Privacy Notice and Cookies | Liverpool John Moores University

How to contact the Data Protection Officer

The Data Protection Officer advises the University on how to comply with data protection legislation and manages and coordinates requests made under the GDPR.

Email: [email protected]

Data Protection and Information Officer
Legal and governance services
Interchange Station, 2nd Floor, Tithebarn Street
liverpool
L2 2QP

Telephone: 0151 904 6134

What information do we collect?

LJMU is made up of many schools and departments and we collect a wide range of information for different purposes. For example: personal data will be collected by LJMU whenever you apply for a course or job or when you request information from us. Personal data is all information that refers to a living and identifiable person. This could be your name, contact details, academic records or details from your medical records.

The type of personal data we collect will be tailored to your interaction with us, whether as a student, staff member or visitor.

Why do we collect your data and what is the legal basis for this?

LJMU will collect personal data from you for many reasons and will do so at all times in accordance with the principles of the GDPR.

As a public body, the most common reasons we process personal data are:

• to carry out our official public duties of providing education and conducting research and
• comply with our legal and regulatory obligations

The legal basis for data processing is set out in each of the specific privacy notices.

Who has access to this data?

Your personal data will only be used by relevant LJMU personnel when the data is necessary for them to perform their designated role. We may also lawfully share information with third parties such as:

• The student loan company

• Higher Education Statistics Agency (HESA)
• Media
• Police
• Software providers we use or event organizers

Details of who we share data with are set out in each of the specific privacy notices.

How does the University protect your data?

The University takes data protection very seriously. For services provided locally by Information Services, information is stored on servers located in secure University data centers. These data centers are resilient and have secure access controls, environmental monitoring, backup power and redundant hardware. The information on these servers is regularly backed up and uses a wide range of technologies to ensure that data security is continuously handled to high professional standards. All Liverpool John Moores University staff who have access to your information have received data protection training. We only use third party systems to store and process your data for which we have carried out a risk assessment exercise to ensure the security of your data.

How long does the University keep your data?

We will only retain your information for as long as we need it and in accordance with our records retention schedule. When we no longer need the information, we will dispose of it securely.

your rights

As a data subject, you have a number of rights. You can:

• access and obtain a copy of your data upon request (this could be in a portable electronic format)
• require the University to amend incorrect or incomplete data if you believe it is inaccurate or out of date
• ask the University to delete or stop processing your data, for example when the data is no longer necessary or legally required for the purposes of the processing

If your personal data has been provided with your consent, you have the right to withdraw that consent at any time.

If you wish to exercise any of these rights, please contact the Data Protection Officer: [email protected].

Data transfers outside the UK

As a general rule, we do not send your personal data outside of the UK. However, in some specific cases we may transfer the personal data we collect to countries outside the UK in order to perform our contract with you/or a contract with another organization which requires your personal data, this is i.e. a collaboration agreement with a university based outside Great Britain. In this case, we will ensure that your personal information is protected by means of an “adequacy regulation” with the United Kingdom or by putting in place suitable alternative measures to ensure that your personal information is processed by these third parties in a way that complies with and complies with UK data protection laws. For example, standard contractual clauses, data sharing/processing agreement and binding corporate rules (if applicable).

Automated decision making

We will not make decisions about you automatically using a computer, based on your personal data. All decisions about you will be made by a human.