²ÝÝ®ÉçÇø

The personal data ²ÝÝ®ÉçÇø holds about you is obtained from a variety of sources, including but not limited to:

• Information you have provided in your enquiry or application for external funding (including applications made directly to the University, via a third party such as Interface or the Business Gateway , via a partner institution);

• Information you provide us with when scoping out your initial requirements and during the course of your engagement or project with ²ÝÝ®ÉçÇø;

• Information related to the impact, results or outcome of your engagement with ²ÝÝ®ÉçÇø;

• Funding organisations such as the Scottish Government or Scottish Enterprise.

This privacy statement explains how we collect and use personal information about you.. These include, but are not limited to:

• Furthering the University’s mission to support innovation led economic growth.
• Administering and providing research and innovation.
• Maintaining and managing research and innovation processes, including outcomes and funders reports.
• Monitoring the impact of academic research beyond the University.
• Processing financial transactions including fees and invoicing.
• Providing advice and support to you, including research ethics, research integrity and intellectual property.
• To protect your vital interests e.g. in an emergency situation.
• Verifying your identity where this is required.
• Contacting you by post, email or telephone..
• Providing you with information about research and innovation services. .
• Research including monitoring quality and performance.
• Seeking feedback on University services and facilities.
• Statistical and archive purposes.

The University will manage your information securely and will restrict access to only those who need to use it in the course of their duties. The University will put in place technical and organisational measures necessary to ensure the security of your information.

To fulfil our statutory or legal obligations your data may be provided, without your explicit consent, to organisations or agents acting on their behalf including but not limited to:

• Government funders where external funding is secured to meet the requirements of public UK and European funding.

• The Scottish Funding Council (SFC) and Scottish Government.

• UKRI, including agents managing the Research Excellence Framework (REF)

• Relevant authorities dealing with emergency situations at the University.

Where the processing of personal information falls outwith the scope of your contract with the University (i.e. the information that the University is required to process to manage and administer your time at University) then we will require another legal reason to process your data. This may require us to ask for your consent for processing. Consent will be sought when it is required.

The University will retain your personal data only as long as necessary for its purposes as described. Please note, however, that even after termination of your engagement with the University, ²ÝÝ®ÉçÇø may still need to retain your personal data to satisfy its obligations to keep certain records for particular periods under applicable law. Such retention is documented in the University Records Retention Schedule, held by the Data Protection Officer.

You have the right to:

If we process personal information that you provide to us on the basis of consent or because it is necessary for the performance of a contract to which you are party, and in either case that processing is carried out by automated means, then you have the right to have that personal information transmitted to you in a machine readable format. Where technically feasible, you also have the right to have that personal information transmitted directly to another controller.

If we use your personal information on an automated basis to make decisions which significantly affect you, you have the right to ask that the decision be reviewed by an individual to whom you may make representations and contest the decision. This right only applies where we use your information with your consent or as part of a contractual relationship with you

Please contact us in any of the ways set out in the contact information and further advice section below if you wish to exercise any of these rights.

We keep this privacy statement under regular review and will place any updates on this website. We will publish any changes we make to this data protection policy on our website at the following link:

²ÝÝ®ÉçÇø Regulations, Policies and Procedures

orÌý

²ÝÝ®ÉçÇø Data Protection

If you have any queries about the processing of your personal data as described above, please contact the University’s Data Protection Officer. You can do this by email: Data Protection Officer Email Ìý; telephone: 0131 474 0000 or post:

We seek to resolve directly all complaints about how we handle personal information. If you have any issues about this statement or the way the University has handled your personal information, please contact the University Data Protection Officer in the first instance.

If you are dissatisfied with the response from the University, you have the right to lodge a complaint with the Information Commissioner’s Office: