Privacy and cookies notice
The National Heritage Science Forum (NHSF) is committed to a policy of protecting the rights and privacy of individuals in accordance with the Data Protection Act 1998 and the forthcoming General Data Protection Regulation (GDPR) due to come into effect 25 May 2018.
NHSF provides a number of services associated with membership, as well as services that are accessible to the wider public. In the execution of those services, NHSF may collect and hold personal data. This privacy notice relates to personal data collected by NHSF about users of the following services: e-newsletter, website, events, blog, and surveys. NHSF outsources the management of these services to a contractor, Preservation Matters Ltd. This means that personal data associated with the services described below is shared with Preservation Matters Ltd acting on behalf of NHSF and operating under contract to NHSF. NHSF requires that all contractors comply with its Data Protection Policy.
Users should be aware that if they access other websites, using links provided, that these are outside the control of NHSF. If you provide personal data to other companies, the privacy policies of those companies determine the uses to which that information is put.
2 Why NHSF collects personal data
Personal data is collected and held by NHSF for a variety of business functions, including:
- Communication through the Forum’s e-newsletter, blog and website of: news, events, conferences, calls for papers, job opportunities, funding calls, publications, opportunities to contribute to research and collaborative initiatives.
- Promotion and marketing of NHSF
- Understanding the use of NHSF’s services in order to improve them
- Understanding the needs of the heritage science community and wider society
- Administration of events
3 How NHSF uses personal data, consent, and who personal data is shared with
NHSF provides a monthly e-newsletter which is emailed to subscribers through the third-party provider ‘MailChimp’. Subscription to the newsletter is via a consent system. Subscribers provide personal data such as name, email address and organisation (optional) through a MailChimp form that is embedded on the NHSF website. A two-step verification process is followed so that subscribers must confirm their subscription from the link in the email that is sent to them. In addition to the information that enables the distribution of the newsletter, NHSF gathers statistics around e-newsletter opening and click-throughs to help monitor and improve the e-newsletter. You can unsubscribe from the e-newsletter by using the unsubscribe link in any of the newsletters.
The NHSF website uses the following cookies:
Sets the datetime that the user last visited the site, and is set for both guests (website visitors) and logged in users (website administrators).
Tracks the last 5 pages viewed by the user, and is used primarily for redirection after logging in as a website administrator.
Every time the state is updated (the page is reloaded) the last activity is set to the current datetime. Used to determine expiry.
Used only for logged in members (website administrators).
A flag set by the user to determine if they are listed in the online users.
Determines the length of the session for a logged in user (a website administrator). There are two options for this cookie: if the user has selected remember me, it is set to 1 year, and if not then it’s set to the datetime that the user logged in.
Managing your cookies settings
Most browsers allow you to changing your settings and preferences for cookies. You can find out more about controlling or deleting cookies at this website: www.aboutcookies.org
Some of NHSF’s events seek to build partnerships or communities of practice. If this is the case, you will have the option to consent to the sharing of your personal data with NHSF’s partners or other event attendees at the event by providing a hard copy signature on the dated event attendance form. The hard copy signed form is scanned after the event and stored in NHSF’s cloud storage system.
Photography/filming may be take place at NHSF at events. By attending, you consent to be included in photographs/filming which may be used by NHSF to promote its work.
NHSF operates a blog using a WordPress platform. The blog is publicly available at: https://nationalheritagescienceforum.wordpress.com/.
NHSF uses the aggregate statistics generated by WordPress to understand the use of the blog and make improvements to it.
Individuals with a WordPress account can choose to follow the NHSF blog from their WordPress.com account, or anyone can choose to follow the blog by subscribing their email address and confirming via the link sent to that address. Personal data in the form of the follower’s email address is held in the NHSF WordPress account (on the WordPress server) and is used by NHSF to manage blog subscription requests.
NHSF, or third parties engaged by NHSF, may carry out surveys as part of the Forum’s research to inform strategy development for the heritage science sector. You do not have to take part in surveys and if you do, surveys can be completed anonymously and IP addresses are not tracked. Respondents may be given the option to provide personal data including name, email address and employer organisation to enable follow-up activity. The nature of this activity is specified in each survey and is subject to specific consent.
Anonymous raw data may be downloaded and held in NHSF’s cloud storage system for as long as it supports NHSF strategic and operational activities.
4 Accessing your personal data held by NHSF
You have the right to ask NHSF, in writing, for a copy of all the personal data held about you (a ‘subject access request’). If you would like to access your personal data held by NHSF, please write to: firstname.lastname@example.org
5 Accuracy of your personal data
If at any time you want to verify, update or amend your personal data held by NHSF, please write to: email@example.com.
Verification, updating or amendment of your personal data will take place within 28 days of receipt of your request.
NHSF uses secure data networks protected by industry standard firewall and password protection systems. Where the personal data that is provided by you is held on third party platforms (such as MailChimp, Eventbrite, WordPress, OneDrive) it is protected by passwords that are changed regularly. Only authorized individuals have access to these systems.
NHSF does what it reasonably can to protect your personal data, although the security of transmission of information over the internet cannot be guaranteed and hardware or software failure, and other factors may compromise the security of user information at any time.
7 Changes to this privacy and cookies notice
Any changes to this privacy and cookies notice will be posted on this page. This privacy and cookies notice was last updated on 9 April 2018.
If you have any questions about this privacy notice NHSF’s data controller can be contacted at firstname.lastname@example.org or by writing to:
The Data Controller
National Heritage Science Forum
c/o Preservation Matters Ltd
Unit 026C Hurlingham Studios
London SW6 3PA