Privacy Notice for Bristol Robotics Laboratory (BRL)
Purpose of the Privacy Notice
This privacy notice explains how the University of the West of England, Bristol (UWE Bristol) collects, manages, and uses your personal data when you visit our BRL website(s), use our BRL digital services (including social media), and when you visit the Laboratory in person.
‘Personal data’ means any information relating to an identified or identifiable natural person (the data subject).
This privacy notice adheres to the General Data Protection Regulation (GDPR) principle of transparency. This means it gives information about:
· How and why your data will be used;
· What your rights are under GDPR; and
· How to contact UWE Bristol in relation to questions, concerns or exercising your rights regarding the use of your personal data.
Why are we processing your personal data?
To be able to provide you with services and information relating to the BRL we are required to process some of your personal data. As a data controller we are committed to protecting the privacy and security of your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (or any successor legislation) and any other legislation directly relating to privacy laws that apply (together “the Data Protection Legislation”). General information on Data Protection law is available from the Information Commissioner’s Office (https://ico.org.uk/).
How do we use your personal data?
We will only process your personal data when the law allows us to. Additionally, we will always comply with UWE Bristol’s policies and procedures when processing your personal data. At the BRL we process your personal data for the following reasons:
· When you use the ‘contact us’ website form and submit an enquiry, or contact us direct by email
· When you contact the BRL through social media channels
· When you ask to be included on the BRL mailing list to receive updates. You can opt out of receiving promotional content at any time by emailing info@brl.ac.uk
· To facilitate your visit to the BRL, which includes arranging your visit on site, and keeping you safe
Our lawful basis for using your personal data in these circumstances include legitimate interest and consent (when indicated). You can find out more information about lawful bases at the following webpage:https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/ .
We will always tell you about the information we wish to collect from you and how we will use it. We will not use your personal data for automated decision making about you or for profiling purposes.
What data do we collect?
We collect and process the following information:
· Name
· Enquiries
· Telephone number
· Car registration
· If you are attending the BRL in person, we will use CCTV, Body Worn Video, and Automatic Number Plate Recognition (ANPR) for the prevention and detection of crime, to ensure the security, safety and wellbeing of our students, staff, and other visitors
Who do we share your data with?
We will only share relevant items of your information where it is necessary to fulfil the lawful purposes listed above. Otherwise, we will not share your personal data without your consent.
Recipients of your personal data may include professional services staff and academic staff employed by the University who are involved in BRL activity, and any third-party organisation who may process your personal data on behalf of us.
In limited circumstance we may share information with the police or other bodies with law enforcement purposes if there is a lawful requirement to do so, and health professionals in emergency situations.
How do we keep your data secure?
We take a robust approach to protecting your information with secure electronic and physical storage areas for data with controlled access. Access to your personal data is strictly controlled on a need-to-know basis and data is stored and transmitted securely using methods such as encryption and access controls for physical records where appropriate.
Alongside these technical measures there are comprehensive and effective policies and processes in place to ensure that those who process your personal information are aware of their obligations and responsibilities for the data they have access to.
By default, people are only granted access to the information they require to perform their duties. Mandatory data protection and information security training is provided to staff and expert advice available if needed.
How long do we keep your data for?
We will only retain your personal data for as long as we need it to carry out the purposes in this notice.
Please see our University Records Management Policy and Records Retention Schedules for more detailed information. These are available by contacting our Data Protection Office at dataprotection@uwe.ac.uk
Your Rights and how to exercise them.
Under the Data Protection legislation, you have the following qualified rights:
1. The right to access your personal data held by or on behalf of the University;
2. The right to rectification if the information is inaccurate or incomplete;
3. The right to restrict processing and/or erasure of your personal data;
4. The right to data portability;
5. The right to object to processing;
6. The right to object to automated decision making and profiling;
7. The right to complain to the Information Commissioner’s Office (ICO).
To protect your privacy and the privacy of others, we will verify your identity before giving effect to your rights. To exercise any of your rights please contact the Data Protection Officer.
How to contact us
We will always respond to concerns or queries you may have. If you wish to exercise your rights or have any other general data protection queries, please contact UWE Bristol’s Data Protection Officer (dataprotection@uwe.ac.uk).
Further information / helpful links
Please visit the UWE privacy notice section on the UWE website for further information that may be relevant to your visit to the BRL. This includes the UWE Student Recruitment Event Privacy Notice, and the Accident Report Privacy Notice. Click here for further details.
For further information relation to the Bristol Robotics Laboratory contact:
Bristol Robotics Laboratory
University of the West of England, T Block
Frenchay Campus, Coldharbour Lane
Bristol
BS16 1QY
Email: info@brl.ac.uk
