Privacy Notice

This notice explains how Cardiff Student Letting (referred to in this notice as we, us or our) collects and uses information during the advertising, letting, management and tenancy process. This notice covers the following:

• What is personal data?
• How do we collect personal data?
• What information do we collect?
• How do we use your information?
• What is the legal basis that permits us to use your information?
• How do we share your information?
• What happens if you do not provide information that we request?
• When do we transfer your information overseas?
• How do we keep your information secure?
• Your rights in relation to your information
• For how long do we keep your information?
• Complaints

What information do we collect?

We collect, or may collect, the following categories of information about you:

• Name(s)
• Surname
• Student number
• Course details
• Mode of attendance
• Date of Birth
• Home address and postcode
• Term time address and postcode
• Employment status
• Employment references
• Landlord / Letting Agent references
• Information about criminal convictions and offences committed by you

• Post tenancy address and postcode
• Current residential status
• Proof of address
• Contact email addresses
• Phone numbers
• Gender
• Enrolment status
• Year of Study
• Credits Obtained
• Planned End Date
• Copies of ID
• Visa status

• Guarantor name
• Guarantor address
• Guarantor phone numbers
• Guarantor email address
• Guarantor residential status
• Guarantor employment status
• Guarantor copy of ID
• Guarantor proof of address
• Guarantor Salary
• Guarantor Employment details
• Guarantor prior addresses
• Guarantor Date of Birth

How do we share your information?

We share your personal data in the following ways:

• where we use third party services providers who process personal data on our behalf in order to provide services to us. This includes external referencing companies and IT systems providers.
• we will share your personal data with third parties where we are required to do so by law or to comply with our regulatory obligations.
• with prior notification and your consent - If we sell any part of our business and/or integrate it with another organisation your details may be disclosed to our advisers and to prospective purchasers or joint venture partners and their advisers.

Where we share your personal data with third parties we ensure that we have appropriate measures in place to safeguard your personal data and to ensure that it is solely used for legitimate purposes in line with this privacy notice.

How do we keep your information secure?

Your tenancy related data may be stored in any of the following:

• secure storage on network drives. These are shared computer drives hosted by Cardiff University who have appropriate firewalls in place. Access to the drives are password protected and limited to the team of staff who may process the data
• we use secure folders to keep any hardcopies of your data, access to the secure folders is restricted to a limited number of employees.
• any information shared will be done so securely in password protected data files with suitable security firewalls in place.
• all third parties that process your data on our behalf use modern secure storage systems where data is encrypted.
• it is very rare that we use any portable media but where no other system is available to us all portable devices are encrypted.

Procedures are in place to ensure access to personal data is restricted to employees working within our group on a need to know basis. Training will be provided to any employees working within the group who need access to your personal data to ensure it is secured at all times. Suitable procedures are in place to ensure information is only kept as long as it is required, after which it is destroyed in a secure fashion. We never keep your data longer than we deem necessary, we have our/your legitimate interest in doing so or are legally required.

Your rights in relation to your information

You have a number of rights in relation to your personal data, these include the right to:

• be informed about how we use your personal data;
• obtain access to your personal data that we hold;
• request that your personal data is corrected if you believe it is incorrect, incomplete or inaccurate;
• request that we erase your personal data in the following circumstances:
  • if we are continuing to process personal data beyond the period when it is necessary to do so for the purpose for which it was originally collected;
  • if we are relying on consent as the legal basis for processing and you withdraw consent;
  • if it is necessary to delete the personal data to comply with a legal obligation.
  • if the personal data has been processed unlawfully (i.e. in breach of the requirements of the data protection legislation);
  • if we are relying on legitimate interest as the legal basis for processing and you object to this processing and there is no overriding compelling ground which enables us to continue with the processing;
• ask us to restrict our data processing activities where you consider that:
  • personal data is inaccurate;
  • our processing of your personal data is unlawful;
  • where you have raised an objection to our use of your personal data;
  • where we no longer need the personal data but you require us to keep it to enable you to establish, exercise or defend a legal claim;
• not be subject to automated decisions which produce legal effects or which could have a similarly significant effect on you.
• request a copy of certain personal data that you have provided to us in a commonly used electronic format. This right relates to personal data that you have provided to us that we need in order to take steps to enter you into a tenancy or advertise your property and personal data where we are relying on consent to process your personal data;
• object to our processing of your personal data where we are relying on legitimate interests or exercise of a public interest task to make the processing lawful. If you raise an objection we will carry out an assessment to determine whether we have an overriding legitimate ground which entitles us to continue to process your personal data.

If you would like to exercise any of your rights or find out more, please contact the Letting Agency via emailing info@cardiffstudentletting.com or calling us on 02920 781525 .