Abertay University is your data controller under the General Data Protection Regulation (‘GDPR’):
Abertay University, Bell Street, Dundee, Scotland, DD1 1HG Tel: +44 (0)1382 308000.
The Data Protection Officer’s contact details are below.
2. When do we collect information and personal data?
- When you visit our website.
- When you fill in a form on the website and provide personal information such as name and email address when you: register for an event, download an information pack.
- When you interact with us by email, telephone, post, social media, in person on campus, or at an event we’re participating in such as a Computer Games exhibition.
- When we initiate contact with you or respond to your enquiry.
3. What sort of data do we collect?
Abertay University collects information for different purposes as outlined below:
Anonymous data for the analysis and tracking of our website Like most modern websites, our server automatically logs the activity of visitors. It provides usage information that shows us how they interact with the site such as web pages viewed, time spent on the site, videos or links clicked on, navigation path and use of the search box. We collect data including the visitors IP address, browser type, operating system versions, device type (mobile, tablet, PC), referring page (which site the visitor came from to ours). Personal data for marketing or resolving a query This includes visitors to the website that complete a webform, contact us with an enquiry or interact with us at an event. We typically collect: name, email address, where they are from (Scotland; England, Wales or Northern Ireland, EU; International) and which InGAME services they may be interested in (Innovation Vouchers, Workshops, Events). Information from social media channels We collect your social media username, if you interact with us through those channels, to help us respond to your questions or comments.
4. How and why do we use anonymous information
but you can usually modify its setting to decline them if you prefer. For detailed information on cookies, and how to manage them, visit www.allaboutcookies.org.
Analyse and track website performance: Cookies such as Google Analytics help us to monitor and produce measurable statistics on the performance of the website. Knowing among other things which website pages are most and least popular, which devices visitors are using to view content and page download speeds, allows us to continuously improve the site.
To make our digital advertising more relevant: We use tracking cookies for social media platforms on our website such as for Facebook, Twitter and Instagram. These allow us to provide more tailored and relevant digital advertising, and remarketing campaigns to previous visitors to our site as they browse the internet. This is based on their marketing consent, or acceptance of cookies on our website.
5. How and why do we use personal data?
To provide relevant marketing communications We use your personal data to provide you with tailored marketing information. This may be by post, email, SMS or telephone and may include:
Information about challenge calls and opportunities to apply.
Invites to events such as Innovation Labs and workshops.
Asking you to complete feedback surveys following your attendance at an event.
SMS messages as a reminder of events which you’ve booked with us.
Information about our facilities, the University partners, Industry partners and the city of Dundee.
Interesting work and projects we are involved in.
We will only send you marketing emails or contact you via preference selections you’ve expressly agreed to. We may personalise content based upon information you’ve provided. Should you change your mind after having opted in for marketing activity, you can update your preferences or unsubscribe in any direct marketing email.
6. Legal basis for processing personal data
Where you have submitted an enquiry or registered for an event your personal data will be processed in terms of Article 6(1)(b) of the GDPR as it is necessary for the performance of a contract (i.e. our responsibility to provide you with the information requested or administer your attendance at an event you have registered for) Where you have given permission for us to contact you about further events or services your data will be processed under your consent as per Article 6(1) (a) of the GDPR.
7. Your rights
You have the right to withdraw consent for marketing communication at any time by contacting email@example.com
You have the right to request access to, copies of, and rectification or erasure of personal data held by the University and can request that we restrict processing or object to processing as well as the right to notification of this; to data portability (i.e. the right to ask us to put your data into a format that it can be transferred easily to a different organisation, subject to conditions).
If we have asked for your consent in order to process your personal data you can withdraw this consent in whole or part at any time. We will explain the consequences of doing so in any particular case if you contact us to withdraw consent.
The University strives to ensure that all personal data remain current and accurate. If you would like a copy of any the personal data about you held by the University, you can request this (contact details below). If you become aware of any incorrect personal data held by the University, you have the right to request it is rectified. There are some areas where the University relies upon you to inform it of any changes to your personal data.
If you would like to exercise any of your rights above or if you have any questions, please contact the University’s Data Protection Officer (“DPO”): Data Protection Officer
Dundee DD1 1HG
Tel: 01382 308000
You will not have to pay a fee to exercise any of your rights. However, the University may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. You are also entitled to contact the Information Commissioner’s Office (the “ICO”) (www.ico.org.uk) about any concerns about the way the University has handled your personal data. The University would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
8. Who do we share your personal data with?
The University will not sell, share or transfer your personal data to other third parties for their own purpose. We will only share personal data to comply with a legal obligation.
We may share personal data to colleagues in the University where an enquiry has been forwarded for a response, such as a specific question about a degree programme that’s best answered by an academic.
Our applications service share data of applicants to ensure our marketing communications go only to those who have confirmed or are yet to decide on accepting our offer.
9. How long do we keep your data?
We will hold personal data on prospective applicants within a secure database for a maximum of four years when used for marketing purposes, or until such time you withdraw consent. We will hold personal data relating to an enquiry as long as necessary to handle and process it.
10. Where is your data stored?
Our website uses Microsoft cloud storage that is load balanced between the UK and US data centres. Data centres in the US are covered under the EU-US Privacy Shield framework.
11. Contact Us
Please contact the University in the first instance if you have any issues with the use of your personal data. Email firstname.lastname@example.org Or write to us at:
12. Future Changes
Any changes to this Privacy Notice will be updated on our website.
You have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Tel: 01625 545745
Produced: March 2019
Bell Street, Dundee
Tel: +44 (0)1382 308 000