1. Purpose of this notice
This Notice tells you how the University of Leeds (University) will collect and use your personal data when you access this website. The University is a “controller” of this personal data for the purposes of the data protection legislation.
It is important that you read this Notice together with any other privacy notice we provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This Notice supplements the other notices and is not intended to override them.
2. Changes to this Notice
We keep the information provided in this Notice under review. This Notice may be updated from time to time. If we make any substantial updates, we will draw these to your attention.
We will not use your personal data in any manner that is incompatible with the purpose for which the data were collected originally, unless we have obtained your consent to that additional use.
3. Anything you are not clear about
If there is anything you are unclear about, please contact our Data Protection Officer, who shall be happy to answer any queries you may have concerning this Notice or the way in which we process your personal data.
The Data Protection Officer’s contact details are provided at the end of this Notice.
4. Purpose of processing your data
Where we request personal data from you on our website you will be informed at that time of the purpose for which the data will be processed and how it will be processed, its legal basis for processing as well as any transfers to third parties.
5. Purpose of processing – automated collection of personal information
When you access our web pages certain information your browser provides, including your IP address at the time, browser type, and potentially the address of the page you last visited, will be automatically recorded by the University. This data may be used to aid detection in the event of a security breach. The legal basis for this processing is necessity to pursue our legitimate interests to keep our website secure. The University retains this data in a form from which you may be identifiable for a period of up to one month.
6. Third-party access
Your personal data that you have provided will not routinely be sent to third parties (unless notified – see 4. above).
7. Data retention
The University’s policies on retaining data for prospective and current students, staff and job applicants are detailed in our data retention policy.
In other cases, for example, if you subscribe to news or events, any retention of data will be made clear at the point of collection.
8. Automated collection of personal information
As with most other web servers, when you access these web pages certain information you provide will automatically be recorded by the University. This will include your IP address, browser type, and information relating to the page you last visited. This information is processed to estimate how much usage of the server is made by different categories of users and in the event of a breach of security may be used to aid detection.
9. Non-automated collection
Where you are required under this website to provide personal data the uses of this data will be indicated on the page where it is requested.
- Registering for our mailing list – users can sign up to receive LIDA updates based on the interests indicated on the form.
Cookies are small text files that are placed on your device by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
Our website http://www.lida.leeds.ac.uk/ uses first party cookies which are set by our web server as opposed to a different web server. They are categorised as strictly necessary, which are essential to the operation of the website, and performance cookies which collect anonymous information about the usage of our website. By using our website you agree that we can place these types of cookies on your device.
The table below explains the cookies we use and why:
|YouTube Session Cookies||yt-remote-session-name, yt-remote-session-app, yt-remote-fast-check-period, yt-remote-cast-installed||Unclassified||N/A|
|YouTube Embed Cookies||VISITOR_INFO1_LIVE, YSC, PREF||We use YouTube to embed a selection of videos on our site. The embedded videos do not set cookies themselves and can be played with no cookies set. However, if the ‘Share’ button is clicked YouTube will set these two cookies. The VISITOR_INFO1_LIVE cookie attempts to estimate your bandwidth and the use_hitbox cookie increments the ‘views’ counter on the YouTube video. These cookies don’t gather information that identifies a user||N/A|
|PHP Session Cookie||PHPSESSID||Maintains user state across page requests||PHP information|
|WordPress||wp_settings_1 wp_settings_2 wp_settings_time_1 wp_settings_time_2 wp_settings_time_3||These cookies are used to store date and time information on the WordPress CMS, and only collect data anonymously.||WordPress Codex|
|Test cookie||TestCookie||This is set by our CMS and is used to determine whether or not your browser allows cookies to be set.||N/A|
|NetScaler appliance||NSC*||These cookies are set by our Citrix NetScaler appliance and are used to ensure your browsing session remains on the same web server.||Citrix|
9. Your duty to inform us of changes
It is important that the personal data the University holds about you is accurate and current. Please keep us informed if the personal data you have provided to us needs to be updated.
10. Your rights as a data subject
Under the GDPR, in certain circumstances, you have the right to:
- withdraw your consent to our processing of your personal data where that is the legal basis for such processing
- access any of your personal data which we hold
- have your personal data which we hold corrected if it is inaccurate
- have any of your personal data which we hold erased
- restrict the ways in which we process your personal data
- object to our processing of your personal data
- receive a copy of any of your personal data which we hold in a structured and commonly used machine-readable format
- in certain cases not be subject to a decision based solely on automated decision making
- lodge a complaint with a supervisory authority
11. Queries and complaints
If you have any queries or concerns relating to this privacy notice or the way your data is being processed through this website then please contact the University’s Data Protection Officer, David Wardle on firstname.lastname@example.org or by post to University of Leeds, 11.72 EC Stoner Building, Leeds LS2 9JT, UK.
The University’s main telephone number is +44 (0) 113 2431751.
The UK’s regulator for the DPA and GDPR is the Information Commissioner’s Office (ICO). The University is registered as a Data Controller with the ICO
Should you be dissatisfied with our handling of your concerns you have the right to complain to a supervisory authority. In the case of the UK this is the Information Commissioner’s Office and details can be found at https://ico.org.uk.
Last updated: 07 June 2018