Consumer Data Research Centre (CDRC)
University College London (UCL)
Department of Geography
London WC1E 6BT
UCL Centre Director: Professor Paul Longley
1.1. The Consumer Data Research Centre is a multi-institutional centre (University College London, Universities of Liverpool, Oxford and Leeds) providing access to consumer data through a three-tier data service – Open, Safeguarded and Secure data.cdrc.ac.uk. The Open tier is accessible by all and data can be downloaded for any purpose following a simple registration process. Access to data from the Safeguarded and Secure Tiers is restricted to the purpose of social science research for the benefit of society and follows a reviewed application process.
1.2. The CDRC are committed to safeguarding the privacy of our CDRC Service Users. In this policy we as data controllers explain how we collect, safeguard and use your personal data.
1.3. This policy relates to the use of CDRC Service Users personal data only and does not include research data made available through the service.
2.0. What information will we collect about you
2.1. Open Tier: personal details including name and email that you provide when registering to download data. We also record which datasets you download and when.
2.2. Safeguarded and Secure Tier: personal details including contact details for you and your research team, information about your research, ethical approval and safe researcher training. We may also collect information about your IP address in the case of applications for specific products, and in the case of applicants to the UCL JDI Research Lab Baseline Personnel Security Standard (BPSS) checks.
2.3. On registering for all tiers of the service Users are asked whether they would like to receive the CDRC Newsletter and other information from the CDRC.
2.4. Contact information from those attending CDRC short courses and outreach events.
4.0. How will we use the information
4.1. Your personal data are collected to enable us to provide you with data through our three-tier service and to respond to queries. These data may be shared between the CDRC teams at our partner institutions.
4.2. The CDRC uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”) to understand how visitors engage with CDRC platforms and to provide statistics to our funder, the Economic and Social Research Council and CDRC Advisory Board (cdrc.ac.uk; data.cdrc.ac.uk; maps.cdrc.ac.uk; indicators.cdrc.ac.uk; nrdf.cdrc.ac.uk) and so we can improve it.
4.3. Safeguarded and Secure Tier applications will also be shared with the Data Partner(s) in question and with CDRC Research Approvals Group reviewers as well as the CDRC Research Approvals Group Chair as part of the CDRC Research Approvals Group process https://www.cdrc.ac.uk/data-services/using-our-data/
4.4. These data are also collected to enable us to provide information about our performance (KPIs) to our funder, the Economic and Social Research Council and to the CDRC Advisory Board to demonstrate our success and account for the investment into the Centre.
4.5. For those who have consented to receive the CDRC Newsletter and other information from the CDRC we will continue to send this information until we are notified otherwise.
4.6. Contact information from participants of CDRC short courses and outreach events will be used to enable us to deliver these events.
4.7. We will not share your personal details with third parties.
5.0. How we will protect information about you
5.1. CDRC Open Service Users’ personal data are held on CDRC servers behind UCL or University of Liverpool firewalls and with restricted access to CDRC personnel through server user management systems.
5.2. CDRC Safeguarded and Secure Service Users’ personal data are held on managed networks and computers at CDRC partner institutions. Hardcopies of applications are held in locked filing cabinets within a locked office environment.
5.3. All other personal contact data collected to deliver short courses and outreach events are held on managed networks and computers at CDRC partner institutions and UCL Sharepoint.
6.0. Data Retention
6.1. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
6.2. All CDRC Service Users’ personal data will be retained for 18 months following the closure of the CDRC.
7.0. Your Rights
Under certain circumstances, you may have the following rights in relation to your personal data:
7.1. A right to access personal data held by us about you.
7.2. A right to require us to rectify any inaccurate personal data held by us about you.
7.3. A right to require us to erase personal data held by us about you. This right will only apply where, for example, we no longer need to use the personal data to achieve the purpose we collected it for; or where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (in line with Right 7.6. below).
7.4. A right to restrict our processing of personal data held by us about you. This right will only apply where, for example, you dispute the accuracy of the personal data held by us; or where you would have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but we require the data for the purposes of dealing with legal claims.
7.5. A right to receive personal data, which you have provided to us, in a structured, commonly used and machine readable format. You also have the right to require us to transfer this personal data to another organisation.
7.6. A right to object to our processing of personal data held by us about you.
7.7. A right to withdraw your consent, where we are relying on it to use your personal data, as applies in the case with consent to send you the CDRC Newsletter and other information.
7.8. A right to ask us not to use information about you in a way that allows computers to make decisions about you and ask us to stop.
7.9. If you wish to exercise any of these rights, please contact email@example.com
8.0. Changes to our privacy notice
Our Privacy Notice may be updated from time to time. Any updates will appear on this webpage. This notice was last updated 25th May 2018.