This is the privacy statement of the Students’ Union, Queen Margaret University (QMUSU). QMUSU is a Data Controller in terms of the Data Protection Act 1998 (DPA) and the General Data Protection Regulations.
We process personal information to enable us to provide education and support services to our students and staff; advertising and promoting the students’ Union and the services we offer; providing and supporting student activities, undertaking research and fundraising; managing our accounts and records and providing commercial activities to our clients.
When you register as a supplier or contractor with us, we will ask you provide us with certain personal data so that we can meet our legal and contractual obligations, organisation policy requirements, communicate efficiently, raise or pay invoices and ensure you receive the services required.
In registering as a supplier we will ask you to provide us with the following personal information:
In general terms, we collect and use your personal information to:
Our employees and volunteers may need to use information about you in order to provide goods and services to you and for the purposes of administration.
Third party organisations that provide applications/functionality, data processing, IT services to us, or who manage our media and advertising.
We only retain your personal information for as long as is necessary to do business with you or to meet any legal obligations.
Access to your information – You have the right to request a copy of the personal information about you that we hold.
Correcting your information – We want to make sure that your personal information is accurate, complete and up to date and you may ask us to correct any personal information about you that you believe does not meet these standards.
Deletion of your information – You have the right to ask us to delete personal information about you where:
Objecting to how we may use your information – You have the right at any time to require us to stop using your personal information for direct marketing purposes. In addition, where we use your personal information to perform tasks carried out in the public interest or pursuant to the legitimate interests of us or a third party then, if you ask us to, we will stop using that personal information unless there are overriding legitimate grounds to continue.
Restricting how we may use your information – in some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to our use of your information. The right might also apply where this is no longer a basis for using your personal information but you don't want us to delete the data. Where this right to validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.
Portability – if we process personal information that you provide to us on the basis of consent or because it is necessary for the performance of a contract to which you are party, and in either case that processing is carried out by automated means, then you have the right to have that personal information transmitted to you in a machine readable format. Where technically feasible, you also have the right to have that personal information transmitted directly to another controller.
Automated processing – if we use your personal information on an automated basis to make decisions which significantly affect you, you have the right to ask that the decision be reviewed by an individual to whom you may make representations and contest the decision. This right only applies where we use your information with your consent or as part of a contractual relationship with you
Withdrawing consent using your information – Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given.
We will publish any changes we make to this data protection policy on our website (www.qmusu.org.uk).
If you are not happy to agree to the processing of your personal information as described above please contact the General Manager of the Students’ Union.
You can do this by email: ddoyle@qmu.ac.uk; telephone: 0131 474 0000 or post:
The Chief Executive Officer
The Students’ Union
Queen Margaret University
Queen Margaret University Drive
Musselburgh
EH21 6UU
If you have any issues about this statement or the way QMUSU has handled your personal information please contact the Chief Executive Officer in the first instance. If you are dissatisfied with the response from QMUSU you have the right to lodge a complaint with the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
email: casework@ico.org.uk;
telephone: 0303 123 1113
Registered address: The Students' Union, Queen Margaret University, Edinburgh, EH21 6UU
Telephone: 0131 474 0170
Email: union@qmu.ac.uk