Privacy Policy
Our Privacy Policy
The Data Lab is responsible for administering the Data for Children Collaborative with UNICEF (the “Collaborative”).
This policy sets out how The Data Lab (“we”, “our” and “us”) uses and protects personal information that we collect from you in relation to our role in administering the Collaborative.
This includes our role of managing the Collaborative website (https://www.dataforchildrencollaborative.com/), hosting events for the Collaborative and managing projects conducted by the Collaborative.
The Collaborative is jointly run by the University of Edinburgh acting in its capacity as The Data Lab, UNICEF and the Scottish Ministers. This means that we may require to share personal information we collect from you with UNICEF and/or the Scottish Ministers in order to properly administer the Collaborative.
As a Scottish Innovation Centre, The Data Lab is administered and hosted by the University of Edinburgh meaning that we are the same legal entity. The University of Edinburgh is a registered charity with registration number SC005336.
Please see our general privacy policy https://www.thedatalab.com/privacy-policy/ for information as to how The Data Lab uses personal data in relation to aspects of its business which are not related to the Collaborative.
1. Information about you
Correspondence Information
Information you provide to us when you contact us or meet us in a business context: this may include your name, job title, organisation or academic institution you are associated with, contact details and address.
Reasons for Collecting
If you contact us to enquire about any aspect of our business or services or to apply for a job with us, we will collect your personal information in order to respond to your query appropriately.
Legal Basis
On the basis of our and your legitimate interests. Our interests being that we would like to assist you with any queries you may have and inform you about our services or, where applicable, consider you for the role.
Skills Information
Where you contact us in relation to becoming involved in a Collaborative project, along with your Correspondence Information, we will ask for a summary of your skills, experience and qualifications.
Reasons for Collecting
We collect this information in order to assess whether you are suitable to work on the relevant project.
Where you agree to us doing so, we may retain this information in order to be able to contact you in relation to future projects which you may be able to assist us with and / or to display this information publicly.
Legal Basis
To carry out necessary steps prior to determining whether we can enter a contract / agreement with you to assist on the project.
In relation to retaining this information to enable us to contact you about other projects or displaying this information publicly, we will only do so where you have provided your consent.
Contract Information
Information you provide to us (or third parties that we work with e.g. ticketing platforms) when you enter (or wish to enter) a contract with us in relation to our services / funding, for example, where you apply to the Collaborative for funding, enter a competition or sign up to one of our events: this may include your name, address, contact details, payment details and where you sign up to an event, your dietary requirements.
Reasons for Collecting
If you enter a contract with us or apply for our services, we will collect your personal information to enable us to provide those services or take steps to assess whether we can enter the contract with you.
We may collect dietary requirements when you attend our events to allow us to provide you with suitable catering. This information could contain special category data, e.g. your religion.
Legal Basis
To fulfil our obligations under the contract or to carry out necessary steps prior to determining whether we can enter the contracts.
We will only collect this information on the basis of your consent.
Event Statistics Information
Additional information you provide to us (or third parties that we work with e.g. ticketing platforms or associated events) where you attend our “DataFest” events, hosted by us or our event partners: this may include your gender, job title, occupation, organisation sector and industry you work in.
Reasons for Collecting
We collect this information to assist us in assessing who the market for our events are and to assess whether we are attracting a diverse audience. This is to allow us to ensure we meet our aims in terms of diversity and ensuring our events are relevant and helpful.
Legal Basis
On the basis of our and your legitimate interests, our interests being that we wish to attract a diverse audience and ensure our events are relevant and useful.
Newsletter Information
Information that we collect about you when you sign up to our email newsletters, podcast series or to follow up information from events: this may include your name and contact details.
Reasons for Collecting
We collect this information in order to send you our newsletter. Our newsletter allows us to communicate what is going on with the Collaborative.
Legal Basis
We only send you these emails where you have provided your consent and you may unsubscribe at any time by following the link in the email.
Cookies Information
Information that we collect about you by way of cookies: this includes your IP address, browser type, operating system and activity on our websites.
Reasons for Collecting
We use these cookies to improve your experience of using our websites and to allow us to assess how visitors use our websites so we can improve these.
Legal Basis
Other than cookies which are strictly necessary for the functioning of our website, we will use cookies only on the basis of your prior consent. Please see the cookies section below for more information.
Photographs & Videos
We may capture photographs or videos of you in the following circumstances:
where you have agreed to provide video content for our online training courses;
where you have participated in our webinars or virtual events; and
where you have attended our partner events
Reasons for Collecting
We may use these photographs and videos to provide training and/or to promote our services and future events.
Legal Basis
On the basis of legitimate interests, our legitimate interests being that we wish to advertise our events / services and / or provide training. We only use these images or videos of you where we (or our event partners) have informed you beforehand and given you the chance to request not to be included. If you change your mind at any time, please let us know.
2. Cookie notice
We also collect some personal information, such as the IP address of your computer, through the use of website cookies. You can set your preferences for these cookies through our cookie banner.
What is a cookie?
A cookie is a small data file that certain websites write to your hard drive when you visit them. The only personal information a cookie can obtain is information a user supplies him or herself. A cookie cannot read data from your hard disk or read cookie files created by other sites. Cookies, however, enhance our website performance in a number of ways, including providing a secure way for us to verify your identity during your visit to our website and personalising your experience on our website, making it more convenient for you.
What types of cookies do we use?
Strictly Necessary Cookies
These cookies are essential to enable you to move around the website and use its features. Without these cookies, we cannot provide some of the basic functionalities of our website.
