Vitae updates privacy notice
Vitae Updates Privacy Notice
1. Introduction
We are a non-profit programme, part of the Careers Research & Advisory Centre (CRAC) Ltd with nearly 50 years’ experience of enhancing the skills and careers of researchers.
CRAC is a registered charity No 313164 established in 1964.
You can find more information about CRAC and the work that we do on our website: www.crac.org.uk.
CRAC is committed to protecting the personal information of all its contacts and being clear about what information we hold and how we use it. This privacy notice tells you what to expect when CRAC collects personal information.
CRAC is registered as a data controller with the Information Commissioner’s Office (ICO). Our registration number is Z1030346. You can check our registered details on the ICO’s website: https://ico.org.uk/about-the-ico/what-we-do/register-of-data-controllers/.
CRAC is ISO 27001 and Cyber Essentials certified.
2. Data Controller and Data Protection Officer
CRAC is the Data Controller of any personal information collected within scope of this privacy notice. Our location and contact details are below:
The Careers Research and Advisory Centre (CRAC) Limited
22 Signet Court
Cambridge
CB5 8LA
Tel: 01223 448500
Email: data.protection@crac.org.uk>
Our Data Protection Officer (DPO) is the first point of contact for people whose information is processed. Contact details for our DPO are as follows:
Data Protection Office
The Careers Research and Advisory Centre (CRAC) Limited
22 Signet Court
Cambridge
CB5 8LA
Email: data.protection@crac.org.uk
Tel: 01223 448500
3. How we use your personal information
We can only use your personal information where we have legitimate reasons for doing so and have told you what those reasons are.
To achieve the above aims, the specific uses that will be made of your personal information are listed below:
- When you register on the Vitae website and select the ‘I would like to receive Vitae updates and information’, or if you email us requesting updates, you are added to the Vitae Newsletter mailing list and will continue to receive the Vitae Newsletter and email updates until you unsubscribe by clicking on the ‘Unsubscribe’ link in the footer of an email. You can also unsubscribe by emailing ‘data.protection@vitae.ac.uk’ with an instruction to be unsubscribed from Vitae communications.
4. Legal basis for using your personal information
Under data protection legislation, we require a legal basis to be able to process personal information for the purposes set out above.
In this case, the legal basis is:
- Data Subject consent is provided by newsletter and update recipients.
You can provide consent by registering on the Vitae website and selecting the ‘I would like to receive Vitae updates and information’ option on the registration form or by email us requesting the updates. If you are registered on the Vitae website and are not receiving the Vitae Newsletter and updates because you did not opt-in when you first registered, you can opt-in by emailing updates@vitae.ac.uk and asking to receive the newsletter and updates.
Withdrawal of consent
Consent can be withdrawn at any point if you no longer want to receive the Vitae Newsletter and updates. Unsubscribe by clicking on the ‘Unsubscribe’ link in the footer of an email. You can also unsubscribe by emailing ‘data.protection@vitae.ac.uk’ with an instruction to be unsubscribed from Vitae communications.
For more information about how Vitae processes your personal information, please write to:
Data Protection Officer
The Careers Research and Advisory Centre (CRAC) Limited
22 Signet Court
Cambridge
CB5 8LA
data.protection@vitae.ac.uk
data.protection@crac.org.uk
- 5. What personal information we will collect
The personal information we collect when you register on the Vitae website is set out below:
- Email Address
- A description of your role at your organisation
- Whether or not you would like to receive the Vitae updates emails
Once you are registered on the Vitae website, you have the option to provide the following information by completing your website profile:
- Title
- Name
- Job Title
- Alternative email address
- Photograph
- Information about yourself
- List of your skills and interests
6. Personal information we obtain from another source
Other than the personal information collected from you directly, we also obtain personal information about them from other sources, listed below:
- None
Purpose of obtaining personal information from other source(s)
- None
Legal basis for obtaining personal information from other source(s)
- None
7. Who we give your personal information to
We will not routinely pass your information to any other organisation except where required to do so as part of our functions or by law.
8. Where your personal information will be stored
Your personal information is stored on Dotdigital and Microsoft Azure business services. Dot Digital and Microsoft, acting a data processors, will have access to your personal information for the purposes of providing the business services to us, acting as the Data Controller.
For more information about how Dotdigital may process your personal information please see the Dotdigital Privacy Policy:
https://dotdigital.com/terms/privacy-policy/
https://support.dotdigital.com/en/articles/8199473-gdpr-faq
For more information about how Microsoft may process your personal information please see the information in the Microsoft Trust Centre:
www.microsoft.com/en-us/trustcenter/privacy.
9. How do we protect your personal information
CRAC has a number of security measures in place to protect your personal information, listed below:
- All staff are required to undertake training in data protection and information security on joining CRAC and then on an annual basis
- Formal information security policies that must be read and understood by all staff
- Personal information is only available to those members of staff who require access as part of their role.
10. Your rights over your personal information
Once your personal information has been collected, you have certain rights in relation to that personal information that may be exercised. You have the right to:
- Ask for a copy of your personal information
- Correct inaccurate personal information held about you
- Ask for your personal information to be deleted (within 30 days)
- Restrict processing of your personal information
- Ask for a copy of their information in a format that allows easy transfer (“data portability”)
- Object to automated decision making or profiling (if these take place)
Further information can be found about these rights and our processes for handling such requests at: https://www.vitae.ac.uk/policies/privacy-policy
11. How long we will hold your personal information
We are only able to retain a copy of your personal information as long as it is still needed for the purpose(s) for which it was collected. Your personal information will be kept on our system in order to manage your mailing preference and website profile until you request that this information is removed as described in Section 4 above.
13. Complaints about the use of your personal information
If you are unhappy with the way in which their personal information has been handled by CRAC, you may contact us at: data.protection@crac.org.uk or via our Data Protection Officer (details in section 2) and we will try to resolve your issue informally.
If we are not able to resolve the issue to your satisfaction, you can also make a complaint to the data protection supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO) and they can be contacted at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113
Email: casework@ico.org.uk
14. Changes to this privacy notice
We keep our privacy notices under regular review and we will inform you of any changes to this notice by placing an update in our Vitae Newsletter.
This privacy notice was last updated on 10/07/2024