Privacy Policy

Information about you: how we use it and with whom we share it

The information you provide will be used by the University to contact you with information about the Festival of Creative Learning and where relevant to confirm photography and film consent, to process Festival event funding applications, and to evaluate Festival events and processes.

The University uses external websites to host and promote certain Festival of Creative Learning events and to host and collect some surveys on the University’s behalf. These include Eventbrite, bookitbee and Google.

When we are using information about you, it is because you have given us your consent and it is necessary in order to respond (as relevant) to requests for communication about the Festival of Creative Learning and our events, to confirm photography and film consent, to process Festival event funding applications, and to evaluate Festival events and processes. 

We will not share your data with any third party unless when there is a legal obligation to do so.

We will hold the personal data you provided to the Festival of Creative Learning for up to seven years for reporting purposes, and after that time we will anonymise any data which we will retain for archive and reporting purposes. For any data inputted on external websites such as Eventbrite, bookitbee and Google, please see their individual privacy statements for their data retention policies which may vary from our own.

We do not use profiling or automated decision-making processes.  Some processes are semi-automated (such as anti-fraud data matching) but a human decision maker will always be involved before any decision is reached in relation to you.

If you have any questions, please contact creative.learning@ed.ac.uk.

Data controller and contact details

For data collected under this privacy notice, the University of Edinburgh (the “University”) is the Data Controller (as that term is defined in the EU General Data Protection Regulation (Regulation (EU) 2016/679), registered with the Information Commissioner’s Office, Registration Number Z6426984.

You can contact our Data Protection Officer at dpo@ed.ac.uk. Our data protection policy is on our website at http://www.ed.ac.uk/records-management/data-protection/data-protection-policy

Mandatory data sharing

In addition to the primary purposes, we are also legally obliged to share certain data with other public bodies such as HMRC and will do so where the law requires this; we will also generally comply with requests for specific information from other regulatory and law enforcement bodies where this is necessary and proportionate. 

Transfers outside the EEA

The University will only transfer data to countries outside the EEA when satisfied that both the party which handles the data and the country it is processing it in provide adequate safeguards for personal privacy. Details of such transfers and safeguards are on our website.

Your rights

You have the right to request access to, copies of and rectification or erasure of personal data held by the University and can request that we restrict processing or object to processing as well as the right to data portability (i.e. the right to ask us to put your data into a format that it can be transferred easily to a different organisation). If you wish to make use of one of these rights, please email your local contact.

If we have asked for your consent in order to process your personal data you can withdraw this consent in whole or part at any time. To withdraw consent, please email your local contact, who will explain the consequences of doing so in any particular case and initiate proceedings for withdrawing consent. 

Complaints

If you are unhappy with the way we have processed your personal data you have the right to complain to the Information Commissioner’s Office at casework@ico.org.uk but we ask that you raise the issue with our Data Protection Officer first.