1. Purpose of this notice

This notice tells you how the University of Leeds will collect and process your personal data when you access this website.

We will not use your personal data in any manner that is incompatible with the purpose for which the data were collected originally, unless we have obtained your consent to that additional use.

Anything you are not clear about

If there is anything you are unclear about, please contact our Data Protection Officer, who shall be happy to answer any queries you may have concerning this Notice or the way in which we process your personal data.

The Data Protection Officer’s contact details are provided at the end of this Notice.

2. Automated collection of personal information

As with most other web servers, when you access these web pages certain information your browser provides may be automatically recorded by the University of Leeds. This will include your IP address, browser type, and information relating to the page you last visited. This data may be used to aid detection in the event of a security breach. The legal basis for this processing is necessity to pursue our legitimate interests to keep our website secure.

3. Non-automated collection

Where you are required under this website to provide personal data the uses of this data will be indicated at the point of collection.

4. Third-party access

Your personal data that you have provided will not routinely be sent to other third-parties (unless notified - see 3. above).

5. Data retention

Valuing Culture has been developed as part of a national research project based at the University of Leeds. By signing up to this website and uploading stories and images you will be sharing information with the University of Leeds research team that will be used to explore the value of culture and creativity to people’s lives and communities during the Covid-19 Pandemic.

The content of stories, related uploads or annotations is data that is retained indefinitely by the website. Users may edit or remove the data fully at any time and also delete their account, which will also delete any related story data.

Only stories which are published publicly will be used in the research project. If users withdraw from the site, any information we have obtained from you up until that point will be removed from our analysis and deleted or destroyed (where possible). Please refer to the Terms and Conditions and Informed Consent pages of the website for further details.

6. Cookies

Cookies are small text files that are placed on your device by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

This website uses first party cookies which are set by our web server as opposed to a different web server. They are categorised as strictly necessary, which are essential to the operation of the website, and performance cookies which collect anonymous information about the usage of our website. By using our website you agree that we can place these types of cookies on your device.

We do not use cookies to collect personal information about you. Should you wish to restrict or block cookies which are set by our website you can do this through your browser settings. Please refer to this resource to learn how to manage your cookies. Please be aware that restricting cookies may impact on the functionality of our website.

The table below explains the cookies we use and why:

Cookie Name Purpose Further Information
Google Analytics
__utma
__utmb
__utmc
__utmv
__utmz
These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.

Google privacy policy

Google analytics

Google analytics terms of service

NetScaler appliance
NSC* These cookies are set by our Citrix NetScaler appliance and are used to ensure your browsing session remains on the same web server
Citrix
PHP session
PHPSESSID This cookie stores a unique ID assigned by the web server. It is used to enable some site functionality to work properly.
PHP information
Test cookie
TestCookie This is set by our Jadu CMS and is used to determine whether or not your browser allows cookies to be set

7. University Code of Practice

The University's Data Protection Code of Practice also applies to the use of personal data under this website. The Code can be accessed at https://dataprotection.leeds.ac.uk/

8. Changes to this notice

This notice and therefore the ways in which your data may be processed can be changed from time to time. Any changes will only be notified via this web page.

9. Further information and Contact

If you have any queries relating to this privacy notice or the way your data is being processed through this website then please contact webcomms@leeds.ac.uk. If you are dissatisfied with their response please contact the University Webmaster, webmaster@leeds.ac.uk.

10. Your rights as a data subject

Under the GDPR, in certain circumstances, you have the right to:

  • withdraw your consent to our processing of your personal data where that is the legal basis for such processing
  • access any of your personal data which we hold
  • have your personal data which we hold corrected if it is inaccurate
  • have any of your personal data which we hold erased
  • restrict the ways in which we process your personal data
  • object to our processing of your personal data
  • receive a copy of any of your personal data which we hold in a structured and commonly used machine-readable format
  • in certain cases not be subject to a decision based solely on automated decision making
  • lodge a complaint with a supervisory authority

11. Queries and complaints

If you have any queries or concerns relating to this privacy notice or the way your data is being processed through this website then please contact the University’s Data Protection Officer, on dpo@leeds.ac.uk

The UK’s regulator for the DPA and GDPR is the Information Commissioner’s Office (ICO). The University is registered as a Data Controller with the ICO.

Should you be dissatisfied with our handling of your concerns you have the right to complain to a supervisory authority. In the case of the UK this is the Information Commissioner’s Office and details can be found at ico.org.uk.