Privacy Notice

​Privacy

This statement outlines the information gathered during your visit to the University of Glasgow's central web servers and explains how this information is treated. If you choose to request information from this site you will need to pass personal data to the University through this site. Where you actively provide personal data to the University [for example, by completing a web form] this data will be used only for the service you have requested unless you consent otherwise at the time of submitting the data.

Data protection

The gathering, storage, use, release and disposal of personal information is regulated by the General Data Protection Regulation. The University's policy and guidelines with respect to the regulations, are published by the Data Protection and Freedom of Information Office.

Freedom of Information (Scotland) Act

The records of the University of Glasgow are subject to the terms of the Freedom of Information (Scotland) 2002 Act. The Act gives individuals a general right of access to all types of recorded information, of any age, held by the University. The University's policy and guidelines with respect to the Freedom of Information Act (Scotland) 2002 are published by the Data Protection and Freedom of Information Office.

The information collected

Log files

The University's website does not automatically capture or store personal data from visitors to the site, other than to log your IP address and session information. Session information includes the time and duration of your visit to the site, the files requested, and the browser used. This information will only be accessed by authorised persons of the University of Glasgow or its agents. The information will be retained by the University and will only be used for the purpose of (a) managing the site system, (b)  the identification of broken links, and (c) for statistical and audit purposes.

Web forms

You may occasionally be asked to provide personal information to gain access to specific services. The processing and retention of this information will be explained at the point of collection.

This privacy policy does not cover the links within this site to other non-University sites nor the content of external internet sites.

Cookies

Cookies are small text files placed on your device by the web server via your browser, and may be used to collect information to help identify you and prepare customised pages for you. Cookies may remain on your computer either for the duration of the session or indefinitely. You can configure most standard web browsers to refuse cookies.

Occasionally, we give users the opportunity to save settings for viewing pages. This involves the setting of a cookie. We do not track such cookies. 

Information on cookies can be obtained from www.allaboutcookies.org.

Adjust your preferences

Google Analytics

The University and our authorised agents make use of Google Analytics to produce anonymised statistics on website usage: to help us to improve our site and the experience of our users. Google Analytics uses cookies in this process. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. All data collected is anonymised. 

Clarity

Microsoft Clarity helps us improve the navigation and features on our website, to enhance the user experience.

Privacy Notice for Applicants

Your Personal Data

The University of Glasgow will be what’s known as the ‘Data Controller’ of your personal data processed in relation to your employment relationship. This privacy notice will explain how The University of Glasgow will process your personal data.

Why we need it

As part of any (potential) recruitment process the University will collect personal data relating to applicants or those who register an interest in potential vacancies at the University.

This section of the Privacy Notice provides you with the privacy information that you should be aware of before you provide personal data to the University as part of any recruitment process.

This notice does not form any part of any contract of employment or other contract to provide services.

If you have registered for a job alert/to be informed of forthcoming vacancies we will collect your name and email address and details of the roles which you may be interested in. The information we collate will be what you have submitted to us via our recruitment website or via any direct contact, which you make with the University.

The University collects a range of information about you:

Your name, address and contact details, including email address and telephone number; details of your qualifications, skills, experience and employment history;

information about your current level of remuneration, including benefit entitlements;

whether or not you have a disability for which the University needs to make reasonable adjustments during the recruitment process;

information about your entitlement to work in the UK; and

equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health and religion or belief.

The University may collect this information in a variety of ways. For example, data might be contained in application forms, CVs or resumes, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment, including any tests.

The University may also collect personal data about you from third parties, such as references supplied by former employers, information from employment background check providers and information from criminal records checks. Employment references are normally taken in advance of interview for Research & Teaching and senior professional roles, subject to candidates providing permission for the University to submit such a request on their application form. For other vacancies, employment references are normally taken up beyond the job offer stage, and only once consent has been provided by the candidate to do so. For other pre-employment checks, such as criminal records checks, the University will seek information from third parties only once a job offer has been made to you has been made and will inform you that it is doing so.

Data will be stored in a range of different places, including on your application record, in HR management systems and on other IT systems including email.

Legal basis for processing your data

We must have a legal basis for processing all personal data. In this instance, the legal basis is contract.

The University needs to process data to take steps at your request prior to, and in the course of, entering into a contract with you.

In some cases, the University needs to process data to ensure that it is complying with its legal obligations. For example, it is required to check a successful applicant's eligibility to work in the UK before employment starts.

The University has a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from job applicants allows the University to manage the recruitment process, assess and confirm a candidate's suitability for employment and decide to whom to offer a job. The University may also need to process data from job applicants to respond to and defend against legal claims.

The University may process information about whether or not applicants are disabled to make reasonable adjustments for candidates who have a disability. This is to carry out its obligations and enable applicants to exercise their specific rights in relation to employment.

The University processes other special categories of data, such as information about ethnic origin, sexual orientation, health or religion or belief, this is for equal opportunities monitoring purposes.

