Student surveys privacy notice

Purpose of the privacy notice

This privacy notice explains how UWE Bristol collects, manages and uses your personal data for the purpose of conducting surveys. ‘Personal data’ means any information relating to an identified or identifiable natural person (the data subject).

This privacy notice adheres to the General Data Protection Regulation (GDPR) principle of transparency. This means it gives information about:

  • how and why your data will be used
  • what your rights are under GDPR
  • how to contact UWE Bristol in relation to questions, concerns or exercising your rights regarding the use of your personal data.

Why are we processing your personal data?

Your personal data is being processed so we can better understand the student experience and make year-on-year comparisons and to identify improvements.

As a data controller we are committed to protecting the privacy and security of your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (or any successor legislation) and any other legislation directly relating to privacy laws that apply (together “the Data Protection Legislation”). General information on Data Protection law is available from the Information Commissioner’s Office.

How do we use your personal data?

We will only process your personal data when the law allows us to. In addition, we will always comply with UWE Bristol’s policies and procedures in processing your personal data.

Our lawful basis for using your personal data is for legitimate interests.

For particular surveys, where we may process your special category data, your participation is voluntary under the legal bases of consent and performance of a public task. You can withdraw your consent prior to the closing date of the survey without your responses being included in the dataset. You can withdraw your consent by contacting studentsurveys@uwe.ac.uk.

Find out more about lawful bases

We will always tell you about the information we wish to collect from you and how we will use it. Your information will not be used for automated decision-making or profiling and will not be transferred to another country that is either outside the UK or European Economic Area or not deemed as providing adequate data protection by the European Commission.

What data do we collect?

Personal data that our surveys may process includes:

  • first name
  • second name
  • email address
  • student ID number
  • student username
  • age
  • sex
  • date of birth
  • gender
  • ethnicity
  • disability
  • fee status
  • name of the course(s) you’re registered on
  • study mode
  • level of study
  • College name
  • School name
  • Campus of study
  • any information you provide as part of the survey.

Who do we share your data with?

Responses collected through our student experience surveys can be stored by Jisc or Microsoft (data processors), on behalf of UWE Bristol.

For particular surveys, Jisc may share the survey responses with Advance HE (a data processor). Advance HE will use the data collected from the survey to support your institution and produce national reports. Data will be securely stored by Advance HE for as long as it is retained on behalf of your institution. You will not be identified in any report produced by Advance HE. Where these organisations use any subprocessors to process your data, appropriate contractual obligations are in place to ensure your data is secure.

All participating institutions have agreed not to identify any individuals when reporting their results both internally and externally, and to use their best efforts to ensure that no individuals can be identified by implication. The full data set will be available to Advance HE in order to conduct national-level research and analysis.

The data from the surveys will be published internally for enhancement purposes only. The data will be reported anonymously and will only be published if a minimum of ten responses have been obtained from the reporting group. This is the publication threshold and is there to protect the identities of students that have completed the surveys.

How do we keep your data secure?

We take a robust approach to protecting your information with secure electronic and physical storage areas for data with controlled access. Access to your personal data is strictly controlled on a need-to-know basis and data is stored and transmitted securely using methods such as encryption and access controls for physical records where appropriate.

Alongside these technical measures, there are comprehensive and effective policies and processes in place to ensure that those who process your personal information are aware of their obligations and responsibilities for the data they have access to.

By default, people are only granted access to the information they require to perform their duties. Mandatory data protection and information security training is provided to staff and expert advice is available if needed.

How long do we keep your data for?

We will only retain your personal data for as long as we need it to carry out the purposes in this notice.

Please see our University Records Management Policy and Records Retention Schedules for more detailed information. These are available by contacting the Data Protection Office at dataprotection@uwe.ac.uk.

Your rights and how to exercise them

Under the Data Protection legislation, you have the following qualified rights:

  • The right to access your personal data held by or on behalf of the University
  • The right to rectification if the information is inaccurate or incomplete
  • The right to restrict processing and/or erasure of your personal data
  • The right to data portability
  • The right to object to processing
  • The right to object to automated decision-making and profiling
  • The right to complain to the Information Commissioner’s Office (ICO).

To protect your privacy and the privacy of others, we will verify your identity before giving effect to your rights. To exercise any of your rights please contact the Data Protection Office at dataprotection@uwe.ac.uk.

Contact us

We will always respond to concerns or queries you may have. If you wish to exercise your rights or have any other general data protection queries, please contact the Data Protection Office at dataprotection@uwe.ac.uk.

For further information related to student surveys ran at UWE Bristol , please contact the Student Voice and Academic Policy Team at studentsurveys@uwe.ac.uk.