Purpose of this Notice
This Notice explains how the University through its Educational Engagement team, Departments, Schools and Faculties will collect and use your personal data.
Please see below more information on the Educational Engagement activities covered by this Notice.
Throughout this Notice, “University” “we”, “our” and “us” refers to the University of Leeds. “you” and “your” refers to external members of staff in schools, colleges and other educational providers, together with other individuals involved in Educational Engagement activity.
We are the data controller for personal data that we process about you.
Change in the law
Until 24 May 2018 we shall process your personal data in accordance with the Data Protection Act 1998 (or DPA for short). From 25 May 2018, we shall process your personal data in accordance with the General Data Protection Regulations (or GDPR for short).
This Notice complies with requirements under both DPA and GDPR.
Changes to this Notice
Prior to the implementation of GDPR, we are likely to make changes to this Notice. We shall inform you of any changes to this Notice.
Anything you are not clear about
If there is anything you are unclear about, please contact our Data Protection Officer, who shall be happy to answer any queries you may have concerning this Notice or the way in which we process your personal data.
The Data Protection Officer’s contact details are provided at the end of this Notice.
Where does the University get your personal data from?
We obtain personal data regarding you from the following sources:
· from when you provide contact details to us for outreach activities
· from school, DFE and other websites
Categories of personal data being processed
We will collect and process personal data about you.
The data we may process includes:
· your title, name (including former name or alias)
· the school, college or FE provider where you work
· your contact information (address, telephone, email, social media)
· your business details including role, subject area and organisation
· events you have been invited to and whether or not you have responded or attended
· we will keep a record of interactions with you for future reference and to help tailor further communications with you; as part of this, some emails sent by the University may record whether the email has been opened and whether any links have been clicked on
· generally information that you have decided to share with us
As with most websites certain actions you take will be recorded anonymously as cookies by the University’s websites. Please see the Educational Engagement website for further information on Cookies.
The purposes for which we process your personal data
In general terms, we process your personal data for the organisation and administration of outreach activities
Additional notices and guidance/polices
The University’s Data Protection Code of Practice – this is presently being reviewed and updated ready for compliance with GDPR. It contains a lot of useful general information on data protection and University practices. See http://www.leeds.ac.uk/secretariat/data_protection_code_of_practice.html
Automated decision making
Your data may when, anonymised and no longer constituting personal data, be used to support alumni activities.
Please note that if you wish to make a gift to the University we may process your personal data, including information from the public domain, for due diligence purposes, in accordance with our Gift Acceptance and Naming Policy. View our Gift Acceptance and Naming Policy
Keeping your data up to date
We will update the data we hold on you from time to time. For example, if you provide us with new contact details or in response to your request for your data to be updated.
We may update your contact details by using third party sources/services.
Who can see your data?
Your data is held securely within the University. Access is strictly controlled and staff receive training on data protection.
In addition to third parties helping us keep your data up to date, in order to boost functionality and efficiency, we may employ IT experts from outside of the University to aid with the development of our systems. They may have access to information which is necessary to complete the specific task for which they are appointed. These experts will provide their services in accordance with the strict instructions of the University. In particular they must respect confidentiality and to the extent they do need to temporarily hold any data, that data must be held securely, strictly used only for the agreed purpose, kept for only as long as necessary and then destroyed.
We will not sell or share your data to third parties for their commercial purposes.
We will from time to time communicate with you by email, post and telephone. In particular we regularly communicate with people for the following purposes:
· share news about the University (including its research and services)
· invite you to events
· invite you to support our fundraising activity
If, at any stage, you are concerned about the content of these communications, eg. Unwanted marketing information, or wish to change the method of communication we use, please unsubscribe to general email communications.
If you are unsuccessful in unsubscribing from our communications and/or remain concerned, please contact our Data Protection Officer (see later contact details).
Generally the University will retain personal data until the individual asks us to remove it from our records. We will routinely remind you of your right to have us remove your personal data.
If you are not a member of the University alumni community, any personal data held will be deleted should you not respond to our attempts to contact you, or should you state that you have no interest in forming a relationship with the University.
Your rights as a data subject
Under GDPR you have the right to:
· withdraw consent where that is the legal basis of our processing
· access your personal data that we process
· rectify inaccuracies in personal data that we hold about you
· be forgotten, that is your details to be removed from systems that we use to process your personal data
· restrict the processing in certain ways
· obtain a copy of your data in a commonly used electronic form; and
· object to certain processing of your personal data by us
Please see https://ico.org.uk for further information on the above rights. You may also contact the Data Protection Officer for further information.
You have a right to complain to the Information Commissioner’s Office about the way in which we process your personal data. Please see https://ico.org.uk.
Legal basis for processing your data under GDPR
GDPR is a new law and it has not yet been applied to circumstances similar in context to our relationship with external stakeholders. The extent of lawful grounds for processing data has yet to be fully understood. As legal views mature the University may change its views on its legal basis for processing.
Educational Engagement will process your data based upon your consent.
Concerns and contact details
If you have any concerns with regard to the way your personal data is being processed or have a query with regard to this Notice, please contact our Data Protection Officer, Adrian Slater at firstname.lastname@example.org.
Our general postal address is University of Leeds, Leeds LS2 9JT, UK.
Our postal address for data protection issues is University of Leeds, Room 11.72 EC Stoner Building, Leeds, LS2 9JT.
Our telephone number is +44 (0)113 2431751.
Our data controller registration number provided by the Information Commissioner’s Office is Z553814X.
Last updated: 03/05/2018