Privacy Notice
1. Introduction
We are The Careers Research and Advisory Centre (CRAC) Ltd. CRAC is the non-profit organisation that manages the Vitae programme. Vitae is the global leader in supporting the professional development of researchers, experienced in working with institutions as they strive for research excellence, innovation and impact.
You can find more information about CRAC and the work that we do on our website: www.crac.org.uk.
CRAC is committed to protecting the personal information of all its contacts and being clear about what information we hold about them and how we use it. This privacy notice tells you what to expect when CRAC collects personal information.
CRAC is registered as a data controller with the Information Commissioner’s Office (ICO). Our registration number is Z1030346. You can check our registered details on the ICO’s website: https://ico.org.uk/about-the-ico/what-we-do/register-of-data-controllers/
2. Data controller and Data Protection Officer
CRAC is the “data controller” of any personal information collected within scope of this privacy notice. Our location and contact details are below:
The Careers Research and Advisory Centre (CRAC) Limited
22 Signet Court
Cambridge
CB5 8LA
Tel: 01223 460277
Email: dp@crac.org.uk
Our Data Protection Officer (DPO) is the first point of contact for people whose information is processed. Contact details for our DPO are as follows:
David Nightingale
IT Manager
The Careers Research and Advisory Centre (CRAC) Limited
22 Signet Court
Cambridge
CB5 8LA
Email: david.nightingale@crac.org.uk
Tel: 01223 460277
3. About the 'Scoping the path to leadership in Africa' project
The goal of the project is to support African research leaders to flourish in their environments, leading and creating vibrant research ecosystems.
The results of the study will be compiled into a report for The Welcome Trust and The Alliance for Accelerating Excellence in Science in Africa (AESA) and will contribute towards the production of guidance and training materials for use by African research institutes and universities in developing the next generation of research leaders.
In addition, it is expected that the findings will be published in peer reviewed journals. It is expected that the scoping work will ultimately support the capacity building capabilities for researchers within the African continent. Institutions will be able to use the recommendations in the report to benchmark future leadership development opportunities, such as secondments and mentorships, for their researchers and provide first-class training.
4. How we will use your information
- Your responses will be used purely to analyse views about the path to leadership in order to help to develop or improve leadership development in future
- Your responses will be kept confidential and will not be shared with any third parties (unless required by law)
- An evaluation report and academic publication will be drafted using the aggregated responses
- Responses will be retained for 2 years after completion of the project, which is scheduled to be December 2018
- If we want to use your personal information for a reason other than those purposes set out above, we will tell you before we start that use and provide further information about the new purpose(s)
5. Legal basis for using your personal information
Under data protection legislation, we require a legal basis to be able to process personal information for the purposes set out above.
In this case, the legal basis is:
- Consent
You can provide consent by completing and submitting the project consent form.
Withdrawl of consent
If you decide that you no longer want your survey data or personal information to be used you can opt-out at any time by emailing dataprotection@vitae.ac.uk with an instruction to be withdrawn from the project..
6. What personal information we will collect
The personal information we will collect and use is set out below:
- Name
- Email address
- Telephone number
- Gender
- Information about the type of institution your work at
- Information about your role at the institution
- Your opinion about the attributes required for research leadership roles
- Your opinion about the institutional structures and development programmes required to support people in research leadership roles
- Information about the provision of leadership programmes in your institution
7. Personal information we obtain from another source
Other than the personal information collected from you directly, we also obtain personal information about you from other sources, listed below:
- None
Purpose of obtaining personal information from other source(s)
- None
Legal basis for obtaining personal information from other source(s)
- None
8. Who we give your personal information to
Your personal information will be shared with the participating project organisations only; CRAC/Vitae, The Welcome Trust and The Alliance for Accelerating Excellence in Science in Africa (AESA). We will not routinely pass your information to any other organisation except where required to do so as part of our functions or by law.
9. Where your personal information will be stored
Your personal information is stored on Microsoft Office 365 business services. Microsoft will have access to your personal information for the purposes of providing the business services to us.
For more information about how Microsoft may process your personal information please see the information in the Microsoft Trust Centre:
www.microsoft.com/en-us/trustcenter/privacy.
There may be occasions where Microsoft transfers your personal information outside the European Economic Area (EEA), as set out in the privacy statements linked to above.
You should understand and agree that your personal information may be transferred to, and stored at, a destination outside the country and economic area in which you reside, and that it may also be processed by staff operating outside that country for the purposes set out in this Privacy Policy.
10. How we protect your personal information
CRAC has security measures in place to protect your personal information, listed below:
- All staff are required to undertake training in data protection and information security on joining CRAC and then on an annual basis
- Formal information security policies that must be read and understood by all staff
- Personal information is only available to those members of staff who require access as part of their role.
- We work with third-party data processors that are committed to full General Data Protection Regulations (GDPR) compliance.
https://www.microsoft.com/en-us/TrustCenter/Privacy/gdpr/default.aspx
11. Your rights over your personal information
Once your personal information has been collected, you have certain rights in relation to that personal information that may be exercised. You have the right to:
- Ask for a copy of your personal information
- Correct inaccurate personal information held about you
- Restrict processing of your personal information
- Ask for a copy of your information in a format that allows easy transfer (“data portability”)
- Object to automated decision making or profiling (if these take place)
- Where consent is the legal basis for collecting the information, you have the right to withdraw consent
- You can inform us at any time that you no longer wish us to use your survey information or personal details by emailing dataprotection@vitae.ac.uk.
If you have any questions, please email dataprotection@vitae.ac.uk.
12. How long we will hold your personal information
We are only able to retain a copy of your personal information as long as it is still needed for the purpose(s) for which it was collected. Your personal information will be kept for two years after completion of the project, which is scheduled to be December 2018.
13. Complaints about the use of your personal information
If a you are unhappy with the way in which your personal information has been handled by CRAC, you may contact us at: dp@crac.org.uk or via our Data Protection Officer (details in section 2) and we will try to resolve your issue informally.
If we have are not able to resolve the issue to your satisfaction, you can also make a complaint to the data protection supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO) and they can be contacted at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113
Email: casework@ico.org.uk
14. Changes to this privacy notice
We keep our privacy notices under regular review and we will inform you of any changes to this notice by placing an update on our the Vitae website.
This privacy notice was last updated on 24/09/18.