Leeds Beckett University - City Campus,
Woodhouse Lane,
LS1 3HE
Privacy Notice for Public Involvement in Research (PIR) Activities
This is the privacy notice for Public Involvement in Research (PIR) Activities at Leeds Beckett University.
We, Leeds Beckett University, respect your privacy and are committed to protecting your personal data.
This privacy notice provides information on how we will look after your personal data when you let us know you are interested in PIR activities with us. It tells you about your privacy rights and how the law protects you.
What is Public Involvement in Research (PIR)?
PI means actively working in partnership with members of the public (this can include people who use a health or care service e.g., as a patient or service user). This can be to plan, manage, design, and carry out research. That means “Research being carried out ‘with’ or ‘by’ members of the public rather than ‘to’, ‘about’ or ‘for’ them” – (INVOLVE). Please visit the National Institute for Health and Care Research website for more information.
Staff within Leeds Beckett University (LBU), and LBU are the data controller for the information you provide. The data controller is the organisation or person responsible for the reasons for and ways in which your data is processed or used.
Details of your rights under UK data protection legislation, including details of LBU’s Data Protection Officer, your rights as a data subject, and your right to complain to the Information Commissioner’s Office are provided in this privacy notice.
Personal data means any information about an individual from which that person can be identified.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data includes your name, title, date of birth and gender and copies of identity documentation (e.g., passport which may be required for some types of payment for PI activities)
- Contact Data includes your address, email and telephone number(s)
- Public Health Data includes data that we may need to collect about you which relates to your health or health status (for example if you are taking part in a PIR activity related to experiences of having a particular health condition)
- Profile Data includes purchases made by you, your interests, educational and employment history, equality data, preferences and feedback and survey responses
- Images includes CCTV and surveillance, film and photography
We may also collect, store, and use the following “special categories” information, which is protected both under GDPR and the Equality act (2010):
Information about:
- Your race or ethnicity
- Any disabilities you may have
- Your religion or beliefs
- Your sexual orientation
- Your health, including any medical condition and health records
- Your pregnancy or maternity status
- Your marital or civil partnership status
- Gender reassignment
We also collect, use and share aggregated data for any purpose. Aggregated Data is where we bring together anonymous data from personal data we collect. This is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate identity data from people registered for PI activities to summarise how many people take part and their characteristics such as gender and ages. Individuals would not be identifiable.
Most of the personal information we process has been given to us by you directly because we would like you to participate in or continue your participation in the PIR activities being carried out by LBU staff or researchers. The LBU researchers carrying out the PIR activities may be undergraduate or postgraduate students (working under appropriate staff supervision), LBU staff or a combination of staff and students. The PIR activity may be carried out only by LBU staff/students, or it may involve LBU staff/students working in partnership with researchers in other organisations.
LBU staff/students will provide you with a participant invite sheet setting out details of the particular PIR activity you are being invited to take part in. This will explain the purpose of the PIR and what is involved in participation (i.e., what we will ask you to do). It will also explain how we will use your data and let you know if your data will be shared in an identifiable form with any third parties, such as collaborators from other organisations. This might for example include things such as sharing your name on meeting notes.
As well as the data you have already given us, we will also hold and the following data:
- Data created through the PIR activity you take part in (e.g., meeting notes, feedback from you verbally or in writing)
- Personal data contained within project management documentation such as participant agreements or consent forms
- Records of any communications we have with you through email or letter
LBU staff/students follow Data Protection and Research guidance to ensure appropriate data protection safeguards are in place.
We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases (known as legitimate interests) we rely on to do so. We have also identified what our legitimate interests are where appropriate.
We may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal basis, we are relying on to process your personal data where more than one basis has been set out in the table below.
| Purpose / activity | Type of data | Lawful basis for processing including basis of legitimate interest |
|
Information about you, name, address, email address, telephone number, to communicate with you about the PI activities. |
Identity data Contact data Profile data |
Article 9 (2a) Explicit consent |
|
Special category information. Information about your physical or mental health, or disability status for PPI activities. |
Physical health Mental health Disability status |
Article 6.1(e) of the GDPR, i.e., our processing is necessary for the performance of a task carried out in the public interest. Research is a task that LBU performs in the public interest, as part of our core function as a university. Article 9.2(j) of the GDPR, i.e., our processing is necessary for research purposes or statistical purposes. This condition applies as long as we are applying appropriate protections to keep your data secure and safeguard your interests; these are described above. Article 6 (1f) Processing is necessary for the purpose of the legitimate interest. |
|
Special category information. Information about your race or ethnicity, religion for PI activities. |
Race Ethnicity Religion |
Article 6.1(e) of the GDPR, i.e., our processing is necessary for the performance of a task carried out in the public interest. Research is a task that LBU performs in the public interest, as part of our core function as a university. Article 9.2(j) of the GDPR, i.e., our processing is necessary for research purposes or statistical purposes. This condition applies as long as we are applying appropriate protections to keep your data secure and safeguard your interests; these are described above. Article 6 (1f) Processing is necessary for the purpose of the legitimate interest. |
|
Special category information and protected characteristics. Information about your sexual orientation, marital or civil partnership status, gender reassignment, pregnancy or maternity status for PI activities. |
Sex life Sexual orientation Pregnancy and maternity Gender reassignment |
You are protected under the Equality Act (2010) from discrimination related to these types of data or these characteristics. Article 6.1(e) of the GDPR, i.e., our processing is necessary for the performance of a task carried out in the public interest. Research is a task that LBU performs in the public interest, as part of our core function as a university. Article 9.2(j) of the GDPR, i.e., our processing is necessary for research purposes or statistical purposes. This condition applies as long as we are applying appropriate protections to keep your data secure and safeguard your interests; these are described above. Article 6 (1f) Processing is necessary for the purpose of the legitimate interest. |
Information will be shared with third parties only when necessary as part of the provision of our services to you and/or where we have a legal or regulatory requirement to do so. All our third-party service providers and other entities in the group are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
We do not anticipate the transfer personal data outside of the United Kingdom/European Economic Area (EEA). In the event that such transfer is required we shall only do so with adequate legal protections in place.
We will only keep your personal data for as long as necessary to meet the purposes we collected it for, including for the purposes of meeting any legal, accounting, or reporting requirements. At the end of the agreed period for storing your data, your personal data will be deleted securely and safely.
Your personal data will be held in accordance with the data storage periods set out in our Records Retention Schedule and is recorded in the university Information Asset Register.
The university recognises and respects individual rights under the UK General Data Protection Regulation (GDPR). For further information please see our overarching Privacy Notice which explains your privacy rights.
Please see our overarching Privacy Notice for information on how to complain.
We keep our privacy notices under regular review. This privacy notice was last updated June 2023.
Related links
Please see the University Policy page that includes all the current LBU Privacy notices within which you will find the Student Suicide Prevention – Information sharing statement.