Performance Cookies
These cookies generally collect information about how visitors use our website, for instance which pages visitors go to most often, and the pages that they do not. This helps us to understand and improve the site, so it is easy to use and includes helpful content. They also allow us to fix bugs or glitches on the website. These cookies do not collect information that identifies visitors, so we cannot identify you individually. We use Google Analytics to track usage of our websites and interaction with our newsletters. For example, to see what content you click on, so we can analyse what content is of most interest to our audience.
Functionality Cookies
These cookies allow our website to remember the choices you make as you browse the site. They provide more enhanced and personal features. The information collected is anonymised and they cannot track your browsing activity on other sites once you leave our site.
How to Block Cookies
You can restrict or block cookies which are set during your use of the website by changing your browser’s settings. Some pages may not work if you completely disable cookies, but many third party cookies can be safely blocked.
Check information in your browser’s help section for specific instructions on how to manage cookies. Alternatively, websites such as “All About Cookies” provide comprehensive guidance.
3. Sharing tools and links to Third Party Websites
This website uses sharing tools. Sharing tools allow you to share content through social networks such as Facebook, LinkedIn or Twitter. When you click on a sharing button, the social networking site may place a cookie on your computer. This would be a third-party cookie set by the social networking site. If you have any questions about the use of these third-party cookies, you should check the relevant social networking site’s cookie policy. As we want your experience of our website to be as informative and useful as possible, we provide a number of links to websites operated by third parties.
Please be aware that we do not have any control over third party websites and that such third party websites may send their own cookies to users, or otherwise collect data or solicit personal information.
We cannot be responsible for the protection and privacy of any information which you provide whilst visiting such third party websites and so these are not governed by this privacy policy. We encourage you to review each third party website’s privacy policy before browsing and interacting with the website in question.
4. Retention of your information
We will retain your personal information for as long as we reasonably require in light of the purpose(s) for which we are holding it and all relevant legal, commercial and operational considerations.
As a Scottish Innovation Centre, we may have to comply with statutory retention periods as required by our funders.
5. Disclosure of your information
We will never sell or trade your personal information to others.
We use third party service providers and suppliers to deliver certain services. We put contractual arrangements in place with these third parties to ensure they are obliged to protect your personal information.
As the Collaborative is ran by The Data Lab along with UNICEF and the Scottish Ministers, where reasonably necessary to achieve the goals of the Collaborative we may share your personal information with UNICEF and/or the Scottish Ministers. Depending on the circumstances, UNICEF and / or the Scottish Ministers may be controllers in respect of your information but please contact us in the first instance if you have any questions.
We only share your personal information where it is reasonably necessary to properly administer our business / the Collaborative and/or to comply with law / regulations.
The following third parties may have access to your personal information:
Software providers – we use various software providers to enable us to administer our business, these providers include the providers of our email system, automated email mailing list system and the host of our website.
Event organisers – where we hold events we may need to share some of your personal information with third party organisers of the event, for example to put in place a guest list of ticket holders.
Regulators, government departments, law enforcement authorities, tax authorities, accountants, insurance companies, professional advisers, dispute resolution bodies or the courts – where necessary to comply with law or enforce or rights; and
Scottish Funding Council – we have certain reporting obligations to our funders.
Consultants - we may use third party consultants where we require specialist assistance to deliver our services and where these are required on a short term or ad hoc basis as opposed to services which we require on a long term basis and which will be carried out by our employees.
Persons in connection with any reorganisation of the Collaborative.
Some of these entities may also be data controllers but please contact us in the first instance if you have any questions.
6. European Economic Area
The information we collect from you may be stored inside the UK, the European Economic Area (“EEA”) or outside the EEA.
If you live or work outside of the EEA, we may need to transfer your personal information outside of the EEA to correspond with you. Where this applies, we will take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this privacy notice.
We may transfer personal information outside the EEA where our service providers host, process, or store personal information outside the EEA. Where this is the case we use contractual arrangements and safeguards to protect this personal information, these safeguards include:
The country to which the personal information will be transferred has been deemed to provide an adequate level of protection for personal information by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.
Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal information the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to non-EU countries.
Where we use providers based in the US, we may transfer personal information to them if they are part of the Privacy Shield which requires them to provide similar protection to personal information shared between the Europe and the US. For further details, see European Commission: EU-US Privacy Shield
Please contact us if you want further information on the specific mechanism used by us when transferring your personal information out of the EEA.
7. Your rights under data protection laws
All individuals have a number of rights under data protection laws. However, they do not apply in all circumstances.
If you wish to exercise any of them, please email us (details provided below) and we will explain at that time if they are applicable or not.
We will inform you in writing following receipt of your written request and if necessary, seek additional information from you about your request, including proof of identity.
The right to request access to your personal information, be informed about the processing of your personal information and receive a copy of the personal information we hold about you. We are obliged to respond to any such request within one month of receiving a request, subject to limited exceptions.
The right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed.
The right to object to processing of your personal information.
The right to restrict processing of your personal information.
The right to have your personal information erased (the “right to be forgotten”).
The right to move, copy or transfer your personal information (“data portability”).
The right to withdraw your consent to processing (if consent is relied upon by us to process the personal data).
Rights in relation to automated decision making which has a legal effect or otherwise significantly affects you.
At all times, you have the right to complain to the Information Commissioner’s Office which enforces data protection laws: https://ico.org.uk/.
8. Security
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted online or through the website. Any transmission is at your own risk. Once we have received your information, we use strict procedures and security features to try to prevent unauthorised access.
9. Contact details
Please help us keep our records updated by informing us of any changes to your e-mail address and other contact details.
If you have any questions about this privacy policy, including if you wish to exercise any of your rights, please contact us at info@thedatalab.com with the subject line “privacy policy”.
This privacy policy was last updated in June 2020.