Privacy

Building digital capability is a service organised and managed by Jisc.

Jisc is a not-for-profit company and charity registered in England. Jisc owns a subsidiary company called Jisc Services Limited (JSL) and together they deliver Jisc’s services. Any references to “we”, “us”, “our” and “Jisc” are to these group companies both of which have registered offices at 4 Portwall Lane, Bristol, BS1 6NB.

Jisc is committed to protecting your privacy. We are the controller of the personal data processed for the purposes set out below and we are responsible for looking after it.

This notice contains privacy information specifically relating to our building digital capability service. See our main Privacy Notice for complementary information, including more on your rights, data sharing, how to contact us and how to complain.

How do we use your personal data?

Data processing activity: Responding to expressions of interest

Categories of personal data

• First and last name
• Email address
• Job title
• Organisation

Lawful basis

Legitimate interests: in responding to enquiries and providing solicited information about the service to promote and grow our business

Data processing activity: Customer account onboarding and management

Categories of personal data

• First and last name
• Email address
• Organisation

Lawful basis

Legitimate interests: to create and maintain customer records and accounts for the provision of contracted services

Data processing activity: Sending email service messages to lead contact for customer

Categories of personal data

• Email address

Lawful basis

Legitimate interests: to keep customers informed about important service issues

Data processing activity: Sending marketing and promotional material by email

Categories of personal data

• Email address

Lawful basis

Legitimate interests: in promoting our services to grow our business You can opt out at any time by following the email link to unsubscribe

Data processing activity: Creation of case studies, implementation stories and blogs

Categories of personal data

• First and last names
• Professional role
• Organisation
• Relevant background information
• Still and moving visual images
• Audio recordings and transcriptions of meetings and interviews

Lawful basis

Legitimate interests: We rely on consent to use personal data for these purposes. You can withdraw consent at any time

Data processing activity: Operation and management of Teams Community

Categories of personal data

• Email address

Lawful basis

Legitimate interests:in providing a platform for participants to learn, share and communicate about all aspects of digital capability for staff and students

Data processing activity: Collection of feedback from customers and users of the discovery tool. Users can choose to follow a link from the discovery tool to a Jisc online survey for this purpose

Categories of personal data

• Feedback content is anonymous
• IP addresses may be collected through the submission of an online form

Lawful basis

Legitimate interests: in collecting information that will help us develop and improve our service

Retention of your personal data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Our standard retention periods are attached are as follows:

Category of data: Contact details contained within expressions of interest

Retention period: 12 months

Category of data: Customer account details

Retention period: 12 months from closure of account

Category of data: Case studies, implementation stories and blogs:

Retention period: For the period of live publication plus 12 months

Category of data: Feedback responses

Retention period: 12 months

Data Processor statement

Jisc acts as a data processor for customers subscribing to the discovery tool. Customers determine their own purposes for using the discovery tool and are the data controllers of personal information processed on the platform. Questions and privacy rights requests relating to the use of personal data on the discovery tool should be directed to the customer in your case. This is likely to the educational institution where you study or work.

Jisc has contracts with customers which contain the data processing terms required by UK data protection legislation. Jisc does not use your personal data for purposes outside of these terms.

Jisc has designed the discovery tool to collect the minimum amount of data for the purposes of the service. The categories of data processed for the various elements of the service are summarised below.

Data processing activity: Log-in to the Discovery Tool.

Enabling user access to the Discovery Tool platform.

Categories of personal data:

Users are directed to the single sign-on mechanism used by the subscribing organisation. If this isn’t available, an initial form-based sign-up includes the following.

• First name
• Last name
• Email address
• Name of organisation
• Whether the user: (i) can access organisational data visualisations and/or (ii) can add organisational resources

Data processing activity: Organisation lead contact registration.

To confer rights for the organisational lead to view organisation level data reports and add organisational level resources.

Categories of personal data:

• First name
• Last name
• Email address
• Name of organisation
• Whether the user: (i) can access organisational data visualisations and/or (ii) can add organisational resources

Data processing activity: Student registration

Enables access and delivery of correct content. To provide anonymised and aggregated data visualisations at institutional level.

Categories of personal data:

• First name
• Last name
• Department/area of work
• Subject discipline
• Whether user is a member of staff or a student
• Email address

Data processing activity: Staff registration.

Enables access and delivery of correct content. To provide anonymised and aggregated data visualisations at institutional level.

Categories of personal data:

• First name
• Last name
• Subject discipline
• Year and level of study
• Whether user is a member of staff or a student
• Email address

Data processing activity: Completion of assessment question sets.

To provide a personal feedback report to users on their digital capability.

To provide anonymised and aggregated data visualisations at institutional level, sector comparison data and enable Jisc to improve the Discovery Tool.

Categories of personal data:

User data set scores and response data

Data processing activity: The award of a digital badge

To provide a credentialling service to users.

Categories of personal data:

• First name
• Last name
• Email address
• Which badge is being claimed

Use of sub-processors

We use Potentially Limited as our Discovery Tool platform provider.

We use Credly Inc to provide the digital badge service. Data is hosted in the USA and protected by standard data protection contractual clauses in compliance with UK data protection law.

We may update this notice from time to time, but you’ll always find the most recent one here.

How to contact Jisc

If you have a query about how we process your data you can contact us at any time by emailing help@jisc.ac.uk with 'Digital capability discovery tool' in the title.