-
-
Privacy Policy
-
PRIVACY NOTICE
PRIVACY NOTICE – CLICK & COLLECT SERVICE
|
Privacy Notice
|
|
This privacy notice explains your personal information will be used and your rights under data protection legislation. Please take time to read it prior to providing your information.
|
|
Who we are
|
|
The University of Strathclyde is the organisation responsible for your personal data in terms of data protection legislation (the data controller).
If you have any questions regarding the handling of your personal data, or your rights, please contact the University’s Data Protection Officer at dataprotection@strath.ac.uk
|
|
Information we collect and use about you
|
|
We use your personal data for the purpose of managing the catering outlets’ click & collect services. This includes any personal information you provide when setting up your account and also payment card details.
|
|
Why we require this information and our lawful basis
|
|
We use your personal data to prepare, administer and manage your order for food/drink.
We process your information on the basis that it is necessary to fulfil a contract of sale with you.
|
|
Who we share your personal information with
|
|
We will share your data with a third-party supplier MCR who will manage the mobile ordering and payment side via their secure portal on behalf of the University.
The University does not have access to your payment card data.
|
|
How long your information is retained
|
|
Your account information will remain ‘live’ for a period of 24 months from your last transaction. After this period it will be anonymised.
|
|
Your rights
|
|
Under data protection legislation, you have a number of rights* including the right to:
- withdraw consent, at any time, where that is the lawful basis of our processing;
- access your personal data and obtain a copy, free of charge;
- rectify inaccuracies in personal data that we hold about you;
- erasure, that is have your details removed from systems that we use to process your personal data;
- restrict the processing in certain ways;
- obtain a portable copy of data you have given to us in a commonly used electronic form; and
- object to certain processing of your personal data by us.
*Please note that the ability to exercise these rights will vary and depend on the lawful basis under which the processing is being carried out.
Please contact dataprotection@strath.ac.uk if you wish to exercise/enquire about any of these rights.
|
|
Complaints
|
|
If you wish to make a complaint about how we have handled your personal data, you can contact the Data Protection Officer at dataprotection@strath.ac.uk.
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you also have the right to complain to the Information Commissioner’s Office (https://ico.org.uk/concerns/).
|
|