Cardiff Metropolitan University takes responsibility for protecting your privacy when you use our websites and services. This statement describes why we collect information from you and how this information will be processed.
Please note: Non-Cardiff Metropolitan University websites are not covered by this statement. However where relevant we have provided links to further information.
Cardiff Metropolitan University is the Data Controller and is committed to protecting the rights of individuals in line with the General Data Protection Regulation (GDPR).
1. Information Collection
Anonymous information is collected automatically through the use of Cookies, and personal data is collected from web-based forms which you yourself have completed.
2. Use of Cookies
Cookies are files, sent by us to your computer or other access device, which can then be accessed when you visit our websites in the future, allowing us to record your browsing activity.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site.
For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
You can at any time change or withdraw your consent from the Cookie Declaration on our website.
These Cookies are used by:
a) Google Analytics
Google Analytics is a statistical tool that analyses the usage of websites by collecting internet log and behavioral information in an anonymous form. This information is then used to report on activity and provide an indication of website usage, which enables us to provide a better service on-site and inform our advertising off-site. (See also 4. Advertising – Google Ads)
Please follow this link for more information on
Google Analytics and your privacy.
b) Authentication
In addition, Cookies are used to aid service and system access by allowing you to move around within our websites without having to re-authenticate. Such Cookies are automatically removed from your computer when you close down your browser windows.
3. Personal Information
Personal data (such as your name, address, telephone number and email address) that you directly provide to us through the use of web-based forms will be stored securely; only be accessed by authorized Cardiff Metropolitan University personnel and will only be used for its intended purpose. The University is lawful in processing this data because you have given consent (under Article 6 of the GDPR).
Third Parties and Personal Data
The University works with the following third parties in terms of personal data:
a) Campus Management
Cardiff Metropolitan University uses personal data collected and stored by Campus Management Corp UK on behalf of the University through the use of specific URLs relating to online forms for prospectus requests, open day and applicant day registrations.
For further information on how your data is stored by Campus Management, please read the ‘Admissions Privacy Policy’ at:
https://www.campusmanagement.com/about-us/privacy/.
b) Qualtrics
Cardiff Metropolitan University uses personal data collected and stored by Qualtrics on behalf of the University through the use of specific URLs relating to online forms for enquiries, event bookings and applications.
For further information on how your data is stored by Qualtrics, please visit:
https://www.qualtrics.com/privacy-statement/ and pay attention to section 3: 'Data Collected by Customers'.
c) Uni Quest
Cardiff Metropolitan University uses personal data collected and stored by Uni Quest on behalf of the International Office at the University, through the use of specific URLs relating to online forms for International Student enquiries and applications.
For further information on how your data is collected and shared between the University and Uni Quest, please visit:
http://www.uni-quest.co.uk/privacy-policy/
d) Live Chat Inc.
Cardiff Metropolitan University uses personal data collected and stored by Live Chat Inc. on behalf of the University through the use of specific software for Live Online Chat to support applications and enquiries via the University website.
For further information on how your data is stored by Live Chat Inc, please visit: https://www.livechatinc.com/privacy-policy/.
e) UniBuddy Ltd.
Cardiff Metropolitan University uses personal data collected and stored by UniBuddy on behalf of the University through the use of registration forms to facilitate conversations and peer-peer communication between prospective students and current student ambassadors and university staff.
For further information on how your data is stored by Unibuddy Ltd, please visit: https://unibuddy.com/terms-of-use/
f) DotDigital
Cardiff Metropolitan University uses personal data collected and stored by DotDigital on behalf of the University through the use of specific online forms for course enquiries, prospectus requests, open day and event registrations.
For further information on how your data is stored by DotDigital, please visit: https://dotdigital.com/terms/privacy-policy/
g) EventBrite
Cardiff Metropolitan University uses personal data collected and stored by EventBrite on behalf of the University through the use of specific online forms for event registrations.
