City Lit receives some government funding, as such it is legally required to provide some of the personal data collected when you enrol on a course to government agencies. These agencies are:
- Education & Skills Funding Agency
- European Social Fund
- Greater London Authority
Your information may be shared with our educational partners where necessary to provide you with a service you’ve requested. This would happen when, for example, you have requested to enrol on an accredited course where an external awarding body is involved. In this situation we may need to provide that awarding body personal information collected and potentially additional information. When doing this, we’ll provide you with further information at the time of collecting your information.
City Lit sometimes uses third parties to process and store your information on our behalf, for example to provide services or analysis. We require these third parties to comply strictly with your instructions and that they don’t use your personal information for their own business purposes, unless you have explicitly consented to them using your personal information in this way.
Although most of the information we store and process stays within the UK, some data may be transferred to other countries. Transfers to countries within the EU are permitted because every EU country is subject to the requirements under GDPR. In addition, EFTA States Iceland, Lichtenstein and Norway are also subject to GDPR requirements and so transfers to those are also GDPR compliant.
We may also transfer your data to countries outside the European Economic Area (EEA). Transfers outside the EEA are only permitted if the recipient country ensures an adequate level of protection for your rights and freedoms. Services where data is passed outside the EEA are permitted if the EU Commission has found a finding of adequate protection such as the Privacy Shield, the EU-U.S. and Swiss-U.S. framework designed by the U.S. Department of Commerce and the European Commission and Swiss Administration to provide companies on both sides of the Atlantic with a mechanism to comply with data protection requirements when transferring personal data from the European Union and Switzerland to the United States in support of transatlantic commerce. For transfers to any other country we will ensure that an adequate level of protection is provided by entering into a contract which encapsulates the Model Clauses given by the EU Commission.
We may use information which we hold about you to show you relevant advertising on third-party sites (e.g. Facebook, Google, Instagram, and Twitter). If you don’t want to be shown targeted advertising messages from City Lit, some third-party sites allow you to request that you don’t see messages from specific advertisers on that site in future.