Privacy Notices
RNN Group Privacy Notice
Your privacy is important to us
When you choose the RNN Group, you trust us with your information. We take that responsibility very seriously.
The RNN Group privacy notices are present on all collection points where personal data is being collected from a data subject. Our information is clear and in ‘plain English’ and the purpose for collection is not vague and provides all relative information for the data subject to understand what is being done with the data collected by the Group.
On every data collection set, the Group also provides information in regards to the purpose and lawful basis of processing on all of its data collection sets. This provision of information builds on the current data protection expectations of data subjects and maintains the Group’s mandate to be transparent with its data processing.
What we need
The RNN Group is the Data Controller for the personal data you provide to us and is responsible for ensuring it is processed in accordance with UK Data Protection legislation.
The RNN Group has a Data Protection Officer (DPO), the DPO can be contacted directly by emailing dpo@rnngroup.ac.uk.
Why we need it
We need to know your basic personal data in order for us to provide you with details regarding your interaction with the RNN Group. We may also have legal obligations under UK legislation to collect data from you and will always process data where your vital interests are concerned or if it is in the public interest to do so. We will not collect any personal data from you that we do not need in order to provide and oversee any services to yourself.
Our lawful basis for processing
We process personal data under one or more lawful bases provided by UK Data Protection legislation. These include contract, legal obligation, vital interests, public task, legitimate interests and consent. Where special category data is processed, we will also identify an appropriate additional condition for processing.
What we do with it
All of the personal data we collect is processed within the UK. Where we use third party providers, personal data may be stored or accessed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR.
We may share personal data with organisations including awarding bodies, funding agencies, government departments, regulators, local authorities, safeguarding partners, employers involved in learner placements, and trusted service providers who support our operations. We will only share information where we have a lawful basis to do so and appropriate contractual arrangements are in place. A list of the organisations we may share information with is available in our Third-Party Vendor Register.
How long we keep it
There are various retention periods in place across the Group, some of which are determined by legal and regulatory requirements. Personal data collected for marketing purposes will be retained until you withdraw your consent, opt out of receiving marketing communications, or we determine that the information is no longer required for marketing purposes. Where applicable, we may retain limited suppression information to ensure your marketing preferences are respected. Personal data will then be securely deleted or anonymised in accordance with the Group’s retention schedule. Further information can be found in our Data Retention Schedule at www.rnngroup.ac.uk/ig.
What we would also like to do with it
The RNN Group may use some of the data that we have collected, such as your name and email address, to inform you of our future offers and similar products. This information is not shared with, or sold to, third parties and you can unsubscribe at any time via the unsubscribe option, phone or on our website. Sometimes this data may be stored or accessed outside of the UK. Where this occurs, appropriate safeguards are in place in accordance with UK GDPR.
What are your rights?
You have rights under UK data protection legislation, including rights of access, correction, erasure and objection. To exercise your rights, contact dpo@rnngroup.ac.uk.
If you are dissatisfied with how we process your data, you can complain to the Information Commissioner’s Office (ICO).
Third-Party Vendor Register
The document below lists third-party vendors and other external organisations associated with the RNN Group that may process or receive personal data in connection with our activities. It is published for transparency and compliance with data protection regulations.
Download the Third-Party Vendor Register
HEPP & HEPPSY Privacy Notice
RNN Group works with HEPP (Higher Education Progression Partnership) and HEPPSY (Higher Education Progression Partnership South Yorkshire) to support learners in exploring higher education opportunities through outreach activities.
To help monitor, evaluate and improve these programmes, limited learner information may be shared with programme partners, including Sheffield Hallam University and The University of Sheffield, in accordance with data protection legislation.
For further information about what data may be shared, why it is used, and your rights, please read the linked HEPP & HEPPSY Privacy Notice.