For Springpod to deliver its market-leading and innovative services, it must use certain information. When considered together with Springpod's Privacy Notice, this notice gives you more detailed information about what data is processed, under what lawful basis and how it is secured.
Basic Information Required for an account
Basic Information Required for an account
Basic Information Required for an account
Mandatory information is processed lawfully under the basis of necessity per GDPR Article 6, part 1(b) and optional.
Optional information is processed lawfully under the basis of legitimate Interest per GDPR Article 6, Part 1(f).
Special category information is processed lawfully under the lawful bases of legitimate interest, considering that the prohibition in GDPR Article 9 is exempt under GDPR Article 9, Part 2 (b) because the information is used for employment. One of the main reasons for this is that the Student remains in complete control of their data because they can object to processing carried out under legitimate interest.
Students are also allowed to give Springpod consent to use the information they have provided for marketing purposes, which may include sharing the information with third parties for marketing.
Student Data may be shared with Parents, Employers and Education providers under the lawful bases of necessity and/or legitimate interest where applicable, unless in the case of legitimate interest, the Student has objected to it.
Because Springpod is delivering the work experience on behalf of the Employer, it is the Employer who is the Data Controller for the purpose of providing the work experience. Springpod will act as the Data Processor on behalf of the Employer.
When records are shared with Education Providers, it is so that they can use it for education, so the Education Provider will be the data controller for the purpose of sharing information with them, and Springpod will be acting as the data processor on their behalf.
When anyone registers for an account on the Springpod Platform, Springpod will be the Data Controller, even though Springpod may be acting as a data processor for Education Providers or Employers at the same time for other purposes.
Before sharing any information between Springpod and an education provider or Employer, a Data Sharing Agreement that governs the sharing must be agreed upon by both parties.
There are added checks in place before information can be shared between Springpod and an education provider, such as the name and contact information of their Data Protection Officer and Safeguarding Responsible Person so that we have that information ready to respond to any data subject requests or safeguarding concerns.
Most of the time, the information that Springpod makes available to Employers and Education Providers to facilitate the Virtual Work Experience is given to us directly by Students themselves.
Occasionally we receive information from Education Providers and employers when it's appropriate and lawful.
All information shared by Springpod is done so securely, and data in transit is encrypted.
As with any new project, there are a few things to think about to ensure that you are taking data protection into account.
If you would like any more information about processing personal data to facilitate work experience, you can contact Springpod's Risk & Compliance Officer by:
Telephone: +44 (0)203 637 8665 (Ex. 230)
Email: DPO@springpod.co.uk
And if you want further guidance on your own responsibility to comply with data protection regulations, there is a range of useful tools and guidance on the UK Information Commissioner's Office (ICO) website at www.ico.org
