Introduction

This Privacy Notice relates to Lean HE Conference 2021. This privacy notice sets out important information regarding how we will use your information and your rights under data protection legislation.  It is important that you read this notice prior to providing your information.

Data controller and the data protection officer

The University of Strathclyde is the data controller under data protection legislation. If you have any queries regarding this specific event please contact Leanhe-conf2021@strath.ac.uk If you have any queries regarding data protection, enforcing your rights or the use of your personal information, please contact the University’s Data Protection Officer at dataprotection@strath.ac.uk

Purpose and legal basis for processing your personal data

When we process personal data, we must have a lawful basis for doing so.  This table sets out the purposes for which we process your personal data. Purpose of processing Lawful basis Managing your attendance at the event   When you register to attend an event that we organise, we ask you for basic details that we need to manage your attendance, e.g. name, contact details etc.  This will be clearly set out on the registration form. Legitimate interests, Contract We may also ask for additional details about any specific access or dietary requirements you may have, to help manage your attendance at the event. Legitimate interests, Contract If the details involve any special category data (for example, relating to your health) then we process this information because there is a substantial public interest in doing so, ensuring that the University complies with its obligations under equality and health and safety law. At the event   For some events which involve networking, we may want to share your contact details with other attendees.  When using the dedicated Conference App, you will have the option to remain anonymous. This setting can be activated at the point of first log in. When using the dedicated online event portal, upon log in to the online event portal, you can amend your visibility settings. At some events, we may want to take images (still photographs or moving images) for the purpose of publicising the work of Lean HE, or The University of Strathclyde If this is the case, we will make you aware of this in the registration form and website relating to the event.  We will display notices at the event to inform you that filming or photography is taking place, and our staff will advise you what to do if you do not wish to be in the images. Where images are of groups of people and there is a minimal impact on privacy, we rely on legitimate interests to take and use images. Where you are the focus of an image and are clearly identifiable in the image, then we will ask for your consent to use the image. After the event   After the event, we may ask for your feedback on aspects of the event, to help us plan future events. Legitimate interests We may ask for your consent to use your contact details to send you information about future similar events, training opportunities, or work of the University You can withdraw your consent for marketing at any time by clicking ‘unsubscribe’ on any of the emails we send you. If we plan to do this, we will ask for your consent.

 

The legitimate interests of the controller or third party, where applicable

When you choose to register for an event organised by the University of Strathclyde we consider that we have a legitimate interest in processing personal data for the purpose of managing your attendance at that event and following up post activities such as asking for feedback.

Any recipient or categories of recipients of the personal data

Where we organise an event in conjunction with another organisation, we will share details of your attendance with the other event organiser, for the purpose of managing your attendance at that event. We may need to share some details of any specific requirements such as your access or catering needs with our suppliers and sub-contractors, such as the venues for social functions. Where events which involve networking, we may want to share your contact details with other attendees.  If we plan to do this, we will ask for your consent when you register for the event. If we use any third party tools to collect and process personal data, we will tell you about this when you register.  EventsAir software will be used to collect and process your personal data.

Details of transfers to third countries and safeguards

If we use any data processing services or tools which involve the transfer of personal data outside the EEA, we will only do this where it is necessary, and where there are adequate safeguards in place for personal data

Retention period or criteria used

We retain your details for a period of 12 months from the date of the event. If you have given us consent to send you marketing information, we will retain your details until you withdraw your consent. You can do this at any time by clicking ‘unsubscribe’ on any of the emails we send you, or by contacting Leanhe-conf2021@strath.ac.uk

 

Data subject rights

Your rights Under data protection legislation, you have a number of rights* including the right to: ·         withdraw consent, at any time, where that is the lawful basis of our processing; ·         access your personal data and obtain a copy, free of charge; ·         rectify inaccuracies in personal data that we hold about you; ·         erasure, that is have your details removed from systems that we use to process your personal data; ·         restrict the processing in certain ways; ·         obtain a portable copy of data you have given to us in a commonly used electronic form; and ·         object to certain processing of your personal data by us. *Please note that the ability to exercise these rights will vary and depend on the lawful basis under which the processing is being carried out. Please contact dataprotection@strath.ac.uk  if you wish to exercise/enquire about any of these rights. If you have consented to marketing, you can opt out again at any time. To do this you can click ‘unsubscribe’ on any of the emails we have sent you.

Right to complain to supervisory authority

If you have any concerns/issues with the way your personal data has been processed you can contact the Data Protection Officer at dataprotection@strath.ac.uk.  You also have the right to lodge a complaint regarding data protection issues with the Information Commissioner’s Office (https://ico.org.uk/concerns/).