Being a student, staff member or visitor to campus you might use services (for example the NHS Test and Trace app or a COVID-19 testing facility) that do not provide personal data to Newman University but do provide personal data to external organisations, Therefore you might be interested in the following external links: Coronavirus (COVID-19) Testing Privacy Information, NHS COVID-19 app: Privacy Notice.
The Privacy Notice below is meant to help you understand what personal data we collect about people who report that they have COVID-19 symptoms or test results, book in for an asymptomatic test as part of the on-site testing programme, collect a home-testing kit, request a test kit is posted to you*, or book a library study space. This Privacy Notice explains also why we collect the personal data, what we do with it, how we keep it safe, and your individual rights over it.
Who are we?
Newman University (Genners Lane, Birmingham, B32 3NT) is registered as a data controller with the Information Commissioner and you are welcome to contact our Data Protection Officer by emailing firstname.lastname@example.org or by post.
What type of personal data is collected?
If you inform the university that you have symptoms of Covid-19 or have received a test result for Covid-19 you may provide us with your name, phone number, email address, date of symptoms or test result and, if you are a student, you may additionally provide your student number, home address and programme.
If you book to have a COVID-19 test as part of the asymptomatic testing programme provided by the University (for example to enable students to travel home safely for Christmas, use campus facilities, stay in university owned accommodation, go on placement or for staff to visit students on placement) you will provide your name, contact details and if relevant, your university accommodation address. This is to run the booking process effectively and so that the University can monitor the engagement of students and staff with the testing programme.
When you collect an LFD Collect home testing kit box you are required to provide your name and an up-to-date phone number. This is recorded alongside the batch number of the test kit. The Medicines and Healthcare products Regulatory Agency (MHRA) requires Newman to keep a test kit log for all tests that are provided for use at home. This is so that you can be contacted in the event of a batch recall, investigations or issuing of a safety notice. This information is stored securely within the University. The University will only share it with the government’s Department of Health and Social Care or MHRA if required to by those organisations. The University might use TextLocal or similar software to contact you by text in the event of a batch recall or similar situation. You can read the NHS Test and Trace’s Privacy Notice for LFD Collect by downloading the attachment at the bottom of this article.
If you request a Covid-19 test be posted to you*, you provide your name, date of birth, programme of study, and your chosen postal address for the test to be sent to you.
If you book a Library study space then your name, contact details and date/time of booking will be stored for 21 days to assist with the NHS Test and Trace programme.
If you attend an event at the University and do not use the NHS Covid app to scan the Test and Trace QR barcode, you will be required to provide your written details for the NHS Test and Trace programme. This is your name, a contact detail (phone number or email address) and the date / time of your attendance. This will be stored for 21 days and only shared with the NHS Test and Trace programme is they require it. After 21 days Newman University will permanently delete personal data held for Test and Trace purposes.
The legal basis for using the personal information as described above (with the exception of health information such as symptoms or a positive test result) is ‘public interest’ as the University is processing this personal information because it is necessary for the performance of a task carried out in the public interest in accordance with Article 6 1 (e) of the UK General Data Protection Regulation (UK GDPR). Where the personal data consists of special category information, such as medical information (e.g. your test result itself or symptoms), the additional lawful bases for this data processing are to protect the public interest in the area of public health, for preventive and occupational medical purposes and to meet employers’ duties of care.
*This service was offered to Faculty of Education students during the Christmas / New Year holiday 2020/21 before they returned to go on placement and to halls of residence students before their return to university accommodation.
How will the personal information be used and how long is it kept?
The personal information will be used to support the university’s Covid-19 response in protecting people from the virus and as part of the national and regional monitoring and response systems.
The length of time that we store personal data (called a retention period) is directly link to its purpose and how long it is needed. This retention period is under constant review as the national and regional reporting requirements are continually evolving and it is not yet fully known how long the personal data will be needed for. Unless otherwise specified in this privacy notice, the retention period is currently set at a maximum of 12 months from the end of the pandemic. If this retention period needs to be changed it will be updated in this privacy notice. After that time, we will destroy or fully anonymise the data. If the data is fully anonymised it no longer counts as personal data and it may be used for statistical purposes, for example, to monitor the number of people using the online form, or to estimate the number of people using the listed venues on campus.
Who can access my personal data and will they share my personal data with anyone?
At Newman University your personal data will only be accessible to relevant staff. These could include the appropriate Faculty Office, the Estates Team (if you live in halls or have visited halls), the Health and Safety team, Human Resources, the Registrar’s First Response Team, and on a case-by-case basis limited academic staff and Student Support. Any hard copies are locked in storage and personal data stored electronically is stored securely within the EU. Organisations that we pass data onto include Public Health England (PHE), Public Health Birmingham and Birmingham City Council. Usually any Covid-19 data we share with external organisations is anonymous statistical data. We would only pass on this personal data if it is mandatory to do so and if there was a lawful basis for that sharing.
Other personal data that is shared is student names, student Newman email addresses, student dates of birth and student postcode. This is shared with limited third parties (such as a local GP practice and University Hospitals Birmingham NHS Foundation Trust) who are assisting with the vaccination programme to higher education students. The data will be used to enable those third parties to contact Newman University students to offer them vaccinations, facilitate the vaccination booking system and administration regarding a vaccination programme.
Otherwise the University will not share the personal data with any other organisation unless we believe someone’s life is in danger or we believe we are compelled to by law.
What rights do I have regarding my personal data?
You have the right to correct your personal data. You may have the right to have your personal information deleted, the right to restrict processing, the right to object and / or the right to data portability. Follow the links to find out whether those rights apply in these circumstances. To do any of those things or if you have followed the links but would like clarification please email email@example.com
You have the right to see the personal data we hold about you. We recommend you use our online form. All information about how to request your data can be found on our dedicated web page. You can also contact our Data Protection Officer by email firstname.lastname@example.org or by post Newman University, Genners Lane, Birmingham, B32 3NT.
Data protection law also gives you rights regarding ‘automated individual decision-making and profiling’. However Newman University does not carry out any ‘automated individual decision-making and profiling’ so these rights are not relevant to your personal information collected by us.
You have the right to lodge a complaint with the Information Commissioners Office about the handling of your personal data and can find out more about this on their website https://ico.org.uk/concerns/handling/
Where can I get more information?