Privacy notice for the Bodleian MSD libraries - Diversifying the Collection survey
We (the University of Oxford) are the ‘data controller’ for the information you provide, which means we decide how to use it and are responsible for looking after it in accordance with the General Data Protection Regulation and associated UK data protection legislation.
How we use your data
We are carrying out this survey to gather input from students and staff across the division on publications and materials the Bodleian MSD libraries can acquire to consciously diversify their collection. In order to meet these aims, we will ask you to provide one item of personal data – your role as this will help us understand your role in the division. The University will not collect any personal identifiers such as name or contact details and cannot track who has completed the survey and who hasn’t.
The survey includes optional free text questions which ask for the publication name, author/s, key words plus one question which asks for the reason for the nomination to help inform decision making around acquisition. Any comments will be reviewed in detail to ensure no personal data about the respondent is included before they are shared with the Library curators. The survey administrator will review all comments and redact any identifying details. Please have a care when responding to these questions to not identify yourself.
The lawful basis on which we process your personal data is consent under article 6(1)(a) of the General Data Protection Regulation. You are not obliged to take part in the survey or to answer all the questions so if you choose to submit a response, we take that to mean you have consented to us processing your personal data. The online survey provider records the date and time of your submission but not your name, email or IP address.
We will only use your data for the purposes for which we collected it.
Who has access to your data?
This survey is being carried out on behalf of the Bodleian MSD libraries. The survey administrator will process the raw data to ensure individuals cannot be identified before sharing the results with staff in the Bodleian. If you have any concerns about the anonymization process please contact the survey administrator
The data in this survey is being collected using a service from Jisc (Online surveys). The University has a licence agreement to use this service.
Retaining your data
We will retain your data for 6 months. The raw data will be processed to make it impossible to identify individual respondents before it is shared with staff in the Bodlein.
Your data will be held securely in accordance with the University’s policies and procedures. Further information is available on the University’s Information Security website. Third parties that process data on our behalf will do so only on our instructions and where they have agreed to keep it secure.
Where we store and use your data
We store and use your data on University premises in electronic format. The University has an institutional contract with Online surveys (part of Jisc). All survey data are collected over encrypted SSL connections and stored securely on Jisc servers in compliance with UK data protection laws. Only the Survey Administrator in the Medical Sciences Divisional Offices have access to the survey account.
All data that is transferred within the University will be password-protected and shared securely via OneDrive. No data will be transferred outside the EEA. All survey data is stored securely on Amazon Web Services servers in the Republic of Ireland.
You can withdraw your consent to the processing of your survey data at any time by contacting survey administrator. If we can identify your response, we will delete it from the dataset and stop processing it from that point onwards. You will have to provide some information about your response (e.g. day of submission, demographic data or elements of your free text comments) to help us identify it. We may not be able to remove your data if it has already been processed in such a way as to make it no longer identifiable.
If you wish to ask any questions about our use of your personal information please contact us via the survey administrator
If you want to exercise any of the rights described in the above link or are dissatisfied with the way we have used your information, you should contact the University’s Information Compliance team.