By means of this notice, Cardiff Metropolitan University wishes to notify you of the following:
Personal Data Collected
This information is used to administer your course bookings and payment for them.
Special Category Data Collected (Please note: Special category data is personal data that needs more protection because it is sensitive)
• Details of any special requirements (for example, accessibility, medical conditions)
If you choose to disclose any additional information, your special category data will be used to make any necessary adjustments and will inform risk assessments.
What Cardiff Metropolitan University uses your Personal Data for Your personal data is used for processing booking information, and for processing payments for the courses.
Direct Marketing: The University would also like to use your contact information to promote its courses to you, and to contact you with information about future courses that may be of interest to you. This will not be done without your consent.
Sharing Information with Other Organisations The University uses Flywire to process your booking information and Global Payments to process your payments – personal data captured at the point of reaching the payment portal is not shared with Cardiff Metropolitan University.
Flywire is an American company which complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, as set forth by the U.S. Department of Commerce. Flywire has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. To learn more about the Data Privacy Framework (DPF) program, and to view certification information, please visit https://www.dataprivacyframework.gov/.
Booking Information: The personal data collected for booking purposes is processed by Cardiff Metropolitan University and Flywire for which there is a binding contract in place. Flywire’s Privacy Policy can be found here: https://www.flywire.com/legal/privacy-policy.
Payment Information: The personal data collected for payment purposes is processed by Global Payments whose Privacy Policy can be found here. Global Payments is based in the UK but has Group Companies outside the UK. Therefore, your personal data might be transferred outside of the UK or the European Economic Area (EEA). For more information about Global Payments and data transfers, please read Section 6 of this Merchant Data Processing Notice. If you have any concerns over the handling of your data, please contact [email protected]. Direct Marketing: If you have given your consent to be contacted for the purpose of the promotion of courses, this data will be processed by the University. If you have any concerns over the handling of your data contact [email protected]. Cardiff Metropolitan University’s Legal Basis for Processing Your Personal Data In order to process your personal data, Cardiff Metropolitan University must ensure that it is compliant with one of the ‘Lawful Bases’ for processing under Article 6 of the UK GDPR. This means that it must have a lawful reason for using/storing personal information for the purposes outlined in the “What Cardiff Metropolitan University uses your Personal Data for” section of this notice.
Booking Courses: Article 6.1(e) – Performance of a Public Task Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller. Payment for Courses: Article 6.1(b) – Performance of a Contract Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Direct Marketing: Article 6.1(a) – Consent The Data Subject has given consent to the processing of his or her personal data for one or more specific purposes.
In order to process your special category data, Cardiff Metropolitan University must ensure that it is compliant with one of the ‘Lawful Bases’ for processing under Article 9 of the UK GDPR.
Article 9.2(g) – Processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.
Schedule 1, Part 1, 16.1(a) - Support for individuals with a particular disability or medical condition 16(1) This condition is met if the processing—
Security of Processing As the Controller, Cardiff Metropolitan University has implemented technical and organisational measures to ensure personal data processed remains secure, however absolute security cannot be guaranteed. Should you have a concern about a method of data transmission, the University will take reasonable steps to provide an alternate method. For more information about IT security at Cardiff Metropolitan University, and keeping your data safe, please click here.
Retention of Personal Data
Contact Details: These are stored as part of your Flywire account information and are kept permanently.
Order Information: Flywire and Cardiff Metropolitan University store information related to your purchase for seven years. The data will then be securely destroyed.
Additional Booking Information: Flywire and Cardiff Metropolitan University will retain your personal information for five years. The data will then be securely destroyed.
Payment Information: Global Payments stores your payment information for 25 months, in case of a need for a refund.
Special Requirements: During its lifecycle, medical data is used to inform risk assessments. Risk assessments are kept for up to 40 years; however, they are anonymised.
Individual Rights The lawful basis for processing can affect which Rights are available to individuals. Using Performance of a Public Task as the lawful basis for processing, your Individual Rights include:
Using Consent as the lawful basis for processing, your Individual Rights include:
Using Performance of a Contract as the lawful basis for processing, your Individual Rights include:
For more information about these Rights, please click here.
General Cardiff Metropolitan University has a Data Protection Policy, which can be found here.
If you wish to make a complaint about the way your personal data has been processed you can find details of how to do so here.
If this process does not resolve your issue, or if you wish to take your complaint further, you have the right to contact the Information Commissioner. The contact details are: Information Commissioner’s Office – Wales
0330 414 6421
| |||||||||||||||||
