Introduction
This Privacy Notice explains how the University of Cumbria (“we”, “us”, “our”) handles personal information about the impact of research we conduct. It is intended for individuals who are approached to take part in our research impact cases. This can include members of the public, our partners and other stakeholders.
This notice should be read together with our General Privacy Notice.
How we get your personal data
We get most of it directly from you, when you contact you and ask you to complete or surveys following one of our activities or events.
What information do we collect?
Information we collect may include:
- Your personal details e.g. name, job title, gender, organisational affiliation
- Your contact details e.g., email address
- Nature of your interaction with us
- Testimonial letters and emails from you
- Feedback you provide following events or internation with us
There may be specific instances where our research has had impacts of a sensitive nature. In these instances, we will ensure evidence and data generation, collection, and storage is handled appropriately, with consent of individuals it relates to.
How we use your personal data
We use your personal data as part of a research impact case study or research impact evaluation exercise to:
- provide evidence of impact derived from research we undertake
- conduct third-party research assessment, such as the Research Excellence Framework (REF) or the Knowledge Exchange Framework (KEF)
- publish information about our research impact on public media linked to the research, press releases, our website and social media
- support our future funding applications
- contact you if have agreed to be contacted by us to take part in further related case studies
Lawful basis for processing your personal data
We process your personal data because it is necessary for the performance of a ‘Public Task’ or task carried out in the public interest. In this case to assess the impact of our research activities.
Who will your personal data be shared with?
We share your personal data with our employees on a need-to-know basis only as part of their role. We also share your personal data with:
We may share your personal data with third parties such as
- Organisations responsible for managing national research and knowledge exchange assessment exercises, such as Research England (RE) and UK Research and Innovation (UKRI);
- Funding bodies including UKRI and Research England and independent peer reviewers.
Any personal data submitted by us to these organisations will be collected, stored, and processed in accordance with their relevant data protection legislation and we will ensure that anyone who has access to your data will respect its confidentiality and will only process it in accordance with instructions issued for the purposes specified.
How long we keep your data for
We retained your data for as long as it is required to perform the above purpose, or for as long as is required by law.
At the end of that retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
Your rights
Details about your rights and how to exercise them are set out on our Data Protection webpage.