Privacy

This privacy policy describes how the NIHR Bristol Biomedical Research Centre (‘BRC’) uses and protects information you give us when using our website.

What information we collect and how we use it

Any personal information we hold about you is stored and processed in accordance with the UK’s Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

Automatic information

We automatically receive certain types of information whenever you interact with this website. We use the information to monitor website traffic and to assist with the navigation and user experience of the website. Any disclosure of this information will be in aggregate form and will not identify individual users.

Information that we receive automatically includes:

  • Website usage data
  • User data such as your IP address and details of your browser and device

Information you choose to give us

If you choose to sign up to our email newsletter, we will collect the following information:

  • Your name
  • Your email address
  • The name of your organisation

We will only use this to send you email newsletters. You may opt out of these at any time by following the ‘unsubscribe’ link in the email.

Retention of your data

We will retain data for as long as required for the purpose for which it was collected.

Lawful basis

Personal data collected through this website is processed on the basis of your consent to do so (GDPR Article 6.1(a)) or under the legitimate interests of the relevant parties (Article 6.1(f)).

Cookies

We use cookies to operate the website and to track how people use it. A cookie is a small file stored on your computer or device, which enables our website to identify your computer or device as you view our website pages. All the information collected is anonymous and we do not use it for any other purpose.

Third-party service providers

We use the following third-party service providers to process and store your data:

  • Mailchimp (owned by Intuit Inc), which we use to manage email marketing subscriber lists and send emails to our subscribers. Alongside the personal data described in 1.2, Mailchimp records things like whether a subscriber has opened an email and what links they have clicked on. Read Intuit’s privacy policy.
  • Google Analytics (owned by Google LLC), which we use to monitor usage of our website. Google Analytics collects IP addresses so it can report things like whether people return to our website or what country visitors come from. GDPR considers IP addresses to be personal information. However, IP addresses are not linked to other personally identifiable data, and IP addresses are not available in Google’s reporting tools. Read Google’s privacy policy.

How to make a request about your data

University Hospitals Bristol and Weston NHS Trust and the University of Bristol are joint Data Controllers for this website for the purposes of the Data Protection Act 2018 and the General Data Protection Regulation. Read UHBW’s privacy notice. Read the University of Bristol’s privacy notice.

You can contact us to ask us what data we hold about you, who has access to it and how it is being used. We will also delete any data about you that we hold if you ask us to.

If you have any concerns as to how your personal data is processed, you can contact the relevant Data Protection Officer as follows:

University Hospitals Bristol and Weston NHS Foundation Trust
Trust Headquarters
Marlborough Street
Bristol
BS1 3NU
InformationGovernance@uhbw.nhs.uk
0117 342 3701 / 0117 342 3794

University of Bristol
Beacon House
Queens Road
Bristol
BS8 1QU
Email: data-protection@bristol.ac.uk

It is also your right to submit a complaint to the Information Commissioner’s Office (ICO). Further details can be found at www.ico.org.uk.