This privacy notice relates to the following research programmes:
IMPACT – Improving Outcomes in Mental and Physical Multimorbidity and Developing Research Capacity in South Asia
DiaDeM– Developing and evaluating an adapted behavioural activation intervention for people with depression and diabetes in South Asia
TBMM– Tuberculosis Multimorbidity Project
The policy is for people who:
- Receive information about IMPACT, DiADeM and TBMM
- Visit the IMPACT website (www.impactsouthasia.com).
- Attend events both in person and online for any of the 3 programmes
This privacy notice sets out the ways in which the IMPACT, DiADeM and TBMM programmes gather, use, store and shares your data. It also sets out how long we keep your data and what rights you have in relation to your data under the General Data Protection Regulation (GDPR).
Where do we get your data from?
We collect data from the following sources:
- Emails and verbal conversations with you
- Cookies on the IMPACT website which are linked to Google Analytics (analytics.google.com).
- TBMM registration when joining the network
What data do we have?
We collect the following data from you:
- Email address
- First name
- Last name
- Job title
- Organisation
- Photograph if requested (for the website)
- Biography if requested (for the website)
We collect the following data through the IMPACT website which is linked to Google Analytics:
- Cookies are used to see how visitors interact with the site. These aggregate anonymous data about users such as your interests, gender, demographics and internet/device connections
We will also collect Special Category Data regarding dietary requirements and accessibility requirements for specific events when applicable.
What is our legal basis for processing your data?
By using your data we are able to:
- send you further information on our programmes and ensure you are aware of activities that are taking place
- improve the experience of visitors to our website
- highlight your contribution to the research programmes by including you on the website
How do we use your data?
We use your data to:
- Send you information regarding our programme activities, events and research findings
- Improve the IMPACT website experience
Website profiles
For those actively involved in the research programmes we will display a profile for you on the website (your name, job title, organisation, photograph and sometimes biography if applicable). We will request this information specifically so you know how and when it will be used
TBMM members
Your information will be shared:
- internally within the programme (name, job title, organisation, email address)
- externally on the website (name, job title, organisation and biography where applicable)
We only share your data with:
- Key IMPACT, DiaDeM and TBMM collaborator contacts involved in the programmes
- Google Analytics when analysing the performance of the website
- On the website with your permission under your own profile
How do we keep your data secure?
The IMPACT, DiaDeM and TBMMprogrammestake information security seriously and have implemented appropriate technical and organisational measures to protect personal data and special category data. Access to information is restricted on a need-to-know basis and security arrangements are regularly reviewed to ensure their continued suitability.
The programmes use University of York IT security solutions. For further information please visit: https://www.york.ac.uk/it-services/security/.
How do we transfer your data safely internationally?
In certain circumstances, it is necessary to transfer your Personal Data (including Special Category Data) outside the European Economic Area. In respect of such transfers, the IMPACT, DiaDeM and TBMMprogrammes will comply with our obligations under Data Protection Law and ensure an adequate level of protection for all transferred data.
How long will we keep your data?
Your data will be kept for the duration of the programme you are engaged with and only any longer if specifically requested.
What rights do you have in relation to your data?
Under the General Data Protection Regulation, you have a right of access to your data, a right to rectification, erasure (in certain circumstances), restriction, objection or portability (in certain circumstances). You also have a right to withdraw consent. If you would like to exercise any of your rights please contact us:
Questions or concerns
If you have any questions about this privacy notice or concerns about how your data is being processed, please contact Nicky.traynor@york.ac.uk
Right to complain
If you are unhappy with the way in which the IMPACT Programme has handled your personal data, you have a right to complain to the Information Commissioner’s Office. For information on reporting a concern to the Information Commissioner’s Office please visit www.ico.org.uk/make-a-complaint
