- Introduction
This statement relates to the National Research Facility for Lab-based Computed Tomography (NXCT) website and how we look after any information that is made available to us when you visit our website in accordance with data protection law.
The NXCT is an Engineering & Physical Sciences Research Council funded National Research Facility for lab-based computed tomography. NXCT is a Partnership of five institutions – the Universities of Manchester, Warwick, Southampton, University College London and Diamond Light Source.
NXCT is administered by staff at the Henry Royce Institute at The University of Manchester, a University incorporated by Royal Charter (registered number RC000797), whose registered office is at Oxford Road, Manchester M13 9PL (the “data controller”). The University of Manchester’s Data Protection Officer is Alex Daybank dataprotection@manchester.ac.uk
- What is personal data (also known as personal information)?
Personal information means any information which relates to or identifies you as an individual and includes opinions about you or information which may not explicitly identify you (e.g. where your name has been removed) but which nevertheless does identify you if it is combined with other information that is readily available.
- Who will process my personal information?
This notice explains what categories of information we retain and how NXCT staff at The University of Manchester process your personal information.
- What personal information will you process?
We only collect and hold personal data provided by you in accordance with this privacy statement. This will happen if you:
- Email us
- Contact us via an enquiry form
- Sign up to our newsletter
- Request us to provide you with information at events
This personal data includes:
- name
- email address
- job role
- telephone
We ensure that all personal data you supply is held in accordance with the latest data protection law. When necessary we do share data with relevant NXCT Partners (as listed above) in order to resolve your enquiries.
If you have signed up to receive communications from us, we will keep your personal information for up to 12 months following your decision to opt out of those communications.
- What is the purpose of the processing under data protection law?
We will only use your personal information when the law allows us to do so by providing us with a legal basis or valid condition. Most commonly, we will use your personal information in the following circumstances:
- the data subject has given consent to the processing of his or her personal data for one or more specific purposes
- processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Can you provide examples of processing?
We will process person data when:
- A person makes an enquiry to the NXCT in order to resolve this and carry out work.
- A person signs up to our mailing list to receive updates from the NXCT
The legal basis for this is:
- the data subject has given explicit consent to the processing of those personal data for one or more specified purposes
- Who will my personal information be shared with?
When necessary we do share data with relevant NXCT Partners (as listed above) in order to resolve your enquiries.
We do not sell or rent your information, or share it with other companies for marketing purposes.
We share your information with third-party service providers who provide services to us. These include Survey Monkey to log applications for NXCT equipment access.
The following activities are carried out by third-party service providers on our behalf: capturing responses to NXCT application forms.
All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal information for their own purposes. We only permit them to process your personal information for specified purposes and in accordance with our instructions.
- Cookies
Our websites use ’cookies’ which are text files placed on your computer when you visit a site which help us understand how you use our websites. Cookies don’t collect personal data from your computer, only the data created by your browsing. Some cookies remain on your computer after you leave the website; these are called ‘persistent’ cookies. Others are deleted automatically when you close your browser and others simply expire. We use the following cookies on our websites: [Productive Digital to insert information]
Analytics cookies and advertising cookies set by Google Analytics
We collect non-personally-identifiable information relating to your use of our sites via Google Analytics technology. This may include: which pages you see; how long you stay; what you click on our pages; if you visit the website again; which country and city you are browsing from; etc. This data is collected for the purpose of monitoring and understanding the effectiveness of our website. We also collect data relating to the demographics and interests of our users via Google Analytics and cookies set by Google advertising networks. This data is used in aggregated form to help improve the site and the NXCT’s marketing efforts.
To specifically opt out of Google Analytics cookies visit
https://support.google.com/analytics/answer/181881to install an opt-out browser add-on.
Social Cookies
We use social features on this site to allow you to like and share content with your social networks.
Tracking cookies (social media)
Twitter, LinkedIn
Tracking cookies (media)
Youtube
You can choose not to accept cookies by changing your browser settings or deleting existing cookies installed on your computer. Visit www.aboutcookies.org for information on how to do this.
Public Twitter data
NXCT uses publicly available information, such as Twitter handles and hashtag usage, to target tweets promoting our activity to relevant Twitter users.
- What are my rights in connection with my personal information?
Under certain circumstances, by law you have the right to:
8.1. Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it
8.2. Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected
8.3. Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing
8.4. Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes
8.5. Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it
8.6. Request the transfer of your personal information to another party
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
If you would like to exercise any of these rights, you should contact the University Data Protection Officer by email: dataprotection@manchester.ac.uk. Alternatively you can write to The Information Governance Office, University of Manchester, Christie Building, Oxford Road, Manchester M13 9PL. Further information about your rights is available from the University’s data protection web pages.
- How long is my information kept?
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for.
If you have made an enquiry we will hold this for the duration of the NXCT grant (5 years) unless requested otherwise.
If you have signed up to receive communications from us, we will keep your personal information for up to 12 months following your decision to opt out of those communications.
- Who can I contact if I have any queries?
If you have any questions about how your personal information is used by the University of Manchester as a whole, or wish to exercise any of your rights, please consult the University’s data protection webpages at https://www.manchester.ac.uk/discover/privacy-information/data-protection/. If you need further assistance, please contact the University’s Data Protection Officer (dataprotection@manchester.ac.uk) or info@nxct.productivedigital.com
- How do I complain?
If you are not happy with the way your information is being handled, or with the response received from us, you have the right to lodge a complaint with the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, SK9 5AF (https://ico.org.uk).
- Are changes made to this notice?
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information. This notice was last updated on 3 Nov 2020.