Ethical review self-assessment privacy notice
This is a privacy notice for researchers completing the Ethical Review Self-Assessment form.
We collect the following personal data about students completing the online Ethical Review Self-Assessment form for undergraduate and postgraduate taught students:
- Name
- Email address
- Student URN
- Faculty.
We also ask for the names and email addresses of research supervisors involved in the proposed research to give us a complete record of each project. We only collect the data we need and keep that data up to date.
We receive this information from you when you complete the online form, or when your fellow student on the research project does this on your behalf. The data you provide us with is shared with your supervisor and the relevant faculty ethics committee. You will also receive a copy of the data you submit to us by email.
We take our responsibilities for handling data very seriously and therefore it is important for you to understand the legal basis that we rely on when we are processing your personal data.
We process your data as part of our task to conduct research in the public interest. Specifically, the information collected in the form is used by us for the purposes of administering the University’s ethics and research governance processes. This includes maintaining a record of research that has been submitted for self-assessment. This record will be used to audit research and to ensure compliance with University’s and external policies, guidelines and regulations. It will be used to obtain information to provide advice to the research team’s own questions.
We may share your personal data with University committees, other departments within the University and external regulators as part of ensuring that the research is compliant with policies, guidelines and regulations. This could include, but is not always limited to, the University Ethics Committee, the Research Integrity and Governance Committee, legal, insurance, finance and data protection teams.
We keep your information for 10 years after completion of the project in line with the University’s retention schedules for research project information.
Under data protection law you have certain rights.
You have the right to ask us to confirm that your personal data is being processed and to access (i.e. have a copy of) that data as well as to be provided with supplemental information about the processing.
You can object to our processing your data, and can ask us to erase the data we hold about you, although in certain circumstances we may not be able to do this – for example, where processing is necessary for the performance of a task in the public interest.
If you would like to exercise any of these rights, or have any queries or concerns, please email the Information Compliance team.
You also have the right to complain directly to the Information Commissioner’s Office if you continue to have concerns around how we are processing your data. The Information Commissioner’s Office is an independent body set up to uphold information rights in the UK. They can be contacted through their website, or their helpline on +44 (0)303 123 1113, or in writing to:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF.
As an individual whose data we process (a data subject), you have certain rights in relation to the processing. Find detailed information about your rights as a data subject.
You have the right to:
- Withdraw your consent for us to process your personal data where we have relied on that consent as our basis for processing your data.
- Ask us to confirm that your personal data is being processed and to access (i.e. have a copy) of that data as well as to be provided with supplemental information about the processing.
- Request that we rectify any inaccuracies where the data we hold on you is inaccurate or incomplete.
- Have your data erased by us, although in certain circumstances we may not be able to do this. The circumstances where this applies can be found in the guide to data subject rights information.
- Restrict the processing of your personal data in certain ways.
- Obtain your personal data for reuse.
- Object to certain processing of your personal data.
If you would like to exercise any of your rights please visit our make a privacy request section.
Details on university-wide measures surrounding IT security can be found in Our Data Policy Statement (PDF) (incorporating Information Security Policy).
Make a complaint
If you have any concerns about the way that we have handled your personal data please email the Data Protection team as we would like to have the opportunity to resolve your concerns.
If you’re still unhappy, you have the right to complain to the Information Commissioner’s Office (an independent body set up to advise on information rights for the UK) about the way in which we process your personal data.