Summary
This policy in 6 points:
- When you register an interest in the Space Conversion Course, we use your personal information to inform you about the course.
- The Space Conversion Course is a joint project by HE Space and the Space Skills Alliance, and we both have copies of your data
- We also record anonymous information about you when you visit our website.
- We take data security very seriously and do everything in our power to keep your personal information secure. We limit access to the people in our team who need it, we keep the amount we hold to a minimum, we try not to hold on to it for longer than is necessary, and we protect it with passwords and other security measures.
- You have the right to access and correct the personal data we store about you, to restrict what we do with it, and to ask us to remove it entirely.
- This privacy policy only covers your interactions with us related to the Space Conversion Course. It doesn’t cover using our main website, or interacting with us on social media.
Introduction
This document covers data collection for the Space Conversion Course (‘the course’).
The Space Conversion Course is a joint project by HE Space and the Space Skills Alliance (‘the partners’). The Space Skills Alliance is the data controller, but is sharing data with HE Space, who are a data processor. Our Data Protection Officer is Joseph Dudley, Director of the Space Skills Alliance.
This document may be updated from time to time by agreement of the partners. We will notify you by email if we store your personal information and you will be affected by the changes.
If you would like to see this policy include something else, or have any questions, please email us at info@spaceconversioncourse.co.uk. You can also raise data privacy concerns directly with the Information Commissioner’s Office.
What we collect
Registering your interst
When you register your interest we collect your email address so that we can contact you. We also collect your reason for registering, your existing experience, and how you heard about the course, but these fields are optional.
Accessing the website
We store up to two distinct kinds of records, explained below, when you access the survey website. The data is processed to compile statistical reports on website activity. It is not linked in any way to your survey response.
Server logs
Our web server automatically logs all requests for webpages. This is standard procedure for most websites.
This means that whenever anyone or anything loads one of our webpages or submits data, the action will be logged. Each log entry contains the requester’s IP address (a kind of name computers use to identify each other), some details about the browser they are using, and the name of the page that has been requested (more information can be found here). All such logs are anonymous.
Server logs are stored by our web host on their servers. We rarely use full server logs, but from time to time they are analysed by our team to troubleshoot problems, particularly spam attacks.
Internal logs
Additionally we run our own logging system that operates in a similar way but only logs the visitor’s IP address and the details of the page they are visiting. All such logs are anonymous, and are stored in our database indefinitely.
Cookies
We don't store any cookies on your computer.
How we store and protect the data
When you submit the registration form, your data is stored securely by Mailerlite, our email marketing provider, until you unsubscribe.
We take data security very seriously and do everything in our power to keep your personal information secure.
- We audit our data to ensure we are keeping only information we need
- We carefully limit what can be accessed publicly, and protect the rest with passwords
- We use protocols such as HTTPS, Single Sign On, and Two Factor Authentication to minimise the chances of someone intercepting data or one of our passwords
- We monitor our servers and databases for suspicious activity
Service providers
The webpages and databases are hosted on web servers owned and operated on our behalf by our hosting provider Heroku, a subsidiary of Salesforce. These servers store the files and database for our websites and provide them to website visitors and our team.
We may also transfer some or all of the data to Google Drive, a cloud storage service provided by Google.
Data breaches
We have a comprehensive action plan and checklist for data breach incidents. If we identify that personal data has been exposed, we will make this news public and notify any affected individuals. We will also act to identify the cause of the breach and take steps to prevent it from happening again.
Your rights
Your rights relating to your data are written into law under the Data Protection Act, and the General Data Protection Regulation. These are:
- The right to be informed – You have a right to be informed about how we collect, process, and store your personal data. This information is provided in this document.
- The right of access – You have a right to access the personal data we store about you.
- The right to rectification – You have a right to have inaccurate details corrected.
- The right to erasure – You have a right to have personal data erased.
- The right to restrict processing – You have a right to restrict the way in which we process your personal data.
- The right to data portability – You have the right to obtain the personal data we store about you in a structured machine readable format.
- The right to object – You have the right to object to the way in which we process your personal data.
- Rights in relation to automated decision making and profiling – This right does not apply as we do not engage in automated decision making or profiling.
To exercise any of the rights listed above, please email us including your name and outlining the ways in which you have interacted with us. You must also provide proof of identity, which can include sending the email from an address we have on record.