The Higher Education Funding Council for Wales (HEFCW) is the Lead Beneficiary of the GO Wales: Achieve through Work Experience Programme and is a registered data controller with the Information Commissioner's Office.
Under data protection legislation, we have a legal duty to protect any information we collect from you. We follow strict security standards to prevent any unauthorised access to your data.
We will only use your information for the purpose described and we would not disclose any information to any other body except where this is necessary to comply with the law or protect our services or others.
When you visit our website we log your IP address which is classed as personal information. We also log your browser type (e.g. Internet Explorer, Firefox, Google Chrome) and the referral website (if the last website you visited provided a link to us).
We collect information from students who send an enquiry on the Programme to the GO Wales team in their university using the 'Contact us' form on the website. If you contact the GO Wales team in your university through this website, HEFCW will not pass on any of your information to anyone other than the GO Wales team in your university.
Our website hosts the portal to log into the GO Wales AtWE IT system. We log the usernames and IP addresses of anyone who attempts to log on, whether they are successful or not, or whether they are using a valid login name or not.
If you use 'forgotten password', we store the data submitted to this page in a database alongside a timestamp of submission.
We use data in log files to compile website usage statistics and error tracing. Under normal circumstances, we do not use the data to identify a visitor or trace a visitor's activity on the website. However, we may do this in order to identify abusive activity.
Our lawful basis for processing of this information is for the purposes of our legitimate interests in providing IT services and systems that are secure and function effectively.
Logs are stored for 12 months before they are permanently deleted.
We try to be as open as we can be in terms of giving you access to your personal information. Under data protection legislation, you have certain rights which are explained at www.ico.org.uk.
The right to request access to your personal information is known as making a subject access request. You are entitled to know what information we hold on you, and can make this request, in writing, to email@example.com. We will need to confirm your identity in order to process your request.
If you have feedback on this website, you can contact us at firstname.lastname@example.org.
This privacy notice is regularly reviewed to ensure that it accurately describes how we process personal information. This notice may be updated from time to time, for example, when new legislation is enacted or when new purposes or systems are added.
Regularly reviewing this page ensures you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.
This privacy notice was last updated on 17 May 2018.