eSubs is an online service run from UK data centres that helps educational establishments with the setting, submission, marking, feedback, verification and processing of results for academic and vocational courses. In doing so, MSC is acting as the "data processor " and the educational establishment is acting as the "data controller" as defined in the Data Protection (Jersey) Law 2018.
MSC collects the following personally identifiable information:
You may be provided with links to other websites from The Service. MSC have no control of any information collected by such sites and encourage you to read the privacy statements on them before making use of them.
Data retention periods will be set by your educational provider in their role as data controller. These will normally be set according to guidance from the appropriate exam board.
In the event that an educational provider stops using the service, their data may be kept for up to one year following the cessation.
Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer’s hard drive.
The security of your Personal Information is important to us. We will not pass your information to any third party other than to the police, regulatory bodies or legal advisers in connection with alleged criminal offences or suspected breach of the terms and conditions of use, or where otherwise required by law.
When marking or verifying the quality of student submissions, staff at your educational establishment and at exam boards can copy work you have submitted. Where this is done, such copies are subject to the data protection policy of the educational establishment acting as data controller.
Your personal data will be stored securely and processed under our data protection obligations as specified in the Data Protection (Jersey) Law 2018.
In the event of a breach of our security that leads to a loss of personal details, MSC will advise the data protection officers of educational providers using The Service, who will be responsible for advising users at their educational establishment and follow our procedures in line with obligations specified in the Data Protection (Jersey) Law 2018.
To provide The Service, MSC make use of facilities provided by Microsoft in the UK to process and store data including personal information.
While The Service stores and processes data in the United Kingdom, it can be accessed from anywhere in the world and users may access your personal information while outside the European Economic Area.
By agreeing to use The Service, you consent to such transfer of your personal data.
Under the GDPR you have the following specific rights relating to your personally identifiable information (PII):
Right to Access & Right to Portability: As a student, or member of staff, all personal information held about you is accessible to you from within The Service. As a student, you are also able to download all your PII from within The Service
Rights on automated decisions & profiling: The Service does not undertake any automated decision making or profiling.
Other Rights: If you wish to resolve an issue relating to the other rights listed above, please discuss the issue with your educational provider in their role as data controller.