The Data Lab is committed to preserving your privacy. This notice sets out how The Data Lab (“we”, “our” and “us”) uses personal information that we collect from you when you use the Data Readiness Assessment Survey site.
As a Scottish Innovation Centre, The Data Lab is administered and hosted by the University of Edinburgh meaning that we are the same legal entity. The University of Edinburgh is a registered charity with registration number SC005336.
For the purpose of the General Data Protection Regulation, the data controller is the University of Edinburgh with offices at Old College, South Bridge, Edinburgh, EH8 9YL, Information Commissioner’s Office Registration Number Z6426984.
This privacy notice applies to any visitors, registered or registering users of the Data Readiness Assessment Survey site.
The Data Lab uses Pulsion Technology Limited which provides the basis of the Data Readiness Assessment Survey site. Pulsion Technology Limited will process personal data strictly for the purposes of operating the platform. The Data Lab has a contract in place with Pulsion Technology Limited to ensure they are obliged to protect your personal information.
1. Information about you
|INFORMATION WE COLLECT||REASONS FOR COLLECTING IT||LEGAL BASIS|
|Contact Information: Name, email address||We collect this information so that we can provide you with access to the Survey and inform you of any results, updates, changes or other useful information in relation to your use of the Survey.|
If you opt in to our marketing emails we will use your email address to provide you with updates relevant to The Data Lab.
|Contract – we collect this information in order to fulfil our agreement with you to provide access to our Data Readiness Assessment Survey site|
Consent – We only send you these emails where you have provided your consent.
|Professional Information: Details about your job role, the sector you work or study in, where you are located.||We collect this information so that we can assess the type of audience the Data Readiness Assessment Survey site attracts. This will help us to tailor our marketing and ensure that the content on the site is appropriate for the audience and continue to improve on this.||Legitimate interests – our interests being to continually improve on the Data Readiness Assessment Survey site and ensure the information provided is appropriate for the users.|
|Cookies Information: Cookies will be used to ensure the functionality of the site, the cookies will store the information set out in this table||The cookies are necessary for the functionality of the platform. Without these cookies, the site will not perform correctly.||The cookies are strictly necessary for the functioning of our Data Readiness Assessment Survey site and are used on the basis of legitimate interests, our interests being the site being able to operate properly.|
Check information in your browser’s help section for specific instructions on how to manage cookies. Alternatively, websites such as “All About Cookies” provide comprehensive guidance.
Sharing Tools and Linking to Other Websites
As we want your experience of our site to be as informative and useful as possible, we provide a number of links to websites operated by third parties. Please be aware that we do not have any control over third party websites and that such third party websites may send their own cookies to users, or otherwise collect data or solicit personal information.
Retention of Your Information
We will retain your personal information for as long as we reasonably require in light of the purpose(s) for which we are holding it and all relevant legal, commercial and operational considerations.
As a Scottish Innovation Centre, we may have to comply with statutory retention periods as required by our funders.
Disclosure of Your Information
We will never sell or trade your personal information to others.
We use third party service providers and suppliers to deliver certain services. We put contractual arrangements in place with these third parties to ensure they are obliged to protect your personal information.
We only share your personal information where it is reasonably necessary to properly administer our business and/or to comply with law / regulations.
As noted above, Pulsion Technology Limited is the provider of the platform and will process your personal data solely for the purposes of providing the platform.
The following third parties may have access to your personal information:
- Software providers – where necessary for providing the Data Readiness Assessment Survey site – this includes Amazon AWS which hosts the site;
- Regulators, government departments, law enforcement authorities, tax authorities, accountants, insurance companies, professional advisers, dispute resolution bodies or the courts – where necessary to comply with law or enforce or rights; and
- Scottish Funding Council, Scottish Government, Scottish Enterprise and/or Highlands and Islands Enterprise – as a Scottish Innovation Centre we have certain reporting duties to our funders.
- Consultants – we use third party consultants where we require specialist assistance to deliver our services and where these are required on a short term or ad hoc basis, this includes specialist training providers, marketing / technology specialists and recruitment specialists.
Some of these entities may also be data controllers but please contact us in the first instance if you have any questions.
Location of Your Information
The information we collect from you may be stored inside the UK, the European Economic Area (“EEA”) or outside the EEA.
If you live or work outside of the UK, we may need to transfer your personal information outside of the UK to correspond with you. Where this applies, we will take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this privacy notice.
We may transfer personal information outside the UK where our service providers host, process, or store personal information outside the UK. Where this is the case we use contractual arrangements and safeguards to protect this personal information, these safeguards include:
- The country to which the personal information will be transferred has been deemed to provide an adequate level of protection for personal information by the European Commission.
- Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal information the same protection it has in Europe.
If you would like more detail on this, please contact us.
Changes to this Privacy Notice
We may amend this privacy notice from to time to take account of changes to our processing or regulatory changes. We encourage you to review it from time to time.
Continuation of the Privacy Notice
Please find the second part of our privacy notice here: https://www.ed.ac.uk/data-protection/notice. This is the generic part of every University of Edinburgh privacy notice.
If you have any questions about this privacy notice or wish to update your personal details, please contact us with the Subject Line “Data Readiness Survey – Privacy Notice” at email@example.com.