Privacy Notice for Computing Science lab Bluetooth occupancy sensors

Your Personal Data

The University of Glasgow will be what’s known as the ‘Data Controller’ of your personal data processed in relation to the Computing Science Lab Bluetooth Occupancy Sensors. This privacy notice will explain how The University of Glasgow will process your personal data.

Why we need it

We are collecting information that may be linked with your personal data, in the form of your Bluetooth devices’ MAC address and signal strength, in order to provide you with occupancy estimates for the various Computing Science labs and study spaces on campus. We will only collect data that we need in order to provide and oversee this service to you.

Legal basis for processing your data

We must have a legal basis for processing all personal data. In this instance, the legal basis is Legitimate interests – we are tracking the occupancy of Computing Science labs in order to better understand their usage patterns (1) to ensure we allocate sufficient estate space for effective study, and (2) to provide a live web dashboard for students to identify when/where to do their practical work.

If you do not wish to participate in this study, you should turn off the Bluetooth capability on your personal devices when you are in a Computing Science lab or study space that is being monitored. Alternatively, you may choose to study in another campus location that is not part of the Bluetooth occupancy estimate system.

What we do with it and who we share it with

  • All the personal data you submit is processed by software & staff at the University of Glasgow in the United Kingdom.

In addition

  • No personal data is shared on open websites, although aggregate occupancy estimates for each lab will be available on our live web dashboard.
  • The occupancy estimate system stores Bluetooth MAC addresses in RAM for as long as they are broadcasting within range of our sensors. All MAC addresses are deleted within 10 minutes of their most recent transmission received by our sensors. No MAC addresses are stored permanently. Any transmission between nodes in the system occurs over the campus local area network via encrypted data channels.
  • The occupancy estimates derived from the sensors will be used to manage room allocations for Computing Science courses in the long term.

How long do we keep it for?

Your data will be retained by the University for no more than 10 minutes after you leave the area which is being monitored by the sensors. After this time, data will be securely deleted. The anonymized, aggregate occupancy data will be retained by the University for five years, to assist in understanding long-term trends in space utilization.

What are your rights?

You can request access to the information we process about you at any time. If at any point you believe that the information we process relating to you is incorrect, you can request to have it corrected. You also have the right to object to the processing of data.

If you wish to exercise any of these rights, please submit your request via the UofG GDPR webform or contact dp@gla.ac.uk.

Complaints

If you wish to raise a complaint on how we have handled your personal data, you can contact the University Data Protection Officer who will investigate the matter.

Our Data Protection Officer can be contacted at dataprotectionofficer@glasgow.ac.uk

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO) https://ico.org.uk.