Business Engagement and Development Privacy Statement
Swansea University as Data Controller
Swansea University is the Data Controller and is committed to protecting individual rights in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). The University has appointed a Data Protection Officer, who can be contacted at dataprotection@swansea.ac.uk.
Purpose of Data Collection
Swansea University collects personal information to foster meaningful partnerships between the University, employers, and students. This supports broader goals such as enhancing graduate employability and contributing to economic growth.
The following data may be collected:
- Name
- Job Title
- Company Name
- Email Address
- Phone Number
- Company Address
- Company Size
- Interest in Employability Activities
Uses of Collected Information
The information provided will be used for the following purposes:
- Finance Administration: Managing fees, scholarships, and bursaries.
- Research and Analysis: Conducting statistical studies to inform strategies.
- Operational Information: Providing updates related to employability initiatives.
- Promotional Activities: Promoting University services and employability programs.
- Employer Liaison: Facilitating internships, placements, career fairs, and collaborative projects.
- Strategic Planning: Informing employability strategies, tracking engagement trends, and tailoring outreach efforts.
- Enhancing Graduate Outcomes: Collaborating with employers to create work-based learning opportunities and align student skills with industry needs.
- Administrative Purposes: Maintaining accurate records of employer contacts for operational efficiency and compliance audits.
Legal Basis for Processing
The University relies on:
- Legitimate Interests: To liaise with employers and promote employability initiatives.
- Public Task: To fulfill its mission of advancing education and improving graduate employability.
Data Sharing
Information may be shared with internal University teams whose work aligns with fostering student career opportunities, such as organizing employability events or managing placements. It will be shared with other internal teams to enhance collaboration with external organizations. Access is restricted to authorized staff members and used solely for purposes consistent with the University's mission.
Data Retention Policy
Personal data will be retained for as long as necessary to fulfill its intended purposes. Contact details are typically retained for up to six years after the last interaction unless otherwise required by law. Data that is no longer needed will be securely deleted or anonymized.
Data Security Measures
Swansea University employs robust security measures to protect personal data:
- Access Control: Restricting access to authorized staff using strong authentication methods.
- Secure Storage: Storing data on secure University servers protected by firewalls and controlled access protocols.
- Off-Campus Protection: Using VPNs for remote access and minimizing off-campus data storage.
- Staff Training: Providing regular training on GDPR principles and security best practices.
- Incident Response: Implementing procedures for reporting data breaches promptly, including notifying the ICO within 72 hours if necessary.
Your Rights
You have the right to access, object to processing, rectify, erase, restrict, or port your personal information under applicable laws. For further details on your rights, please visit Swansea University's Data Protection webpages.
Requests or objections should be made in writing to:
Email: dataprotection@swansea.ac.uk
This privacy notice was last updated in May 2025.