Data Protection

The University of Strathclyde is registered as a Data user with the Office of the Information Commissioner. It is necessary for SIRCC, as part of the University of Strathclyde, to process personal data in the normal and proper conduct of academic and business operations. Such processing will be conducted fairly and lawfully in accordance with the Data Protection Act 1998. If you have a query regarding the accuracy of your personal data then your query will be dealt with fairly and impartially.

General Use of Personal Data

• SIRCC holds data on: current and former Short Course/Seminar/Conference participants; current staff; contact information of related organisations/individuals; other individuals interested in SIRCC
• This personal data is held in a variety of formats, electronic and manual
• The personal data is processed to enable SIRCC to perform its functions in an efficient and effective manor
• The processing of personal data is subject to the rules laid down under the Data Protection Act 1998. Your personal data will be used only for proper purposes that are considered by SIRCC to be for your benefit
• The protection of your personal data will be governed by the provisions of the Data Protection Act 1998. Access to your data will be restricted to those personnel to whom it is necessary for proper purposes
• SIRCC will not sell your personal data to third parties. Your personal data will only be related to third parties where this is deemed necessary for the purposes of SIRCCs function or in your interest

The Principles of Data Protection

There are eight Data Protection principles set out under the Act. In summary they are that personal data should be:

1. Obtained and processed fairly and lawfully
2. Held and used only for specified purposes
3. Adequate, relevant and not excessive
4. Accurate and kept up to date
5. Kept only for as long as is necessary
6. Processed according to the Act
7. Held securely
8. Held within the European Economic Area

Consent

• SIRCC seeks to use your personal data only for the purposes of legitimate interests and, where practicable, with your consent
• SIRCC may gather your data during the course of normal academic and business activities. It will be used only for legitimate interests
• You have the right to know what personal data SIRCC holds about you and for this to be correct. Procedures for the management of personal data are in place and enquiries may be made as set out below

Sensitive Personal Data

• Sensitive personal data is defined under the Act to include such matters as racial or ethnic origin of the data subject or their physical or mental health or condition
• SIRCC will not disclose any sensitive information and uses such information to provide adequate facilities during training or to monitor the racial make up of the sector

Accessing Your Personal Data

• You have the right to see the personal data that SIRCC holds about you and for that data to be corrected if incorrect
• Minor requests about your personal data may be dealt with informally in the course of normal administration, at the sole discretion of SIRCC
• If you wish to make a formal request for access to your personal data, you must make a written (which includes transmission by electronic means) request to the University. The University Data Protection Officer, on behalf of the University, may charge a fee of £10 for dealing with the subject access request