What's on

Your Personal Data

Your Personal Data

The University of Glasgow will be what’s known as the ‘Data Controller’ of your personal data processed in relation to evaluating events at the ARC and managing the ARC events newsletter. This privacy notice will explain how The University of Glasgow will process your personal data.

Why we need it

For the ARC events newsletter, we are collecting your name and email address to send you information about the ARC and related events by email, as well as the first part of your post code if you chose to share it, to assess the impact and reach of events at the ARC.

For event feedback, we are collecting the first part of your postcode and age range, as well as limited special categories data if you chose to share it (gender, disability, ethnicity) and any additional information you may volunteer on the form where relevant to evaluate the impact and reach of events at the ARC.  If you choose to sign up to the ARC events newsletter via the feedback form, we will also collect your name and email address to send you information about the ARC and related events by email.

Legal basis for processing your data

We must have a legal basis for processing all personal data. In this instance, the legal basis is Consent and Explicit Consent.

What we do with it and who we share it with

All the personal data you submit is processed by staff at the University of Glasgow in the United Kingdom.

In addition:

• Your name and email address will be stored separately to the feedback and demographics information provided on the feedback form.
• Your data will be stored on University servers with appropriate technical and organisational measures in place to keep it secure.
• Your data will be fully anonymised for analysis and reporting purposes.
• We use Dotdigital to supply our bulk email service for external communications. Dotdigital is a private company (data processor) used to provide a bulk email service to the University. Your personal information will be held in the EU however there may be occasions where the sub-processors access the data (amounting to a transfer) in order to provide elements of their services for support. For further details, refer to Dotdigital’s privacy policy.

How long do we keep it for

Your data will be retained by the University to share information about the ARC and associated events. We review our audience engagement via Dotdigital every two years. If there is no engagement with our mailing list, users’ data will be securely deleted if there has been no engagement during this period.

What are your rights?*

You can request access to the information we process about you at any time.  If at any point you believe that the information we process relating to you is incorrect, you can request to see this information and may in some instances request to have it restricted, corrected or erased.  You may also have the right to object to the processing of data and the right to data portability.  Where we have relied upon your consent to process your data, you also have the right to withdraw your consent at any time. You can unsubscribe from the mailing list via an unsubscribe button which is on each newsletter. Alternatively, you can email ARCEngage@Glasgow.ac.uk.

If you wish to exercise any of these rights, please submit your request via the webform or contact dp@gla.ac.uk.

*Please note that the ability to exercise these rights will vary and depend on the legal basis on which the processing is being carried out. 

Complaints

If you wish to raise a complaint on how we have handled your personal data, you can contact the University Data Protection Officer who will investigate the matter.  Our Data Protection Officer can be contacted at dataprotectionofficer@glasgow.ac.uk

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO) https://ico.org.uk/