Data Protection

The types of personal data processed by LYIT include, inter alia:

• Student ID number(s)
• Name, date of birth, country of birth, nationality and telephone numbers
• Addresses (home and term addresses)
• PPS number
• Email address
• Next of kin/emergency contact details
• Details of previous examination results
• Schools/colleges attended
• Course application details
• Image in digital photograph for ID card
• Financial information (including details of funding and fees paid and outstanding)
• Bank details, including IBAN, BIC, Name of bank/ building society
• Credit Card Details (processed in real time)
• Academic history
• Academic marks
• Attendance records
• Qualifications awarded
• Engagement with IT system, Blackboard activity and use of facilities such as the library
• Health and disability information
• Parents socio economic grouping
• Parents occupation
• Parents employment status
• Gender
• Religion
• Ethnic origin
• Disciplinary information
• Details of criminal convictions as provided through Garda Vetting (for specific courses)
• CV
• Image in CCTV footage/photography/filming
• Exam scripts
• IP Address

Some of the information about you that the Institute holds, such as your ethnic origin, is classified as sensitive personal data. This sensitive personal data is collected to meet Government requirements, to monitor whether our equal opportunities policies are working and to ensure that disabled students and other under-represented groups receive appropriate support. For certain programmes which involve contact with minors, information about past criminal convictions is processed. In addition to the normal standards of confidentiality, we also carefully control access to sensitive data within the Institute so that it is only available to people who 'need to know'.

The purposes for which LYIT may process your personal information include:

• To administer your studies, record academic achievements and determine/record your overall award outcome
• To support you in your studies, i.e. we may use information you have given us (e.g. disability) and information we collect about your engagement with services (e.g. Blackboard) to identify students who require additional support or specific services and enable analytics for reporting purposes (such as student progress and academic performance).
• To monitor and evaluate the student experience.
• To administer the financial aspects for your registration as a student (e.g. payment of fees, refunds, debt collection)
• To identify you and enable you to access resources by means of your ID cards
• To enable effective communication with you
• To manage Institute facilities and services including computing, library, careers
• To administer appeals, complaints, grievances, disciplinary matters, and matters relating to conduct and cheating / plagiarism
• To process scholarships, prizes and bursaries
• To ensure your health, safety and well-being
• To provide information to organisations such as the HEA,  Social Welfare, Revenue, SUSI, the Gardaí, in line with legal and government requirements
• To comply with statutory reporting requirements
• To produce reports and aggregated statistics for management and research purposes in order to plan and improve services
• To administer voluntary surveys of student opinion about your experience and the performance of the Institute
• To create and publish print & electronic material (e.g. prospectus, brochures, website, etc) for promotional and archival purposes
• To maintain a proportionate CCTV system for the specific purposes outlined in the CCTV Policy
• To assist with law enforcement or where required or authorised by law
• To confirm the details of your academic achievements, and for statistical and historical purposes, a core record of your studies in retained indefinitely
• To enable our continued contact with you after you complete your studies (e.g. survey of graduate work destinations, alumni networks, marketing, etc)
• To respond to requests for information made under data protection legislation.

Additional processing may be required for students registered on specific programmes (e.g. teaching and social care work) or with certain funding requirements or for students who choose to pursue studies abroad.

The Institute undertakes to maintain your information securely and restricts access to employees, professional advisers, and data processors on a strictly need to know basis. Below are examples of when the Institute will release data about you to third parties (i.e. outside LYIT) where we have a legitimate reason in connection with your time here at the Institute. LYIT may share your relevant personal data with bodies including the following:

