The Data Lab is committed to preserving your privacy. This notice sets out how The Data Lab (“we”, “our” and “us”) uses personal information that we collect from you when you use the Data Readiness Assessment Survey site.
As a Scottish Innovation Centre, The Data Lab is administered and hosted by the University of Edinburgh meaning that we are the same legal entity. The University of Edinburgh is a registered charity with registration number SC005336.
For the purpose of the General Data Protection Regulation, the data controller is the University of Edinburgh with offices at Old College, South Bridge, Edinburgh, EH8 9YL, Information Commissioner’s Office Registration Number Z6426984.
This privacy notice applies to any visitors, registered or registering users of the Data Readiness Assessment Survey site.
Please note The Data Lab offers other services which are provided under different privacy notices. For example, if you use our website www.thedatalab.com or attend an event hosted by The Data Lab, the relevant privacy policy is – https://www.thedatalab.com/privacy-policy.
The Data Lab uses Pulsion Technology Limited which provides the basis of the Data Readiness Assessment Survey site. Pulsion Technology Limited will process personal data strictly for the purposes of operating the platform. The Data Lab has a contract in place with Pulsion Technology Limited to ensure they are obliged to protect your personal information.
1. Information about you
| INFORMATION WE COLLECT | REASONS FOR COLLECTING IT | LEGAL BASIS |
|---|---|---|
| Contact Information: Name, email address | We collect this information so that we can provide you with access to the Survey and inform you of any results, updates, changes or other useful information in relation to your use of the Survey. If you opt in to our marketing emails we will use your email address to provide you with updates relevant to The Data Lab. | Contract – we collect this information in order to fulfil our agreement with you to provide access to our Data Readiness Assessment Survey site Consent – We only send you these emails where you have provided your consent. |
| Professional Information: Details about your job role, the sector you work or study in, where you are located. | We collect this information so that we can assess the type of audience the Data Readiness Assessment Survey site attracts. This will help us to tailor our marketing and ensure that the content on the site is appropriate for the audience and continue to improve on this. | Legitimate interests – our interests being to continually improve on the Data Readiness Assessment Survey site and ensure the information provided is appropriate for the users. |
| Cookies Information: Cookies will be used to ensure the functionality of the site, the cookies will store the information set out in this table | The cookies are necessary for the functionality of the platform. Without these cookies, the site will not perform correctly. | The cookies are strictly necessary for the functioning of our Data Readiness Assessment Survey site and are used on the basis of legitimate interests, our interests being the site being able to operate properly. Check information in your browser’s help section for specific instructions on how to manage cookies. Alternatively, websites such as “All About Cookies” provide comprehensive guidance. |
Sharing Tools and Linking to Other Websites
The Data Readiness Assessment Survey site may use sharing tools. Sharing tools allow you to share content through social networks such as Facebook, LinkedIn or Twitter. When you click on a sharing button, the social networking site may place a cookie on your computer. This would be a third-party cookie set by the social networking site. If you have any questions about the use of these third-party cookies, you should check the relevant social networking site’s cookie policy.
As we want your experience of our site to be as informative and useful as possible, we provide a number of links to websites operated by third parties. Please be aware that we do not have any control over third party websites and that such third party websites may send their own cookies to users, or otherwise collect data or solicit personal information.
We cannot be responsible for the protection and privacy of any information which you provide whilst visiting such third party websites and so these are not governed by this privacy policy. We encourage you to review each third party website’s privacy policy before browsing and interacting with the website in question.
Retention of Your Information
We will retain your personal information for as long as we reasonably require in light of the purpose(s) for which we are holding it and all relevant legal, commercial and operational considerations.
As a Scottish Innovation Centre, we may have to comply with statutory retention periods as required by our funders.
Disclosure of Your Information
We will never sell or trade your personal information to others.
We use third party service providers and suppliers to deliver certain services. We put contractual arrangements in place with these third parties to ensure they are obliged to protect your personal information.
We only share your personal information where it is reasonably necessary to properly administer our business and/or to comply with law / regulations.
As noted above, Pulsion Technology Limited is the provider of the platform and will process your personal data solely for the purposes of providing the platform.
The following third parties may have access to your personal information:
- Software providers – where necessary for providing the Data Readiness Assessment Survey site – this includes Amazon AWS which hosts the site;
- Regulators, government departments, law enforcement authorities, tax authorities, accountants, insurance companies, professional advisers, dispute resolution bodies or the courts – where necessary to comply with law or enforce or rights; and
- Scottish Funding Council, Scottish Government, Scottish Enterprise and/or Highlands and Islands Enterprise – as a Scottish Innovation Centre we have certain reporting duties to our funders.
- Consultants – we use third party consultants where we require specialist assistance to deliver our services and where these are required on a short term or ad hoc basis, this includes specialist training providers, marketing / technology specialists and recruitment specialists.
Some of these entities may also be data controllers but please contact us in the first instance if you have any questions.
Location of Your Information
The information we collect from you may be stored inside the UK, the European Economic Area (“EEA”) or outside the EEA.
If you live or work outside of the UK, we may need to transfer your personal information outside of the UK to correspond with you. Where this applies, we will take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this privacy notice.
We may transfer personal information outside the UK where our service providers host, process, or store personal information outside the UK. Where this is the case we use contractual arrangements and safeguards to protect this personal information, these safeguards include:
- The country to which the personal information will be transferred has been deemed to provide an adequate level of protection for personal information by the European Commission.
- Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal information the same protection it has in Europe.
If you would like more detail on this, please contact us.
Changes to this Privacy Notice
We may amend this privacy notice from to time to take account of changes to our processing or regulatory changes. We encourage you to review it from time to time.
Continuation of the Privacy Notice
Please find the second part of our privacy notice here: https://www.ed.ac.uk/data-protection/notice. This is the generic part of every University of Edinburgh privacy notice.
Contact Us
If you have any questions about this privacy notice or wish to update your personal details, please contact us with the Subject Line “Data Readiness Survey – Privacy Notice” at info@thedatalab.com.