This Privacy Notice is designed to help you understand how we use personal information for this initiative. We have set out below the information we use, who we share it with, and how long we will keep it.
Collecting, storing and sharing your personal data for the purposes of managing the University and Community response to the COVID-19 pandemic. Applies to University staff, students, and other visitors to campuses and other venues being used for University purposes.
Your name, contact details, dates and times when present on campus. See government guidance.
We get most of this information directly from you, but we may also get some of this from other information we routinely hold about you, and from the Local Authority Public Health or Health Protection Team.
We use this information for these purposes:
We will securely share the identifiable data above about cases and potential contacts with Local Authority Public Health and Health Protection Teams.
In the event of a large number of cases, Local Authority Public Health and Health Protection Teams may request more information about cases and potential contacts. In this case we will share the relevant information we hold where it is necessary to support public health activities and outbreak control. We may also receive information from these partners and use this to contact individuals to provide support.
Anglia Ruskin University is the Data Controller. Where we share personal data, the receiving authority will also become a Data Controller.
In supporting the Test & Trace initiative the University is fulfilling its ‘Public Task’ obligations under Health & Safety legislation and under government COVID-19 guidance.
We share special category data relating to health of individuals for reasons of public interest in the area of public health.
No personal information is routinely sent or stored outside the UK for these purposes. Should the transfer of personal information outside of the UK become necessary, it will only take place if permitted by law, and then only where there are appropriate safeguards in place to protect the personal information.
21 days in line with government guidance.
Our core record will be kept for the duration of the Test & Trace initiative, and then for a period of 10 years, unless future government guidance specifies longer or shorter periods.
The law gives you a number of rights to control what personal information is used by us and how it is used by us.
You can obtain further information about these rights from the Information Commissioner’s Office.
You also have the right to lodge a complaint in relation to this summary notice, the full Privacy Notice or our processing activities with the Information Commissioner’s Office.
If you wish to exercise any of these rights, you can contact our Data Protection Officer at firstname.lastname@example.org