• Higher Education Authority (HEA)* - please refer to the HEA collection notice below
• Quality and Qualifications Ireland (QQI)
• Student Universal Support Ireland (SUSI) for grant eligibility purposes
• Department of Social Protection to verify employment status and eligibility for allowances
• Revenue Commissioners
• Professional and regulatory bodies where programmes are accredited by such bodies
• Work placement providers
• Employers where students are studying as an apprentice
• Other higher education institutions, partners or research organisations to which a student transfers or pursues an exchange programme or where a student programme is being run collaboratively
• Software providers or service providers performing administrative functions on behalf of LYIT (e.g. IT services)
• LYIT Students Union to facilitate student elections
• External examiners
• Sponsors funding student prizes and awards
• Plagiarism detection service providers (e.g. Turnitin) to ensure academic standards
• Potential employers/recruitment companies for verification of qualifications
• Irish Survey of Student Engagement (ISSE)
• Insurance companies in respect of accidents occurring within the Institute
• Institute legal advisors
• An Garda Síochána to assist in the prevention or detection of crime
• Auditors
• Credit Card Providers

This is not an exhaustive list and any other disclosures to third parties not listed here are made only where there is legitimate reason to do so and in accordance with the law.

It is your responsibility as a student to communicate and engage with the Institute. LYIT will not normally disclose your data to parents or relatives without your consent, other than in exceptional circumstances i.e. where there is potential danger to the health or well-being of a student. We may agree to discuss matters relating to you with a parent/relative but only if you consent to this. Exceptionally, where urgent communication with a student through direct contact details is not possible or has, following repeated attempts, been unsuccessful, contact may be via a student’s parents and/or next of kin using contact details provided by the student.

All graduating students, including those graduating in absentia, will have their name, award and classification listed in the graduation booklet. The graduation ceremonies are streamed live on the internet and are recorded for publication on the internet and for archival purposes. Many LYIT events are recorded and streamed/published on the LYIT website

There are certain circumstances where we will transfer personal data outside of the EEA to a country that is not recognised by the European Commission as providing an equivalent level of protection for personal data as is provided for in the EEA. We are currently working on getting appropriate transfer mechanisms in place to protect personal data in these circumstances.

There are certain circumstances where we will transfer personal data to a third party employer or recruitment agency to allow them to verify your attendance at LYIT and in other situations for the provision of a reference. We are currently working on getting appropriate safeguards around verifying your consent and verifying the source which the information will be provided.

You have the following rights, subject to certain exemptions, in relation to your data:

• The right to be informed about the data processing the Institute does
• The right to request access to your personal data held by the Institute - to have a copy of the personal data that we hold about you
• The right to rectification to have inaccurate or incomplete personal data rectified
• The right to erasure of personal data where there is no legitimate reason for the Institute to continue to process your personal data. If you exercise this right, the Institute will continue to hold some personal data which, for graduates, will include name, subject(s) studied, graduation details, date of birth and unique identification number, so that we do not inadvertently contact you in the future and to maintain your education records for archive purposes. We may also continue to hold some financial records about you for statutory purposes
• The right to restrict the processing of personal data you have the right to block the processing of your personal data in specific situations
• The right to data portability - you have the right to request that the Institute provides some elements of your information (e.g. academic progress records) in a commonly used machine readable format in order to provide it to other organisations
• The right to object -you can object to the processing of your personal data by the Institute in certain circumstances, including the sending receipt of direct marketing material
• The right to object to automated decision making profiling. GMIT does not currently make decisions affecting students by automatic means without human intervention.

In order to exercise any of the above rights please contact us using the contact details set out below.

The Institute will retain your personal data in accordance with our retention policy in our data inventories. The policy operates on the principle that we keep personal data for no longer than is necessary for the purpose for which we collected it. It is also kept in accordance with any legal requirements that are imposed on us. This means that the retention period for your personal data varies depending on the type of personal data. The Institute will hold some of your data indefinitely in support of your lifelong relationship with LYIT, or unless you ask us to do otherwise. See ‘The right to erasure of personal data’ above.

We are committed to ensuring that your personal data is secure with us and with the data processors who act on our behalf. We are continuously taking technical and organisational steps to better protect your information. Data Protection training has been made available to all staff.

The LYIT website privacy policy explains how data may be gathered about users of the Institute’s website

We may contact you by telephone, email or post. In addition, if you have provided us with your mobile number, we may text you with Institute-related information e.g. exam information, grant information, appointment reminders, etc. We are reviewing the legal basis for sending you text, and in the event that it is consent, we will review how your consent will be captured and maintained in line with the requirements of GDPR.