Enter Title

Introduction

CPACT, as part of the University of Strathclyde, is committed to transparency and to complying with its responsibilities under data protection legislation. This privacy notice sets out important information regarding how we will use your information and your rights under the legislation. It is important that you read this notice prior to providing your information.

The University of Strathclyde is a data controller under data protection legislation.

Any enquiries regarding data protection should be made to the University’s Data Protection Officer at dataprotection@strath.ac.uk

How Your Information is Collected and Used

Categories of information processed by CPACT:

  • Information about your identity including first name, last name, title, and gender.
  • Contact information including billing address, delivery address, email address, and telephone numbers.
  • Employment information including employer, title, workplace address, education, expertise, and professional affiliations.
  • Financial information including bank account details, payment card details, and shareholdings.
  • Transaction information, including details about payments to and from you, and other details of services you have received from us.
  • Technical information including internet protocol (IP) address, your login data, passwords, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
  • Profile information, including your username and password for CPACT members only website
  • Usage information, including information about how you use our website and services.
  • Marketing and communications data, including your preferences in receiving marketing from us and our third parties, and your communication preferences.
  • Personal information, including information about attending events and meetings.

We may also collect information:

  • From publicly accessible sources.
  • Directly from third parties who deliver services on our behalf.
  • From third parties, with your consent.
  • From consultants and other professionals we may engage in relation to your matter.
  • From your employer or professional body.
  • Via our website
  • Via our information technology (IT) and other systems.

Purpose for Processing Information

In general terms, CPACT collects and uses personal information about you to:

  • Verify your identity, where this is required;
  • Contact you by post, email, or telephone;
  • Keep you up-to-date with CPACT events and services;
  • Disseminate news relevant to the CPACT community;
  • Provide information regarding career and funding opportunities; project call details; and third-party events;
  • Understand your needs and how they may be met;
  • Deliver its services and meet its legal responsibilities;
  • Provide joined-up services to you;
  • Process financial and non-financial transactions;
  • Maintain our records; and
  • Carry out and provide research.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we are carrying out our statutory functions;
  • Where we need to perform the contract we are about to enter in to, or have entered into with you: for example, providing you with funding or information, research, and analysis;
  • Where we need to comply with a legal or regulatory obligation;
  • For our legitimate interests;
  • Where you have given us consent; and
  • For operational reasons, such as ensuring safe working practices, improving efficiency, training, staff assessments, and quality control.

Generally, the information we collect is only used for any purpose for which you submitted it to us, for any purpose made clear to you at the point it was collected, or here in this Privacy Notice. These purposes may include:

  • When we assess your application for projects, the personal data you give us is used to process your application and to assess eligibility.
  • When we or third parties host events, we will use your personal data to provide you with details, tickets, and entry information and to verify your attendance;
  • When providing you with reports and research information, we use your contact details;
  • When we prepare research and statistical information about CPACT;
  • When you subscribe to receive communications and other updates from us, we use your personal data to provide communications and information about topics that you have expressed an interest in;
  • When you contact us through our website, email, or telephone, your information is used in order to respond to your enquiry;
  • If you have a complaint, we use your personal information as part of dealing with that complaint; and
  • When marketing our services to you.

Sharing Information

We may have to share your personal data with the categories set out below for the purposes set out in this notice:

  • External third parties including other CPACT member companies and member universities
  • Third party product and service providers;
  • Financial and non-financial intermediaries;
  • Educational institutions;
  • Research organisations;
  • Funding bodies
  • Events organisations.

How Long We Will Retain Your Information

We will not retain your personal information longer than necessary. We will hold onto the information you provide either while your account is in existence, or as needed to be able to provide services to you for as long as is necessary, as long as we have valid consent.

Your Rights

You have the right to:

  • find out what personal data we process about you and obtain a copy of the data, free of charge within one month of your request. We may make a charge for additional copies of the same information;
  • ask us to correct inaccurate or incomplete data.
  • withdraw consent to process your personal data at any time, if you were asked for and provided consent.

If you think we are acting unfairly or unlawfully you can:

  • object to the way we are using your data;
  • complain to the UK Information Commissioner’s Office.

Under certain conditions you also have the right to ask us to:

  • restrict the use of your data e.g. if you have raised issues about the accuracy or use of your personal data, until we have investigated and responded to your concerns;
  • erase your information or tell us to stop using it to make decisions about you;
  • comply with your wishes where you have previously agreed to us processing your data for a particular purpose and have withdrawn your consent to further processing;
  • provide you with a portable electronic copy of data you’ve given us. Please contact us if you wish to exercise/enquire about any of these rights.

To find out more about data protection and your rights please see: