Superbugs Data Protection Privacy Notice
Superbugs is an initiative funded by the Wellcome Trust’s Institutional Strategic Support Fund (ISSF) and Cardiff University’s Systems Immunity Research Institute, to provide an educational resource to increase awareness of the microbial world in, on and around us. The Superbugs website combines interactive texts, stories, animations and video, and encourages its users to participate in the investigation of bacteria and antimicrobial resistance by submitting their artwork, images and documents. The website delivers its content virtually but allows live-streaming sessions and the possibility to combine the online experience with in-person events and outreach activities in schools. The partners working together in this initiative are Cardiff University and Swansea University.
Your privacy is important to us, and we are committed to protecting your rights in line with data protection legislation. This privacy notice sets out how we use your personal data. If you have any queries regarding Superbugs you can email us at superbugs@cardiff.ac.uk.
This notice may be updated from time to time to ensure continued compliance with current legislation and to reflect best practice.
Cardiff University and Swansea University are joint controllers of the personal information. With regards to personal data, Cardiff University has overall responsibility for ensuring that appropriate processes are in place for collection, storage, processing, maintenance and retention. As such, Cardiff University has a Data Protection Officer who can be contacted at inforequest@cardiff.ac.uk.
What information do we collect about you and why do we collect it?
For website/social media:
Type of personal data:
Pupils’ name and email address (optional)
Teachers’ name and email address (optional)
School
For teachers – the year group taught and the subjects
For pupils – current year group
Images/photographs/uploads
Purpose: With your consent, we will use this information to showcase the activities that have taken place to promote Superbugs. The information collected will allow us to assess the impact of our website on pupils, teachers and members of the general public. Where you have provided us with a document, image, photo or screenshot, we may choose to display it in the ‘Hall of Fame’ section of our website, without any identifiable information other than the school and the year group (e.g. “Whitchurch Primary School, year 4”).
Legal basis: consent
For events:
Type of personal data: Email address
Purpose: Where you have booked to attend an event, we will provide you with information on attendance.
Legal basis: Performance of a contract; legal obligation
For marketing:
Type of personal data: Email address, Twitter/Bluesky handle
Purpose: Where you have opted in to receive marketing communications, we will use your personal information to contact you with further information on upcoming events.
Legal basis: Consent
Competitions:
Type of personal data: Email address, Twitter/Bluesky handle
Purpose: Where you have participated in a competition where you may be eligible to win a prize we will use your personal information to contact you to be able to send you your prize or certificate.
Legal basis: Legitimate interests
General enquiries
Purpose: Where you contact us we will provide you with any advice and information which you have requested
Legal basis: Consent
We collect information via Google Analytics on how visitors use our website. The information collected includes IP address and a broad geographical region as well as the type of computer and operating system used. This information is not held in a way in which individual users can be reasonably identified and there is no need for us to do so. We use this information, and the information provided via our feedback forms, to help us improve the user experience of the website and to better understand the reach of the initiative. You can opt out from Google Analytics by downloading a browser add-on: Google Analytics Opt-out Browser Add-on Download Page.
How do we keep your information secure?
Data Protection legislation requires us to keep your information secure. This means that your confidentiality will be respected, and all appropriate measures will be taken to prevent unauthorised access and disclosure. Only members of staff from Cardiff University and Swansea University who need access to relevant personal data will be authorised to do so.
Information about you in electronic form will be subject to password and other security restrictions, while paper files will be stored in secure areas with controlled access.
Live sessions over Zoom or Teams will typically be hosted as part of school activities where schools arrange for their pupils to take part, and a teacher will be present with their pupils at all times. Participation in our live sessions is expected to be covered by the participating school’s safeguarding policies. Pupils may choose to keep their cameras switched off if they want. The opportunity to pose questions will be facilitated via the chat function.
How long will your information be held?
Your information will be held for up to 5 years.
What are your rights?
You can find out more about your data protection rights on Cardiff University’s website.
Do we transfer your information outside of the UK?
Generally, information you provide to us is stored on Cardiff University’s secure servers, or on our cloud-based systems which are located, within the UK.
We sometimes use third party organisations to undertake certain processing activities. When we do this, we take organisation measures to protect your personal data in accordance with data protection legislation.
Squarespace – website hosting (location: USA)
Zapier – filtering (location: N/A)
How to make a complaint
If you are unhappy with the way in which your personal data has been processed you may in the first instance contact Cardiff University’s Data Protection Officer using the contact details below:
Data Protection Officer
Compliance and Risk, University Secretary’s Office
Cardiff University
McKenzie House
30-36 Newport Road
Cardiff
CF24 0DE
Email: inforequest@cardiff.ac.uk
If you remain dissatisfied then you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF