The Centre for Applied Human Rights (CAHR) Privacy Notice for podcasts

This Privacy Notice tells you what to expect when taking part in a podcast for the Art Rights Truth (ART) project at the Centre for Applied Human Rights, University of York. It sets out the ways in which the University of York gathers, uses, stores
and shares your data. It also sets out how long we keep your data and what rights you have in relation to your data under the UK General Data Protection

Regulation (GDPR) and Data Protection Act 2018.

For the purposes of this privacy notice, University of York is the Data Controller as defined in the UK GDPR. We are registered with the Information Commissioner’s Office and our entry can be found here. Our registration number is: Z4855807.

The podcast series will be used to disseminate the research which was produced through the ART project. These podcasts are used to provide information about and promote the University’s research and other activities to audiences including researchers, the public, policy-makers, benefactors and other stakeholders.

Personal Information Provided by You

The personal information that we collect depends on the context of your interactions with us. The personal information we collect may include the following:

● names
● email addresses
● company/organisation/projects ● images

What is our legal basis for processing your data?

When capturing podcasts, we do so under the legal basis of 'legitimate interests'. This means that the University benefits from being able to record events to provide

information about and promote the University’s research and other activities, such as the projects commissioned as part of the Art Rights Truth project, and that we are able to use your podcasts to do this, as long as it does not unfairly impact you.

How do we use your data?

Your podcast may be used in online media produced by the University of York, such as promotional material for the Art Rights Truth project, and/or in non-University materials such as magazines and articles. It may also be used on websites or social media channels managed by the University of York or associated organisations.

Who do we share your data with?

Podcasts are available to anyone who has access to the website or Spotify on which the podcast series will feature.

The original podcasts will only be accessible to employees, students and agents of the University, or third parties that process data on behalf of the University (eg

printing providers, content creators, and digital asset management suppliers).

How do we keep your data secure?

The University takes information security seriously and has implemented appropriate technical and organisational measures to protect personal data and special category data. Access to information is restricted on a need-to-know basis and security arrangements are regularly reviewed to ensure their continued suitability. For further information please see our IT security information.

Transfer of data internationally

In certain circumstances it is necessary to transfer your Personal Data (including Special Category Data) outside the European Economic Area. In respect of such transfers the University will comply with our obligations under Data Protection Law

and ensure an adequate level of protection for all transferred data.

How long will we keep your data?

The University will retain your data in line with legal requirements or where there is a business need. Retention timeframes will be determined in line with the University’s Records Retention Schedule.

What rights do you have in relation to your data?

Under the General Data Protection Regulation (GDPR), you have a right of access to

your data, a right to rectification, erasure (in certain circumstances), restriction, objection or portability (in certain circumstances). You also have a right to withdraw consent (where this applies).

If you want to exercise these rights, particularly to ask us to stop using podcasts which include you, then you can do so by contacting us at cahr-admin@york.ac.uk

Please note that although we will stop using your podcast in any future web publications, we will not be able to remove any copies which have already been downloaded.

Questions or concerns

If you have any questions about this privacy notice or concerns about how your data is being processed, please contact the Centre by emailing cahr-admin@york.ac.uk.

If you have further questions, the University’s Data Protection Officer can be contacted at dataprotection@york.ac.uk.

Right to complain

If you are unhappy with the way in which the University has handled your personal data, we ask you to contact us in the first instance, so that we can try to put things right. If you are unhappy with our response, you have a right to complain to the Information Commissioner’s Office. For information on reporting a concern to the Information Commissioner’s Office, please see the Information Commissioner's Office complaints information.