Privacy policy

This privacy notice explains how the Digital Health & Care Innovation Centre (DHI) will use your personal information and your rights under data protection legislation.

Please note that in some cases you may be provided with a more detailed privacy notice in relation to the particular purpose for which data is collected. This is to increase transparency where required and any additional privacy notices supplement this central notice.

​

It is important that you read this notice prior to providing your information. 

​

Who we are

DHI is hosted by the University of Strathclyde and is one of Scotland’s Innovation Centres, funded by the Scottish Funding Council and the Scottish Government. It is a world-leading collaboration between the Glasgow School of Art and the University of Strathclyde. The University of Strathclyde, as the host organisation for DHI, is responsible for your personal data in terms of data protection legislation (the controller). 

Information we collect and use about you 

DHI will process personal data in relation to the following groups:

• Industry partners;

• Health and care providers;

• Academia and education providers;

• Wider public sector services; and

• Members of the public (the potential end-users of digital health and care solutions).

In general, DHI will process:

• Identification details (first name, surname);  

• Contact details (email address, telephone number);

• Employment details (job title/role, company/sector of employment, workplace address, education, expertise and professional affiliations);

• Academic profile (education, research interests and other health and care-related interests);

• Technical information (including internet protocol (IP) address, login data, passwords, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website);

• Usage information (including information about how you use our website, social media and other services);

• Marketing and communications data (including your preferences in receiving marketing from us and our third parties, and your communication preferences); and

• Information to manage events/meetings (see Events below).

In general, DHI will collect personal data directly from you (via our Join Our Network form or via email, telephone or in-person enquiry).

​

Why we require this information and our lawful basis  

In general terms, DHI collects and uses personal information about you to:

• Deliver services to you and meet its legal responsibilities;

• Set up, administer and manage user accounts;

• Facilitate collaboration between members of the DHI network;

• Keep in touch with you (including by providing industry news and information about DHI events and services tailored to your interests based on the information you provide when you join the network, and if you have subscribed to marketing)  

• Manage and deliver events;

• Comply with legal obligations (e.g. health and safety, equality requirements and/or licensing requirements relating to events);

• Manage and respond to enquiries;

• Maintain our records; and

• Process financial and non-financial transactions.

DHI requires a lawful basis for processing personal data. In some cases, there may be more than one lawful basis that applies. We may rely on the following lawful bases, depending on the circumstances:

• Consent;

• Contract;

• Legal Obligation;

• Public Task; and/or

• Legitimate Interests.

Where we are required to collect any special category data (for example information relating to health for participants at events), we will process on the basis that:

• We have obtained your explicit consent;

• It is necessary for reasons of substantial public interest (equality of opportunity); and/or

• It is necessary to protect your or another person’s vital interests and you are not capable of giving consent, e.g. emergency situations.

Events

In addition to the above, DHI may process the following personal data in order to facilitate attendance at an event or conference:

• Dietary requirements;

• Accessibility requirements;

• Geographical location (city/town/region/country);

• Passport and date of birth details (only where you have requested a letter from us for visa purposes to attend an event); and

• Payment details (including delivery and/or billing addresses).

If the event is being organised with another partner, with whom your personal information will be shared, you will be advised of this when booking the event.

​

Where events involve networking, we may want to share your contact details with other attendees. If we plan to do this, we will ask for your consent when you register for the event.

To comply with requirements laid down by funders, DHI may also be required to obtain additional information about individuals attending events (age profile, sex, ethnicity & disability) to help us monitor our obligations under equality legislation. You do not have to provide this information, although it is always helpful if you do. Where this data is collected, we use this in an anonymised and aggregated form which may be shared with the DHI funders (as anonymous and aggregated data), and we do not use it in relation to any decisions about individuals.

Photography/filming – at some events photography and/or filming will take place. If this is the case you will be advised in advance and at the event. Where necessary we will obtain consent.

Video conferencing – When events are held using video conferencing applications, some personal data may be collected by the companies who own these applications. This may include your name, username, email address, your computer’s IP address and device name. Where meetings are recorded by or on behalf of the University of Strathclyde, recordings will only be retained for as long as is necessary. Where recording is taking place, you will be notified of this prior to the event taking place and it will be clearly visible to all participants during the event. For further information about how third-party applications may use your data, please read the privacy policy of the relevant video conferencing application.

Disclosing your information

Depending on the reason why you are engaging with DHI, we may have to share some of your personal data with the following third parties:

• Third party product and service provider;

• Payment providers;

• Other members of the DHI network;

• Funding bodies, for example, the Scottish Funding Council; and

• Events organisations.

Data will only ever be shared where it is necessary. DHI use a third-party mailing application (Mailchimp) to send personalised emails to our network. If we use any third-party tools to collect and process personal data, we will tell you about this when you register (for example, DHI may use Eventbrite or Wix to capture registration information for an event).

​

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you also have the right to complain to the Information Commissioner’s Office (https://ico.org.uk/concerns/). 

Transferring data internationally

If your data is transferred outside the United Kingdom, we will only do this where it is necessary and where there are adequate safeguards in place for personal data.

​

How long your information is retained

When we collect or process your personal data, we will only keep it for as long as is necessary for the purpose for which it was collected.

Profile registration information/preferences will be retained until you advise us that you no longer wish to be part of the network. Where you have given consent for marketing, your contact details will be held until you choose to unsubscribe.

Personal data collected in relation to an event will normally be retained for 3 months after the date of the event. 

​

Your rights

Under data protection legislation, you have a number of rights* including the right to: 

• withdraw consent, at any time, where that is the lawful basis of our processing; 

• access your personal data and obtain a copy, free of charge; 

• rectify inaccuracies in personal data that we hold about you; 

• erasure, that is have your details removed from systems that we use to process your personal data; 

• restrict the processing in certain ways; 

• obtain a portable copy of data you have given to us in a commonly used electronic form; and 

• object to certain processing of your personal data by us.

*Please note that the ability to exercise these rights will vary and depend on the lawful basis under which the processing is being carried out.  

Please contact dataprotection@strath.ac.uk if you wish to exercise/enquire about any of these rights.

​

Complaints

If you wish to make a complaint about how we have handled your personal data, you can contact the Data Protection Officer at dataprotection@strath.ac.uk.