In line with the new EU General Data Protection Regulation (GDPR), there are certain things that we need to let you, a research participant, know about how your information will be processed. In this privacy notice, we explain the legal basis for data processing, who will have access to your personal data, how your data will be used, stored and deleted, and who you can contact with a query or a complaint.
What is the legal basis for processing my data?
The National Centre for Social Research (NatCen) is the data controller and data processor for this project. This means that we are responsible for deciding the purpose and legal basis for processing data. For this project, the legal basis for processing data is “legitimate interest”.
You can contact NatCen with any questions about the research at FitToStudy@natcen.ac.uk.
Who will have access to my personal data?
NatCen are carrying out this research and will have access to pupil, school and teacher information, recordings of interviews, transcripts, charted data, sample files (including contact details), survey responses and anonymised test results. All responses are anonymised before being analysed and archived.
Academics from the University of Oxford and Oxford-Brookes University, who are conducting some separate research, will also have access to pupil, school and teacher information.
McGowan Transcriptions is the transcription service we use to transcribe our interview and focus group data. They will have had access to recordings and transcriptions from all interviews and focus groups. McGowan Transcriptions is on our approved supplier list and compliant with all of our information security policies.
Formara Print+ is the printing company we use to print our materials. They will have had access to pupil names, dates of birth and UPNs for printing pupils lists and test paper labels. Formara Print+ is on our approved supplier list and compliant with all of our information security policies.
GL Assessment is the provider of the test papers we use on testing projects. They will have access to pupil names, dates of birth and UPNs for marking test papers. GL Assessment is on our approved supplier list and compliant with all of our information security policies.
How will my data be treated?
The results collected are used for research purposes only. Data gathered from interviews and surveys with teachers will be used to inform the process study element of the project, while pupil data and test results will be used for the impact study element.
At the end of the research, all pupil data will be anonymised before being archived. All personal information, and any other data held on the project, will be securely deleted once the project is complete in July 2019.
What are my rights?
- The right to be informed – You have the right to know about the purpose of this research. This is covered by this Privacy Notice, which has been sent out to all schools participating in this research, and our study page.
- The right of access – You have the right to see the data held about you on this project. Written or verbal requests to access the data held about you on this project will be replied to within one month.
- The right of rectification – You have the right to have inaccurate personal data rectified, or completed if it is incomplete. Written or verbal requests will be replied to within one month.
- The right to erasure – You have the right to have personal data deleted. Written or verbal requests will be replied to within one month. The right is not absolute and only applies in certain circumstances, for example, at the end of this project we will have no further need for your personal data and it will be securely deleted.
- The right to restrict processing – This is an alternative to the right to erasure. The right is not absolute and only applies in certain circumstances, for example, when a request is made to verify the accuracy of any personal information held about you the right to restrict further processing may be applied.
- The right to object – You have the right to object to the processing of your personal data. This right is not absolute and only applies in certain circumstances.
- Rights in relation to automated decision making and profiling – This project involved no automated individual decision-making or profiling.
More information on your rights under the General Data Protection Regulation (GDPR) can be found on the ICO's website.
Who can I contact with a query or a complaint?
If you have any questions about how your data will be used, please contact the NatCen’s Data Protection Officer, Emmanuel Ogungbe, at Emmanuel.Ogungbe@natcen.ac.uk.
Under GDPR, you have the right to lodge a complaint with the Information Commissioner’s Office. Please go to www.ico.org.uk for more information.