Co-creating with the scientists of tomorrow:
Shaping trials and the future.
Privacy Notice
This is a statement of the practices of The Kid’s Trial at the Health Research Board – Trials Methodology Research Network (HRB-TMRN), School of Nursing and Midwifery, University of Galway (“the Service”) in connection with the processing of personal data for the purposes of the Service and the steps taken by the University of Galway (“the University”) as a data controller to safeguard individuals’ rights under data protection legislation, specifically the EU General Data Protection Regulation (“GDPR”) and Data Protection Acts 1988-2018
Know & Understand Your Rights
What is this?
The University of Galway fully respects your right and the rights of your child to privacy and actively seeks to preserve the privacy rights of data subjects who share personal data with the University. Any personal information you volunteer to the Service will be treated with the highest standards of security and confidentiality in accordance with data protection legislation.
Why do we need to tell you this?
This Privacy Statement explains the following
-
How the Service collects your personal data;
-
The purpose and legal basis for processing your personal data;
-
How we securely store your personal data;
-
Details of third parties with whom we share personal data; and
-
Your rights under data protection legislation.
How do we collect your personal data?
We collect personal data to provide our services to you. This data may be collected directly from you by our staff or from other systems under the control of the University of Galway.
Purpose and legal basis for processing personal data.
The personal data we collect from you will only be processed by the Service for the specific and lawful purposes as outlined in this Privacy Statement. The University of Galway will ensure that your data is processed fairly and lawfully in keeping with the principles of data protection as set out under Article 5 GDPR.
Know & Understand Your Rights
How we securely store your personal data
Personal data will be stored confidentially and securely as required by the NUI Galway QA 401 Data Handling and QA400 Data Protection Policy. The University is committed to ensuring that the processing of your data is safeguarded by appropriate technical and organisational security measures relevant to the processing in accordance with Article 32 GDPR requirements.
When we store your personal data on our systems, the data will be stored either on University premises or on secure IT platforms within the European External Area (“EEA”) or external of the EEA, which are subject to Chapter V GDPR requirements.
Details of third parties with whom we share personal data.
We will only share your data with third parties where necessary for the purposes of processing outlined in this Privacy Statement. In accordance with Article 28 GDPR, when we share your data with third parties, the Service will ensure that the data is processed according to specific instructions and that the same standards of confidentiality and security are maintained.
The following table details the third parties with whom your personal data is shared together with the purposes for the sharing:
The Kid’s Trial will collect your data via a link to a survey that is hosted by QuestionPro Inc. QuestionPro Inc. is bound by the same GDPR and data protection policies that we are.
Cookies
We use information gathered from cookies to help improve your experience of our website. Some cookies are essential so you can move around the website and use its features. Our website also contains third-party cookies detailed further at Cookies and Tracking Technology. You can refuse or consent to third party cookies when you first visit our website.
Specifically, your personal data may be processed for any or all of the following purposes:
Further Information
If you have any queries relating to the processing of your personal data for the purposes outlined above or you wish to make a request in relation to your rights you can contact any member of the Service staff at: TheKidsTrial@universityofgalway.ie, s.lepage1@universityofgalway.ie or declan.devan@universityofgalway.ie
If you wish to make a complaint or escalate an issue relating to your rights you can contact the University of Galway’s Data Protection Officer:
Email: dataprotection@universityofgalway.ie
Post: The Data Protection Officer,
University of Galway, Room A129,
The Quadrangle,
University of Galway,
University Road,
Galway, Ireland
If you are not satisfied with the information we have provided to you in relation to the processing of your personal data or you are dissatisfied with how the University of Galway is processing your data you can make a complaint to the Data Protection Commissioner at: https://www.dataprotection.ie/en/individuals/exercising-your-rights/complaints-handling-investigations-and-enforcement-individuals
Definitions
Personal data
Any information about an identified or identifiable natural person (‘data subject’).
Special Categories of Personal Data (Sensitive personal data)
-
Data concerning health
-
Personal data revealing racial origin, ethnic origin, political opinions, religious beliefs, philosophical beliefs, trade-union membership
-
The processing of genetic data for the purpose of uniquely identifying a natural person
-
The processing of biometric data for the purpose of uniquely identifying a natural person
-
Data concerning a natural person's sex life or sexual orientation
Processing
Any operation or set of operations performed on personal data. Processing includes storing, collecting, retrieving, using, combining, erasing and destroying personal data, and can involve automated or manual operations.
Data subject
Someone who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Data controller
An organisation, such as the University of Galway, which determines the purposes and means of the processing of personal data.
Data processor
A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller, traditionally under contract. This does not include Service staff who are processing personal data on behalf of the University as part of their employment duties.
Date: 30/01/2023