• The College collects and processes two types of information through its websites:
• information voluntarily provided by you in order to receive requested information and/or services.
• information automatically collected upon your navigation of the College’s websites:
  a. The Internet Protocol (IP) address and name of the Internet domain you used to access the Internet
  b. The URL of the website from which you linked directly to the College’s website
  c. The date and time you accessed the website
  d. The web browser and operating system you used to access the College’s website.
  
  
• Information collected from third parties: At times the College will obtain personal data from these third parties. The College works with third parties, including:
  a. External service providers
  b. business partners
  c. stakeholders
  
  
• Third parties should explain to you in what circumstances your information will be shared with the College.
• Where the law allows the College, will notify you when it receives information about you from third parties and explain the purposes for which the information will be used.

• The College will process your information consistent with the consent you have provided, for purposes of BAC’s legitimate interests or to fulfil legal obligations.
• The College will process your personal data to achieve the following:
  a. To support educational operations, manage research and administrative needs of the College, stakeholders, and the community at large
  b. To maintain and improve services the College delivers to you
  c. To understand how people use its services so it can provide you with better user experience
  d. To detect, prevent or otherwise address fraud, abuse, security or technical issues with its services
  
  

• The College will not share your personal data with any other individuals or third party except in the following circumstances:
  a. Consent. The College may share your information with third parties if it has your consent
  b. Service Providers. The College enters into contracts with third parties to support its operations. In such cases, the College may share your information with such third parties who are obligated to safeguard the information in the same manner as the College.
  c. Required by Law. The College will share your information with third parties to the extent it is required to do so by law, court order, or subpoena.
  

• The BAC websites may contain links to third-party websites which may operate independently from this website.
• If you decide to use these links, you will leave the College’s website and may allow third parties to collect or share data about you.
• If you decide to leave the College’s website, you are strongly advised to read the privacy notice of every website you visit as BAC’s policies will no longer govern your personal information.

• The College will only retain your personal data in accordance with its Records Retention and Disposal Schedule, for as long as necessary to fulfil the purposes it collected the data for, including for the purposes of satisfying any legal or accountability requirements.
• There are instances where the College will anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case the College may use this information indefinitely without further notice to you.

Under the data protection law you have the following rights:
a. Request access to your personal data (commonly known as a “data subject access request”)
b. Request correction of the personal data that the College hold about you
c. Request erasure of your personal data. This enables you to the College to delete or remove personal data where there is no good reason for continued processing.
d. Object to processing of your personal data especially where the processing is relying on a legitimate interest (or those of a third party)
e. Withdraw consent at any time where the College is relying on consent to process your personal data.