BIMM Academy

BIMM Academy Privacy Notice for Children and Young People

This is a privacy notice. We have created this to let you know what happens to your personal data when you apply to become a pupil of a BIMM Academy.

We collect some information to make sure that we can run the Saturday school. Legally, it’s our job to tell you how we will collect the information, how we will record it, and how we will use it.

In this notice, you will see a few different names or terms used that you may not be familiar with, such as:

• Data controller: This person (or group of people, like us) oversees the information we collect.
• Data processor: This person processes (does things with) the information for the data controller. (An example of this is the person who is facilitating the course).
• Personal data: This means any information that can be used to identify a living person, such as a name, home address and date of birth.

Why do we collect and use your personal data?

We collect and use the personal data about you for the purpose of providing you with the BIMM Academy course that you are either enrolled on or are interested in joining.

What personal data is collected when you become a BIMM Academy pupil?

The categories of personal data that is collected include the following:

• Your first and last name
• Your age (date of birth)
• Your parent/guardian’s contact details including their first and last name, email address, home address, their date of birth and their phone number (2 emergency contacts)

Your parents give us this data when they register your interest in a course on our website.

Sometimes your parent may provide more sensitive information (the law calls it the ‘special category of personal data’), like relevant information about your health so that we can provide support.

Please don’t give us other people’s personal data, such as your friends or family.

Do I need permission for my parent or guardian to apply to a BIMM Academy course?

Yes, if you are under 18 years old, your parent/guardian needs to give permission before you can apply for any of our BIMM Academy courses.

Who looks after your personal data?

We (BIMM Academy) are the Data Controller of the personal data you give us – that means we are responsible for how and why your personal data is collected and used.

We’ve got a good reason for using your personal data (the law calls it the ‘lawful basis for processing’), because that needs to happen for you to get the BIMM Academy service we are providing.

We have made sure that your privacy rights are protected. The lawful bases for this processing is called ‘consent’ and ‘contract’. We can use your personal data because your responsible adult (as you are under 18 years old) has said ‘yes’ to allow us to do so. In this notice, we use ‘responsible adult’ to mean your parent, guardian or carer.

How long will your personal data be stored?

We will only keep your data for the length of your course at BIMM Academy. After this, it will be deleted securely.

If you have expressed an interest in BIMM Academy or decided not to go ahead after application stage, we will delete your data after X months.

Do we share your personal data with others?

In most cases, we do not share your personal data with third parties. We may however share your personal data with third parties only where we are required to by law or if there is an emergency. This may include information about you in special cases, for example when sharing your personal data will help keep you safe from harm.

What are your rights?

You and your parent/guardian have the right to:

• Be told how we use your personal data.
• Ask to see the personal data we hold about you.
• Ask us to change personal data that is wrong.
• Ask us to remove personal data when it’s not needed anymore.
• Ask us to only use your personal data in certain ways.
• Tell us you don’t want your personal data to be processed.

We can only help with above requests if we still hold the information that could identify you in our system.

If your responsible adult wants to make such a request, please contact [email protected] or [email protected].

More information

You will also be able to find out more information about how we process your personal data and how you can contact BIMM’s Data Protection Officer by emailing [email protected].

If you have a concern about the way that BIMM has handled your personal data, you can raise your concern with the supervisory authority in the UK, the Information Commissioner’s Office (ICO) https://ico.org.uk/.

Updating this privacy notice

This notice was last updated on 06/08/2021.

We will revise the privacy notice if there are significant changes to how we use your personal data.

BIMM Academy Privacy Notice for Parents/Guardians

Read about how we process your personal data and your child’s personal data.

Overview

BIMM Limited is incorporated and registered in England and Wales under the company number 06347465, and whose registered office is situated at 38-42 Brunswick St West Hove, East Sussex, BN3 1EL. BIMM Academy is a subsidiary of BIMM Music Institute. You can view the BIMM Music Institute Privacy Notice here.

BIMM Limited is registered as a Data Controller with the Information Commissioner’s Office (ICO). Our registration reference is ZA362716. As the data controller, we are responsible for both the personal data you provide us, and the personal data you give us about your child (we will be referred to as “BIMM”, “we”, “us” or “our” in this Privacy Notice).

BIMM’s main establishment is based in the United Kingdom and therefore the ICO is our supervisory authority.

If you have any queries concerning your personal data and how it is processed, contact our Data Protection Officer at [email protected].

The basis for processing your/your child’s personal data

We will collect and process personal data about you for the purposes described below.

• to process your application
• provision and facilitation of learning for children attending BIMM Academy
• to monitor attendance (for safeguarding, building safety e.g., fire evacuation procedures)
• to support relevant accessibility or student support needs (e.g., SEND)
• to evaluate the quality and performance of teaching
• for marketing and promotional activity on our websites or other social media sites, for example sharing images of your child online only with your prior consent

Our Estates and Facilities departments at college level also process personal information via the use of CCTV systems to monitor and collect visual images for the prevention and detection of crime, for disciplinary proceedings against staff and students and for monitoring security of our buildings.