For further information on how your data is stored by EventBrite, please visit: https://www.eventbrite.co.uk/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy?lg=en_GB
h) SimplyBook
Cardiff Metropolitan University uses personal data collected and stored by Simply Book on behalf of the University through the use of specific online forms for event registrations.
For further information on how your data is stored by Simply Book, please visit: https://simplybook.me/en/policy
i) Gecko Engage
Cardiff Metropolitan University uses personal data collected and stored by Gecko Engage on behalf of the University, through the use of specific online forms for enquiries, prospectus requests, open day and event registrations. Cardiff Metropolitan University has a Data Protection Agreement in place with Gecko Engage. For any further information required, please contact dataprotection@cardiffmet.ac.uk.
Unless required or permitted do so by law, we will not otherwise share, sell or distribute any of the information you provide us without your consent.
4. Advertising
The University website currently collects and uses non-personal data from your browsing activity, for marketing/remarketing purposes across the channels below. By accepting the terms of this Cookie and Privacy Statement, you are providing consent for us to serve you with such advertising.
a) Facebook and Instagram
The University website uses the 'Facebook Pixel' (a small block of code) in order to track which pages of the website you visit and what actions you may take. This allows us to serve you with targeted and relevant advertising across the Facebook and Instagram platforms ("Custom Audiences from your Website") and send information about any actions you may take ("Event Data") to Facebook to track conversions ("Conversion Tracking").
Find out more about the Facebook Privacy Policy.
You can also
manage your Facebook Ad preferences via your personal Facebook account.
b) Twitter
The University website uses the Twitter 'Universal Website Tag' (a small block of code) to track which pages of the website you visit, in order for us to utilise the 'Custom Audiences' and 'Conversion Tracking' features of Twitter Ads. We then use this information to serve you with relevant and targeted adverts across the Twitter platform.
Find out more about the
Twitter Privacy Policy.
c) LinkedIn
The University uses the LinkedIn 'Insight Tag' (a small block of code) to track which pages of thr website you visit, in order for su to use the 'Website Demographics' and 'Matched Audiences' features of LinkedIn Campaign Manager. We then use this information to serve you with relevant and targeted adverts across the LinkedIn platform.
Find outmore about the
LinkedIn Privacy Policy.
You can also manage your LinkedIn Ad preferences via your personal LinkedIn account.
d) Google Ads (Search, Display and YouTube)
The University uses the Google AdWords platform to serve relevant and targeted advertising to visitors of the University website. Data (browsing data) collected via Google Analytics is used to create custom audience profiles. These profiles are used to re-market and serve you with relevant adverts across the Google search and display networks including YouTube. Any user actions from such advertising (e.g. clicks or event registrations) is passed back to Google Analytics to allow the University to track conversions and measure the impact of any such advertising.
Find out more about the
Google Privacy Policy.
You can also
control how adverts are served to you across the Google network.
For information on how you can stop receiving such advertising across the above channels, please visit: http://www.aboutads.info/choices and
http://www.youronlinechoices.eu/.
5. Your Rights
If the University processes personal information about you, you have the right to invoke the following individual rights. You have the right to:
- access your personal information
- object to the processing of your personal information,
- rectify any inaccurately held data
- restrict the processing of certain personal information
- data portability
- object to the processing of your personal data
Please visit the Information Commissioner Office's (ICO) website for further information in relation to your rights. https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If you have previously provided consent for the processing of your personal data, you also have the right to withdraw this consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.
If you wish to make a complaint about the way your personal data has been processed you can submit your concerns in writing to:
Information & Data Compliance Officer
Secretariat Unit
Cardiff Metropolitan University
Llandaff Campus
Western Avenue Cardiff
CF5 2YB
DataProtection@cardiffmet.ac.uk
If this process does not resolve your issue, or if you wish to take your complaint further, you have the right to contact the Information Commissioner. The contact details are:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
www.ico.org
Last Updated: June 2023