Who will own my data once I submit it?
The University of Liverpool.
Why do you need my information?
The University of Liverpool is dedicated to delivery top-quality products and services to our students. We recognise feedback is a critical component of ensuring this, so we have created the Student Digital Engagement Group (StuDeg) to effectively manage this process for all of our digital provisions. A central pool of students which can be used by Digital Communications and Digital Experience for project work.
The collection of your personal data is necessary for the essential functionality of, and your participation in, the Student Digital Engagement Group to:
- Verify your identity and assess your suitability to participate in testing opportunities.
- Communicate with you about updates and information relating to the Student Digital Engagement Group, including, but not limited to testing opportunities for which you are eligible.
- Help identify digital needs and diagnose issues relating to specific user segments and their needs.
What allows you to use my information?
Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information is:
- The University has a legitimate interest (Article 6(1)(f) of UK GDPR) to collect the data to assess and improve digital products and services it has committed to providing you as a student.
- Clear consent from you to process your information (Article 6(1)(a) of UK GDPR) to communicate with you and collect information to review suitability. You reserve the right to withdraw consent at any time. For more information on this, please submit a written request including your full name from your student email address to digitalcx@liverpool.ac.uk.
- The performance of a contract (Article 6(1)(b) of UK GDPR) to process your information to comply with obligations once you have agreed to testing activities.
Who will my information be shared with?
The University of Liverpool shares and processes your data in accordance with its legitimate interests. Any member of the University who process or use your personal information follow the University of Liverpool’s Data Protection Policy.
Only staff in the Digital Innovation and Application Development, Digital Communications and Strategic Change teams will have access to your data. We will only use the data collected in order to provide access to the Student Digital Engagement Group and promote relevant testing activities.
Your data will not be shared with third parties outside of the University of Liverpool except in the following, limited circumstances with system suppliers involved with the provision of service, such as:
- Microsoft for storage and handling of data and documentation relating to the Student Testing Database.
- Insight and Analytics software for testing. These instances will be clearly labelled and information shared will be limited and no non-essential information will be otherwise disclosed. Please see our FAQs for specific software details.
We will provide notice and obtain your consent before sharing personal information about you with any third parties not listed above.
Do I have to provide this information and what will happen if I don’t?
The Student Testing Database is an optional scheme so you are not required to provide your data. However, if you choose not to share your data we will be unable to verify your identity and suitability to participate in testing opportunities, and therefore you will not be able to join the Student Testing Database.
How long will you keep this data for and why?
The University of Liverpool has a Records Management Policy and maintains a prescriptive Records Retention Schedule. More information and copies of the Policy and Schedule can be found at www.liverpool.ac.uk/csd/records-management/.
Your data for the Student Digital Engagement Group will be handled in accordance with the University of Liverpool’s Records Management Policy. Your data will be retained for the duration of your studies at the institution, plus three months from graduation to allow for communications regarding your experience and feedback on the Student Digital Engagement Group. Three months after you graduate your data will be deleted.
How will my information be stored?
Your information will be stored securely on Firebase.
Will this information be used to take automated decisions about me?
Yes. Your data will be used to classify you and the testing opportunities you will have access to in relation to this classification.
Will my data be transferred abroad and why?
No.
What rights do I have when it comes to my data?
Under the UK General Data Protection Regulation, you may have the following rights with regards to your personal data:
- The Right to subject access – you have the right to see a copy of the personal data that the University holds about you and find out what it is used for.
- The Right to rectification – you have the right to ask the University to correct or remove any inaccurate data that we hold about you.
- The Right to erasure (right to be forgotten) you have the right to ask the University to remove data that we hold about you.
- The Right to restriction – you have the right to ask for your information to be restricted (locked down) on University systems.
- The Right to data portability – you have the right to ask for your data to be transferred back to you or to a new provider at your request.
- The Right to object – you have the right to ask the University to stop using your personal data or to stop sending you marketing information, or complain about how your data is used.
- The Right to prevent automated decision making – you have the right to ask the University to stop using your data to make automated decisions about you or to stop profiling your behaviour (where applicable).
Please note that not all rights apply in all situations. To find out more about your rights under the UK GDPR, please visit the Information Commissioner’s website.
To request a copy of your data or ask questions about how it is used, contact:
Dan Howarth, Data Protection Officer
- Email: legal@liverpool.ac.uk
- Post: Legal & Governance, University of Liverpool, Foundation Building, 765 Brownlow Hill, Liverpool L69 7ZX
Who can I complain to if I am unhappy about how my data is used?
You can complain directly to the University’s Data Protection Team by writing to:-
- Dan Howarth, Data Protection Officer
- By email: legal@liverpool.ac.uk
- Post: Legal & Governance, University of Liverpool, Foundation Building, 765 Brownlow Hill, Liverpool L69 7ZX
You also have the right to complain to the Information Commissioner’s Office using the following details:
- The Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
- Telephone: 08456 30 60 60 or 01625 54 57 45
- Website: ico.org.uk
Back to: Digital guidelines