Personal data may include ‘special categories of data’ (sometimes referred to as ‘sensitive data’). Categories of personal data are defined by the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR) and the UK Data Protection Act 2018 (DPA), which classifies special categories of data include information such as personal data about physical or mental health.

When we process personal data, there must be a lawful basis for doing so. When we process special category personal data, we need to meet additional conditions too. Further information about this can be found on the ICO’s website.

The most common basis for processing your personal data at BIMM is because it is necessary for our legitimate interests. The purpose of BIMM Academy is to support Music education and creative development of young people within the local community of our BIMM Music Institute Brighton campus. Examples of processing on this basis include monitoring and evaluating the performance and effectiveness of the Academy.

In addition to this lawful basis, we may also process this personal data because it is necessary for the performance of a contract or in order to take steps at your request to prior to entering a contract with us. For example, this may include interacting with you when you register your interest in the Academy and/or as part of the application process.

We may also need to process this personal data to comply with our legal obligations. This can include compliance and regulatory obligations, such as Prevent Duty and safeguarding requirements, or to assist with police investigations or other authorities.

We may also process this personal data where it is necessary to protect you or another person’s vital interests, for example in a life-or-death situation where urgent medical help is required.

We may also process this personal data where we have your explicit and specific consent to do so.

Personal data we collect about you and how we use it

Personal data is collected in several different ways depending on your interaction with BIMM Academy. The purposes for processing your personal data are outlined below.

Website visitors and enquiries

We collect personal data directly from website visitors or users through the use of a online Microsoft form if you register your interest in the Academy.

We also collect information automatically about your visit to our website. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. Further information about ‘Cookies’ is set out in our Cookies Policy.

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the Privacy Notice of every website you visit.

Retention of personal data

The Academy will only keep your personal data for as long as is necessary for the purpose for which it is processed.

Disclosure and transfer of personal data

We will only disclose your personal data to a third party when we are required to by law, where we have your specific consent, or where appropriate arrangements are in place with regard to data sharing – for instance:

• companies or suppliers with whom we engage to process data on our behalf – if so, we will ensure adequate arrangements are in place to protect your personal data, such as a Data Sharing Agreement and third-party security review
• third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, or is proposed to happen, then the new owners may use your personal data in the same way as set out in this Privacy Notice.
• legal representatives
• internal and external auditors.

How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• where we need it to perform our educational services (performance of a contract);
• it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Our legitimate interests are in providing our educational services to you and in promoting or furthering our educational services; or
• where we need to comply with a legal or regulatory obligation.

Your rights including access to information and correction

You have a number of rights under the General Data Protection Regulation, including the right:

• to rectify any inaccuracies in personal data that we hold about you. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
• to be forgotten (data erasure) in some circumstances, that is your personally identifiable information to be removed from systems that we use to process your personal data
• to restrict the processing of your personal data in certain ways
• to obtain a copy of your personal data
• to withdraw consent where that is the sole legal basis of our processing
• to object to certain processing of your personal data by us

Further information about your rights can be found on the ICO’s website. You may also contact the Data Protection Officer for further information.

You also have the right to ask to see what personal data we hold about you, known as a subject access request. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances. The timeline for responding to subject access requests is 1 month. Please contact [email protected] for further information.

You have a right to lodge a complaint with a supervisory authority at any time about the way in which we process your personal data.

UK: how to report your concerns to the ICO.

We would, however, appreciate the chance to deal with your concerns in the first instance.

Data security

We take security very seriously. All staff are made aware of the security procedures they must follow when handling personal information. Data is protected from unauthorised access and we are confident no-one will be able to access your personal information unlawfully.

We have put in place appropriate technical, organisational and security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed.

We have also put in place procedures to mitigate personal data breaches and to deal with any suspected personal data breach in a timely and effective manner.

Prevent Duty

BIMM is under a statutory duty to have regard to the need to prevent people being drawn into terrorism. If the use of BIMM computer equipment, information and systems gives rise to a concern that a person may be at risk, this may result in action being taken in accordance with the Prevent Duty Policy (PDF).

Links to third-party websites

While we will take all reasonable precautions to make sure that other organisations who we deal with have good security practices, we are not responsible for the privacy practices of those organisations whose websites may be linked to our service.

Changes to this Privacy Notice

We may change this Privacy Notice from time to time.  This may be necessary, for example, if the law changes or if we change our business in a way that affects personal data protection.

The latest version of our Privacy Notice will always be available on our website.

This privacy notice was last updated on 06/08/2021.

Further information

If you would like more details about how we use and store your personal data, please contact us.

Full Terms and Conditions for BIMM Academy can be found at the link below:

BIMM Academy Terms & Conditions