Author AM – Data Controller
Reviewed – 11 November 2018
Date of next review 11 November 2019
Agile Research is committed to respecting privacy and safeguarding personal information in line with current legislation.
This notice sets out how we look after the personal information of the people we research with.
We only collect information for specific reasons e.g. organising sessions. We are careful not to collect or store personal information unnecessarily.
Defining personal data
Personal data relates to a living individual who can be identified from that data e.g. a photograph. The processing of personal data is governed by the General Data Protection Regulation (GDPR).
The Data Controller
Agile Research has a nominated data controller who decides how your personal data is processed and for what purposes. Any data queries about personal data should be addressed to them using the information at the bottom of this policy.
How we process and use personal data
Agile Research –
- Checks personal data annually by email or telephone call to ensure the data is accurate and if the person would like to remain on our records.
- Stores data in Google cloud services, which complies with GDPR
- Never shares personal data with third parties other than those specified in this policy
- Deletes data upon request or if the person has twice not responded to being contacted e.g. from the annual review
We use anonymous, personal data to: –
- Administer and conduct research – (individuals are referred to by a coded ref e.g. “RIN”)
- Advertise and market (additional, specific written consent is obtained for these purposes)
- Maintain our records
- Inform potential participants of research activities, and to survey with participants
Online – Google Analytics and Cookies
Agile Research uses third party services e.g Google Analytics and Hotjar, to track and collect visitor behaviour to our website and internet use relating to research. Both use cookie technology. This data is anonymous and does not allow us to identify specific people.
When you sign up to our social media feeds e.g. LinkedIn page, we do not collect any personal details and your activity is subject to the provider’s policies.
Sharing your personal data
We do not share personal data that could identify individuals with third parties except for images used in reports or for marketing purposes. And before we do that, we’ll first obtain specific, informed consent from you.
How long do we keep personal data?
We record when personal records are added to our database and annually review all records to ensure data is accurate and not retained indefinitely.
Your rights and your personal data
You have the following rights with respect to your personal data: –
- The right to request a copy of the personal data which we hold about you
- The right to request that we correct any personal data if it is found to be inaccurate or out of date
- The right to withdraw your consent to us using your data at any time
- The right to request your personal data is erased where it is no longer necessary for us to retain such data
- The right to request that the data controller provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller (known as the right to data portability)
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing
- The right to lodge a complaint with the Information Commissioners Office
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will publish a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.
Before using or processing personal data differently to how you have already consented to it being used, we will seek your consent.
Communicating with Agile Research – phone and email
We use Transport Layer Security (TLS) to encrypt and protect email traffic in line with government guidelines. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit.
We do not record telephone calls other than those which go to voicemail.
How to contact us
Tel: 07966 329792
Or write to The Data Controller, Agile Research, Studio 212, 37 Queen St, Colchester, Essex, CO1 2PQ.
You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AY