Your Personal Data

The University of Glasgow will be what’s known as the ‘Data Controller’ of your personal data processed in relation to the Schools Health and Wellbeing Improvement Research Network (SHINE). This privacy notice will explain how we will process your personal data.

Why we need it

School staff and other organisations: We are collecting your basic personal data such name, organisation, email address, contact details in order to communicate information relating to SHINE.

Pupils and others who agree to participate in SHINE research projects: We are collecting data in order to carry out the SHINE research projects, including very basic demographic data. We will only collect data that we need in order to do this work.

Legal basis for processing your data

We must have a legal basis for processing all personal data. In this instance, the legal basis is Public task/Official authority. For the special categories of data, such as health data we collect, the legal basis is scientific and historical research.

What we do with it and who we share it with

All the personal data you submit is processed by SHINE staff at the University of Glasgow in the United Kingdom. We do use some WordPress plugins on this website that may pass data, including personal information, to external servers to process, such as Akismet Anti-Spam. Read more about WordPress.org’s guidelines.

Consent to share research data will be requested from participants and data will be made available for sharing for research and teaching. We may share securely pseudonymised data that have had identifiable information removed or replaced with a pseudonym, with our collaborators at the University of Andrews under a Data Sharing Agreement. Pseudonymised research data may also be deposited in secure repositories such as the UK data archive or the University of Glasgow Enlighten: Research Data repository and be available to other researchers, provided they sign an agreement promising to keep the data private.

How long do we keep it for

Your data will be retained by the University of Glasgow for at least 10 years. After this time, if the data are no longer considered useful for research they will be securely destroyed in accordance with the relevant standard procedures.

What information do we store?

We store user input data sent through the membership contact form on this website, along with meta information about the submissions, including the time stamp, the origin IP address, and the user agent (browser). Also, third party services may collect information about website visitors. We currently use Google Analytics.

Where does the information go?

We use the Contact Form 7 plugin to manage contact form submissions. The information is sent as email messages that only a select few are allowed to access. The information is also stored in the database on our hosting server for backup.

Your rights

You can request access to the information we process about you at any time. If at any point you believe that the information we process relating to you is incorrect, you can request to see this information and may, in some instances, request to have it restricted, corrected or, erased. You may also have the right to object to the processing of data and the right to data portability.

If you wish to exercise any of these rights, please contact dp@gla.ac.uk.

Complaints

If you wish to raise a complaint on how we have handled your personal data, you can contact the University Data Protection Officer who will investigate the matter.

Our Data Protection Officer can be contacted at dataprotectionofficer@glasgow.ac.uk

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO) https://ico.org.uk/