Data privacy notice for SHAPE survey
Introduction
The British Academy has commissioned the Careers Research & Advisory Centre (CRAC) to conduct a large-scale survey to explore themes of identity amongst SHAPE researchers and mobility/porosity within their careers.
As such the British Academy is the data controller and CRAC is acting as the data processor (as defined in data protection legislation) in respect of the personal data collected within the scope of this privacy notice. The British Academy’s approach to privacy and safeguarding of personal information can be found here: Privacy policy
2. Uses of your information
This is a survey study to gather views and insights on questions related to identity and mobility from across the SHAPE research community. Findings from the survey will be summarised in a report that we (CRAC) will write. CRAC will provide the British Academy an anonymised data set based on responses to the survey. The British Academy will conduct further analysis and invite individuals for further research opportunities, where individuals have specifically given their consent to be contacted by the British Academy for this purpose.
3. Legal basis for using your personal information
Under data protection legislation, a legal basis is required to be able to process your personal information for the purposes set out above. The collection and use of your personal information will be based on you providing your explicit consent.
Withdrawal of consent: Consent must be a clear positive action that you have given your agreement to the use of your personal information, and consent can also be withdrawn at any point if you are no longer happy with the use of your personal information for a specific reason. If you to wish to withdraw consent, please do so in writing to Dr Katja Jonsas katja.jonsas@crac.org.uk.
Once consent is withdrawn, we will destroy all relevant personal information unless we are relying on a different legal basis to justify keeping your personal information. If that is the case, we will tell you in writing. However, withdrawing your consent does not affect the lawfulness of processing based on consent before you withdrew it.
4. What personal information we will collect
Personal information that we may collect during the research could include the following:
• Age
• Gender
• Employer
• Current employment status, career stage and contract-type
• Geographic location
• Discipline and/or disciplinary background
• Email and name
These are only collected for background analysis and in some cases to derive project results for different groups. If you provide contact details they will only be shared with the British Academy if you have also consented to be contacted for further research by them.
5. Storage and sharing of personal information
Information supplied through the survey will be collected through SurveyMonkey. Their privacy notice can be found here: Privacy Notice
The information you submit will be compiled by CRAC but only anonymised data from the survey may be included in our research report. You will not be identifiable from any such outputs. We will not pass your information to any other organisation except where required to do so by law.
6. Your rights over your personal information
Once your personal information has been collected, you have certain rights in relation to that personal information that may be exercised. You have the right to:
• Request access to your personal information (and receive a copy of it)
• Request correction of any inaccurate personal information held about you
• Request for your personal information to be deleted
• Withdraw your consent for us to use your personal information
All these rights have certain limitations depending on the request and the purpose for which we are holding your personal information. To exercise any of these rights, in the first instance please contact Dr Katja Jonsas katja.jonsas@crac.org.uk.
7. How we protect your personal information
CRAC has a range of security measures to protect your personal information:
• All staff are required to undertake training in data protection and information security on joining the organisation and then on an annual basis;
• Formal information security policies that must be read and understood by all staff;
• Personal information is only available to those members of staff who require access as part of their role;
• Our information and data systems are accredited through the Cyber Essentials scheme and the ISO 27001 standard on information security.
8. How long we will hold your personal information
We are only able to retain your personal information for as long as it is needed for the purpose(s) for which it was collected. Personal information you have shared will be retained by CRAC no longer than one (1) calendar month after the completion of the contract between CRAC and the British Academy (expected to be ending 30 April 2024) and by the British Academy for approximately a further 12 months.
9. Complaints about the use of your personal information
If you are unhappy with the way in which your personal information has been handled, please contact us via katja.jonsas@crac.org.uk and we will try to resolve your issue. If we are not able to resolve the issue to your satisfaction, you can make a complaint to the data protection supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO) which can be contacted at:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113; Email: casework@ico.org.uk
10. Changes to this privacy notice
We keep our privacy notices under regular review, and we will inform you of any changes to this notice in writing.
This privacy notice was last updated on 25/01/2024
