Glasgow Caledonian University (“GCU”) is a member of Fearless Glasgow, a multi-agency partnership of Universities and Colleges across the West of Scotland seeking to mitigate instances of gender-based violence. The partnership, which has the backing of Police Scotland and the Scottish Government, aims to help raise awareness of gender-based violence and make reporting of incidents more accessible to all via the Report and Support Platform. The purpose of this privacy notice is to provide you with information about how your personal data is processed when you engage with the Report and Support Platform.
Using your personal information
Identity of data controller Glasgow Caledonian University (GCU) is the data controller of your personal data.
Purpose for collection/processing If you use the Report and Support Platform to report gender-based violence that has affected you, or you use the platform to report an incident on behalf of another person, GCU may collect personal data about you. This enables GCU to respond to the incident you have reported and provide you with support and assistance, should you need it.
Legal basis The legal condition which enables GCU to process your personal data is found in the UK General Data Protection Regulation (“UK GDPR”):Article 6(1)(a) consent Article 6(1)(f) legitimate interest. Where special categories of data are processed we will normally have your explicit consent or another legal reason within Article 9(2) of GDPR will apply.
Whose personal data is being collected/processed? Student, staff and visitor personal data may be collected and processed.
What personal data is collected? Personal data will be collected from you when you enter information into the Report and Support Platform. The type of personal data that will be processed depends on the amount of information you provide and may include:
Your name and contact information*;
Names and contact details of third parties; and
Details of the incident you wish to report, which may contain personal data which is sensitive in nature and is considered special category data.
You have the option to upload images relevant to your report. These images may contain personal data about you and others and may contain special category data.
*You may choose to submit a report anonymously. Please note that if you do submit a report without providing your name and personal contact information, GCU will be unable to contact you in connection with its investigation into your report. However, if you choose to use our two way anonymous chat function, we will be able to contact you via this method. Your details will still remain anonymous.
Cookies
The report and support website uses cookies to measure user interaction and engagement with the site and to help us understand how the platform is being used. These cookies will be used if you provide your consent.
How is the personal data collected? The information is collected directly from you when you enter information into the Report and Support Platform.
Sharing your personal data with third parties. The personal data you provide will be treated confidentially. GCU does not share your personal data without your consent other than in the circumstances noted below. If your physical or emotional wellbeing is at risk. If we believe you, or another person are in danger of serious harm. In these circumstances, GCU may share your personal data with Police Scotland and the lawful basis for doing do is that it is necessary to protect the vital interests of you, or another person (Article 6(1)(d) UK GDPR). GCU may disclose personal data where we have been given information which would render it liable to civil or criminal court procedure should it not be disclosed and the lawful basis for doing so is that it is necessary to comply with a legal obligation that GCU is subject to (Article 6(1)(c) of UK GDPR). The Report and Support Platform is provided by a third-party supplier called Culture Shift and Culture Shift may have access to the information you enter into the platform in the course of the provision of its services. Information about Culture Shift can be found here: https://www.culture-shift.co.uk/
How is the personal data stored and kept securely? Information is retained on the Report and Support Platform and GCU’s secure systems and kept securely on or in University equipment in line with University information security and data protection policies. GCU has entered into a contract and data sharing agreement with Culture Shift and Culture Shift may only process the personal data you provide in accordance with GCU’s instructions.
How long is the personal data kept? Please see the University’s the Records Retention Schedules.
Will the information be used for any automated decision making No
Is personal data transferred outside the European Economic Area? No
Your rights You have a number of rights under data protection law including the right to request access your personal data, these include:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
Please contact dataprotection@gcu.ac.uk if you wish to make a request. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
How to complain If you have any concerns about our use of your personal information, you can contact dataprotection@gcu.ac.uk You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
