1.0 Data protection
1.3 For the purposes of GDPR, The Department for Education whose head office is at Sanctuary Buildings, Great Smith Street, London, SW1P 3BT (DfE), the UCL Institute of Education, University College London, 20 Bedford Way, London WC1H 0AL (UCL) are each Data Controllers of the information that the Programme’s website collects from users, or users provide to it.
1.4 By visiting, registering with, accessing or contributing to any features of the Programme’s website users consent to the collection, use and transfer of their information under the terms of this policy.
1.5 Any changes to this policy will be posted to the website. Please check regularly for updates.
2.0 Collection of information
2.1 The Programme may collect and process the following data about users:
Information users provide: Users may provide information about themselves by filling in forms on the Programme website, by corresponding with the Programme by phone, e-mail or otherwise. This includes information users provide when registering to use the Programme’s website, registering for a Programme tour or CPD training, posting to discussion forums, blogs, wikis or any other social media functions on the Programme website and where a user reports a problem with the website. The information users provide may include their name, address, e-mail address, phone number, financial information, photograph and/or personal description.
4.0 Use and disclosure of users’ information
4.1 The Programme may share the user’s information with:
4.2 The Programme may also use the user’s information that it collects and that users provide to:
- notify users of important changes or developments to the Programme or to the website.
- to ensure that the content of the website is presented in the most effective manner for the user and for the user’s computer.
- to administer the Programme’s website for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.
- to improve the Programme’s website to ensure that content is presented in the most effective manner for the user and the user’s computer.
- to allow the user to participate in interactive features of the Programme’s website, when the user chooses to do so.
- as part of the Programme’s efforts to keep the Programme’s website safe and secure.
4.3 The Programme, DfE, UCL and/or Equity may contact users by post, telephone or text message, as well as by e-mail.
4.4 If users no longer wish the Programme, DfE and UCL to contact them, they should inform the Programme, DfE and UCL. Users have the right to ask the Programme, DfE and UCL to stop processing their personal data for direct marketing purposes at any time by contacting the Programme at the address in section 10 below.
5.0 Disclosure of users’ information
5.1 Unless required to do so by law or as otherwise specified in this policy, the Programme will not otherwise share, sell or distribute any of the information users provide to it, or it collects, without their consent, except for the sharing of information between the DfE and UCL in connection with the Programme.
6.0 Storage of users’ information
6.1 The information the Programme collects from users and that users provide to it, will be held on the Programme’s UK secure servers.
6.2 The Programme employs security measures to protect users' information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage. The Programme will retain users' information for a reasonable period or as long as the law requires.
6.3 Unfortunately, the transmission of information via the internet is not completely secure. Although the Programme does its best to protect users' personal data, it cannot guarantee the security of users' data transmitted to this website; any transmission is at the users' own risk. Once the Programme has received users' information, it will use strict procedures and security features to try to prevent unauthorised access to this information.
7.0 Information about other individuals
7.1 If a user gives the Programme information on behalf of a third party, the user confirms that the other person has appointed the user to act on his/her behalf and has agreed that the user can give consent on their behalf to the processing of their data and can receive on their behalf any data protection notices (if appropriate).
8.1 The Programme and the Data Controllers are not responsible for the privacy and data protection practices of other websites which may be reached through links contained in the Programme’s website. Users should be aware when they leave the Programme’s website and move into any linked website and should read the privacy and data protection policies and statements contained on any such linked website.
9.0 Accessing and updating
9.1 Users are entitled to see the information held about them by each Data Controller and they may ask the relevant Data Controller to make any necessary changes so that it is accurate and up to date. The Data Controller is entitled by law to charge a fee of £10 to meet its costs in providing users with details of the information it holds about them. For more information please contact the Programme at the address in section 10 below.
10.1 All comments, queries and requests relating to the Programme’s use of users' information are welcomed and should be addressed to: firstname.lastname@example.org or The First World War Centenary Battlefield Tours Programme, c/o UCL Institute of Education, University College London, 20 Bedford Way, London WC1H