Privacy notice for prospective students
Your personal data
The University of Glasgow will be what’s known as the ‘Data Controller’ of your personal data processed in relation to prospective student communications. This privacy notice will explain how the University of Glasgow will process your personal data.
Why we need it
Enquirers - We are collecting your personal data such as name, country of residence, subject areas of interest, level of study, intended year of entry, fee status and most recent school / university attended, in order to fulfil a prospectus request or manage your enquiry.
Applicants – Throughout the application process we will send you additional communications covering areas we believe to be of interest and importance to you while making your decision to study at the University of Glasgow.
We will only collect data that we need in order to provide and oversee these services to you.
Event Registrations - Your name will appear on a registration list accessed only by authorised persons of the University of Glasgow and used only for the purpose of checking you in to the event. This list will not be retained and will be destroyed following the event.
Legal basis for processing your data
We must have a legal basis for processing all personal data.
- Responding to your enquiry of providing a prospectus - the legal basis for processing is contractual obligation.
- Supplying our new student and offer holder E-communications and postal mailings – the legal basis for processing is contractual obligation.
- Event enquiries – the legal basis for processing is consent.
- Providing pre-applicant marketing communications - the legal basis for processing is consent.
What we do with it and who we share it with
We may provide access to such information (including copies of the documents provided by you) to our external auditors when relevant.
We currently use third party services to provide our managed email communications, postal mailings and prospectus distribution. You may be sent information about events or resources at the University where this would be relevant to any future study on this basis, but only if you have requested it. If you decide to receive this information, you can opt out at any point by using the Unsubscribe link in any of our communications.
How long do we keep it for?
Your data will be retained by the University for 12 months after the session start date of the year of entry indicated in your enquiry/request. After this time, data will be securely deleted. If this date is not stated, your data will be held for 2 years after the initial enquiry date.
Your information may be used anonymously (i.e. excluding personal or identifiable data) for internal monitoring and reporting purposes such as helping us to estimate how many prospectuses to print each year and monitoring the quantities and locations of prospectus requests.
- Mailing and Data Solutions provide our prospectus and postal mailing distribution. Data is accessed or transferred by The University of Glasgow via a secure FTP transfer and is held by MDS for 7 days before being destroyed.
- If you would prefer that your data is not stored in Dotdigital, you can opt out of communications at any point. You can also email Recruitment Marketing directly at email@example.com
International event enquiry data
- Data may be shared with International Officers based overseas who are employed by a third party. A Service Level Agreement is in place detailing use of data.
- Data may be shared with a relevant in-country agent to facilitate counselling and marketing the University. Data protection and sharing of data is covered by a separate agreement between the University and the agent in question.
- Data may be shared with a Government Sponsorship body but only after confirmation of approval by the enquirer.
For bookings, including Open Days, Applicant Days and Regional Information events, we use Eventbrite: a third party service which is not operated by the University of Glasgow.
If you wish to attend an event organised by us, but do not wish to use Eventbrite, please email us at firstname.lastname@example.org
Please note that the University uses a secure third party data-capture application, GeckoForm, to manage the data you have provided whilst attending events both on and off campus events.The application is only used for the purposes of capturing and backing-up your contact data and will not be used for any other purposes.
The University also uses the GeckoEvent application for some of our University events which include our Postgraduate Open Day.
Online Surveys (formerly BOS)
We currently use onlinesurveys.ac.uk to manage some of our surveys and event registration forms.
Google Analytics and Google Tag Manager
The University uses Google Analytics to measure web traffic and web journey behaviour and Google Tag Manager in order to track marketing spend and serve tailored marketing content through various platforms including Google Adwords, Facebook, Instagram and Youtube. You can change these settings at any time through our cookie preferences menu.
What are your rights?*
You can request access to the information we process about you at any time. If at any point you believe that the information we process relating to you is incorrect you can request to see this information and may in some instances have it restricted, corrected or, erased. You may also have the right to object to the processing of data and the right to data portability.
Where we have relied upon your consent to process your data, you also have the right to withdraw your consent at any time.
If you wish to exercise any of these rights, please contact email@example.com
*please note that the ability to exercise these rights will depend on the legal basis on which the processing is being carried out.
If you wish to raise a complaint on how we have handled your personal data, you can contact the University Data Protection Officer who will investigate the matter.
Our Data Protection Officer can be contacted at firstname.lastname@example.org
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).
This privacy statement will be reviewed and updated on a regular basis. It was last updated on 8 October 2019.