Here is some important information about the use of your personal data when you sign up to use our Asymptomatic Testing Centre on campus.
- The identity and contact details of the Data Processor: Mike Keighley, Senior Responsible Officer (Covid-19 asymptomatic testing site), Brunel University London, Kingston Lane, Uxbridge UB8 3PH. Email: mike.keighley@brunel.ac.uk Tel: 01895 267909.
- The contact details of the Data Protection Officer: (Dipa Gorsia, data-protection@brunel.ac.uk);
- What personal data is collected: We collect the first and last name and Brunel email address of students and staff that are going to take part in the Covid-19 asymptomatic Lateral Flow test.
- What is the legal basis for collecting the personal data: Where personal data is processed in response to the Covid-19 pandemic, the following lawful basis applies:
- GDPR Article 6(1)(e) – the processing is necessary for the performance of its official tasks carried out in the public interest in providing and managing a health service
Where special categories personal data is processed by the NHS COVID-19 app, the following lawful basis applies:
- GDPR Article 9(2)(g) – the processing is necessary for reasons of substantial public interest in the basis set out in Part 2 of Schedule 1 of the Data Protection Act 2018 (para 6 (Statutory and government purposes)).
- GDPR Article 9(2)(h) – the processing is necessary for medical diagnosis, the provision of health treatment and management of a health and social care system.
- GDPR Article 9(2)(i) – the processing is necessary for reasons of public interest in the area of public health.
- DPA 2018 – Schedule 1, Part 1, Section 2(2)(f) – the management of health care systems or services.
- DPA 2018 – Schedule 1, Part 1, Section 3 – public health purposes.
- Who do we share the information with: We don’t share the data we collect with anyone. The data is collected as part of the first step to booking a Covid-19 asymptomatic Lateral Flow test, which will lead to the data subject submitting more data as required by the National Health Service in a process that is independent of our initial collection.
- Whether the information will be transferred to a country outside of the EU: The data collected by us is not shared with a third party or transferred outside Brunel. The data collected is to facilitate the initial registration process leading to a Covid-19 asymptomatic Lateral Flow test.
- How long the data will be stored, and if possible, the criteria for that retention period: We will keep the personal data collected for seven days and after that we will delete from our systems.
- The data subjects have the following rights:
- access to the individual’s data
- rectification
- erasure
- restriction of use
- objection to the use
- data portability
- The right to lodge a complaint with the ICO regarding the use of personal data.