Who are the recipients or categories of recipients?

Where necessary personal information will be shared internally within the faculties and departments across the University. Such sharing will be subject to confidentiality protocols and access restrictions.

This section outlines the major organisations to which we may disclose data:

The Welsh Government and other public bodies, to carry out the funding, planning, monitoring and inspection of learning, and to produce statistical publications.

Approved social research organisations, to carry out research, analysis or equal opportunities monitoring.

To link your records data from this form to other data sources for the purpose of evaluating the impact the project has had on the people who took part.

Research organisations will only contact a sample of individuals. If you are contacted to take part in any research/evaluation about your experience on the programme the purpose of the interview or survey will be explained to you and you will be given the option to say yes or no. Your contact details will only be used for approved research purposes and in accordance with the Data Protection Act. The research organisations will delete your contact details once research is complete.

The University may also use third party companies as data processors to carry out certain administrative functions on behalf of the University. If so, a written contract will be put in place to ensure that any personal data disclosed will be held in accordance with the data protection laws.

Transfers to third countries and the safeguards in place

Personal data, where possible will be processed within the European Economic Area. However, in certain circumstances there may be a necessity to transfer your data outside the EU.

In certain circumstances, the University may use the services of a third party to process data on its behalf. Any organisation processing personal data on our behalf will be bound by obligations to process personal data in accordance with data protection legislation.

Where a processor is based in the US, data may be transferred to them if they are part of the Privacy Shield framework and are thus compliant with data protection requirements.

Retention of data

All data held about USW activities and all personal data will be stored securely and appropriately in line with European funding obligations.

Security of data

Data Protection legislation requires us to keep your information secure. This means that your confidentiality will be respected, and all appropriate measures will be taken to prevent unauthorised access and disclosure. Only members of staff who need access to relevant parts or all of your information will be authorised to do so. Information about you in electronic form will be subject to password and other security restrictions, while paper files will be stored in secure areas with controlled access.

Some processing may be undertaken on the University’s behalf by an organisation contracted for that purpose. Organisations processing personal data on the University’s behalf will be bound by an obligation to process personal data in accordance with Data Protection legislation.

Your rights

Where the University is relying on consent to process personal data, individuals have the right to withdraw their consent and can do so by contacting: CEMET@SouthWales.ac.uk

You have a right to access your personal information, to object to the processing of your personal information, to rectify, to erase, to restrict and to port your personal information.

Please visit the University Data Protection webpages for further information in relation to your rights.

Any requests or objections should be made in writing to the University Data Protection Officer:-

University Secretary’s Office,

University of South Wales,

Pontypridd,

CF37 1DL,

Email: dataprotection@southwales.ac.uk

If you are unhappy with the way in which your personal data has been processed you may in the first instance contact the University Data Protection Officer using the contact details above.

If you remain dissatisfied then you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:

Information Commissioner’s Office,

Wycliffe House,

Water Lane,

Wilmslow,

Cheshire,

SK9 5AF

www.ico.org.uk