Privacy statement
The Privacy Notice is for this website https://www.dsru.org/ and is served by the DSRU and outlines the privacy of Users. The DSRU regards the privacy and security of data and information very seriously. The Notice sets out the different areas where User privacy is concerned and outlines the obligations and requirements of the users, the website and website owners and the way the website processes, stores and protects User data.
When is data collected?
The DSRU collects personal data during a website visit as follows:
1. To set up a User account;
2. When a User makes an enquiry about DSRU services;
3. When enrolling on a DSRU Education and Training course or conference;
4. Where applicable the website uses a cookie control system to allow or disallow the use of cookies on the User’s first visit to the website on a particular computer or device.
What data is collected?
The data collected whilst visiting the website may consist of:
1. User account details such as email address, username, etc.;
2. Information provided on the website’s online forms relating to DSRU training courses, conferences, requesting further information or the DSRU mailing list;
3. Details of payment transactions carried out during the process of booking a DSRU training course or attendance at a conference;
4. Cookies when visiting the website:
4.1 cookiehub- Used by CookieHub to store information about whether visitors have given or declined the use of cookie categories used on the site.
4.2 lidc – Used by LinkedIn for routing.
4.3 li gc – Used by LinkedIn to store consent for guests regarding the use of cookies for non-essential purposes.
4.4 _ga – Contains a unique identifier used by Google Analytics to determine that two distinct hits belong to the same user across browsing sessions.
4.5 _ga_* – Contains a unique identifier used by Goggle Analytics 4 to determine that two distinct hits belong to the same user across browsing sessions.
4.6 bcookie – This is a Microsoft MSN 1st party cookie for sharing the content of the website via social media.
4.7 YSC – This cookie is set by the YouTube video service on pages with YouTube embedded videos to track views.
4.8 li sugr – Used by LinkedIn to make a probabilistic match of a user’s identity outside the Designated Countries.
4.9 VISITOS_INFO1_LIVE – Set by YouTube and used for various purposes, including analytical and advertising.
4.10 UserMatchHistory – Contains a unique identifier used by LinkedIn to determine that two distinct hits belong to the same user across browsing sessions.
4.11 AnalyticsSyncHistory – Used by LinkedIn to store information about the time a sync with lms analytics cookie took place for users in the Designated Countries.
4.12 bscookie – Used by the social networking service, LinkedIn, for tacking the use of embedded services.
4.13 VISITOR_PRIVACY_METADATA – YouTube cookie
4.14 Arloauth – Not safe to block (tested using EditThisCookie extension), this will break all arlo logins.
4.15 Arlo_cid – This cookie associates the contents of a shopping cart with the end-user’s browsing session.
4.16 Arlo_checkout_result_{guid} – Session cookie for the checkout.
4.17 arlo_sid_{0} – Checkout access evidence – session id is necessary. Can’t replicate getting this in the cart but best not to let users block it.
4.18 _stripe_sid – Fraud prevention.
4.19 _stripe_mid – Fraud prevention.
What is the data used for?
The purposes for which the data is being processed or will be processed are to:
1. Providing and managing a User account;
2. Communicating with the User by email or telephone to respond to enquiries, sending alerts or notices including changes to services, sending information in accordance with the User’s opt-in preferences;
3. Manage the general administrative requirements of enrolment on a DSRU training course or conference;
4. Comply with statutory and/or regulatory requirements and obligations;
5. Comply with the duty to make reasonable adjustments for course or conference delegates and other disability discrimination obligations;
6. Ensure compliance with the delegate’s statutory rights;
7. Enable the DSRU to establish, exercise or defend possible legal claims;
8. Provide the User the best experience when visiting the website by using cookies.
The DSRU may process personal data without consent only when required or permitted by law.
How is the data protected?
The DSRU has Information Security Policies and Procedures to protect and secure the personal data from being accidentally or maliciously lost or destroyed, altered, disclosed or used for unauthorised purposes or accessed by unauthorised personnel. The DSRU has security measures in place to ensure that only authorised personnel have access to the data.
When the data is shared with third parties, the DSRU require all third parties to have appropriate technical and organisational security measures in place to assure the data is protected and secured in accordance with current data protection legislation. The data will only be used by third parties for specified purposes and in accordance with written instructions.
The DSRU will notify the Information Commissioner’s Office (or any other applicable supervisory authority or regulator) and the applicant of any suspected breach in accordance with current data protection legislation.
Who has access to the data?
The DSRU will not share the personal identifiable data with third parties unless consent is specifically given. Administrative staff may need access from time to personal data for administrative duties and Website developers or support staff may need access for system help, support or maintenance tasks.
Google stores information collected by cookies on servers in the United States. Google may transfer this information to third-parties where required to do so by law, or where such thirdparties process the information on Google’s behalf.
How long will the data be retained?
The DSRU will retain personal data for as long as is necessary to fulfil the purposes for which it were collected and processed. Course related payment data will be retained for one year after the course completion date.
What rights does the data subject have in connection with the data?
Data subjects have a number of statutory rights, subject to certain conditions and circumstances, as follows
1. To be informed;
2. To request access to personal data;
3. To request rectification of personal data;
4. To request the erasure of personal data;
5. To restrict the processing of personal data;
6. To object to the processing of personal data;
7. To request the transfer of personal data to another party.
To exercise any of these rights, contact the DSRU’s Head of Data Management (details below).
If it is believed that the DSRU has contravened current data protection legislation with regard to the data then a complaint can be made to the Information Commissioner’s Office (ICO) at any time. The ICO is the UK supervisory authority for data protection issues.
Who to contact?
Any further information required on the use of cookies by Google Analytics refer to the Google website – https://www.google.com/analytics/learn/privacy.html
Any general questions on DSRU Information Security or regarding an individual’s rights under current Data Protection legislation can be directed to:
Head of Data Management, DSRU, Bursledon Hall, Blundell Lane, Southampton SO31 1AA. Tel: 02380 408600, Email: hodm@dsru.org
DSRU’s nominated Data Protection Officer is:
Mark James (Mojou Ltd), Barn E, Manor Farm Donnington, Chichester West Sussex, PO20 7PL Tel: 07443 577577 or 0203 8897777. Email: admin@mojou.co.uk