For some roles, the University is obliged to seek information about criminal convictions and offences. Where the University seeks this information, it does so because it is necessary for it to carry out its obligations and exercise specific rights in relation to employment.

The University will not use your data for any purpose other than the recruitment exercise for which you have applied.

What we do with it and who we share it with

Your information may be shared internally for the purposes of the recruitment exercise. This includes members of the HR and recruitment team, interviewers involved in the recruitment process, managers in the business area with a vacancy and IT staff if access to the data is necessary for the performance of their roles.

The University will not share your data with third parties, unless your application for employment is successful and it makes you an offer of employment. The University will then share your data with former employers to obtain references for you, employment background check providers to obtain necessary background checks (where applicable) and the Disclosure and Barring Service to obtain necessary criminal records checks (where applicable).

The University will not transfer your data outside the European Economic Area but in circumstances where referees identified by you are outside the EEA, we will collect this information.

How does the University protect data?

The University takes the security of your data seriously. The University has internal policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the performance of their duties e.g. IT security policy, encryption policy, all HR policies etc.

Data Sharing with Third Parties

On occasion the University may engage with a third party provider to facilitate some parts of a recruitment process such as the administration of applications and obtaining references. Should the University be engaging with a third party, this will be made clear to candidates as part of the application process.

We require third parties to respect the security of your data and to treat it in accordance with the law. The University and must demonstrate that they have appropriate security, safeguards and policies in place to process your data.

The University will require that any third party storing your data does so securely with access limited to staff who have a requirement to access the data for proper and legitimate purposes to administer the recruitment process.

How long do we keep it for?

Information from potential candidates who have registered/expressed interest in being alerted to job vacancies

For 12 months from the date the interest is registered

Applications from unsuccessful candidates

For 6 months from the date of appointment of the successful candidate or for 6 months from the conclusion of the recruitment process should no candidate be appointed (save for otherwise required for Home Office Visas and Immigration (UKVI) purposes.)

​Applications for successful candidates

​For 6 years from the date of termination of employment (basic record kept indefinitely for historic purposes)

Equality data which is used for monitoring

​For 12 months from date of unsuccessful application then anonymised data retained

Contract of employment

​For 6 years from the date of termination of employment (basic record kept indefinitely for historic purposes)

If you fail to provide personal information:

If you fail to provide certain information as part of the recruitment process when requested, depending on the nature of the information which has been withheld, the University may not be able to progress your application.

How we use particularly sensitive personal information:

Special categories of sensitive personal information require higher levels of protection. We may process such data in the following circumstances:

1.In limited circumstances, with your explicit written consent;

2.Where processing is necessary for carrying out our obligations and exercising our or your rights in relation to employment;

3.Where we need to carry out any legal obligations;

4.Where it is needed in the substantial public interest or for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, e.g. for equal opportunities monitoring;

Less commonly, we may process this information where it is needed in relation to legal claims, or where it is needed to protect your interests (and you are not capable of giving your consent) or where you have already made the information public.

Equal Opportunities Monitoring

Monitoring is a key process for the successful implementation of equality and diversity policies, action plans and conducting Equality Impact Assessments (EIAs).

Monitoring will help identify areas where more work is required to ensure our University staff composition reflects the local, national and international communities; it will also assist with identifying where we are exceeding local and national averages for participation.

Data is kept confidentially and is protected by the Data Protection Act 2018. When diversity data is analysed and published, it is not on an individual level. The Equality Act public sector duty guidance recognises and respects this good practice.

For further information, please visit :https://www.gla.ac.uk/myglasgow/equalitydiversity/monitoring/ .

What are your rights?

As a data subject, you have a number of rights. You can:

1.access and obtain a copy of your data on request;

2.require the University to change incorrect or incomplete data;

3.require the University to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; and

4.object to the processing of your data where the University is relying on our legitimate interests as the legal ground for processing.

If you would like to exercise any of these rights, please contact the Data Protection Office, 0141 330 3111)

If you believe that the University has not complied with your data protection rights, you can complain to the Information Commissioner.

If you wish to exercise any of these rights, please contact dp@gla.ac.uk.

*Please note that the ability to exercise these rights will vary and depend on the legal basis on which the processing is being carried out.

“The information provided in this application form and any supporting documentation (including the equality and diversity monitoring section) is true and complete. I understand that any offer of employment may be conditional upon satisfactory screening. I agree that any deliberate omission, falsification or misrepresentation in the application form or supporting documentation will be grounds for rejecting this application or subsequent dismissal, if employed by CoreHR. This also applies to any medical questionnaire/forms I may complete. I understand I may be contacted by the CoreHR at any date regarding my application.”

Declaration by Applicants

When you submit an application to the University of Glasgow you must confirm that you agree to these Terms and Conditions of Use, including the following declaration.

“The information provided in this application form and any supporting documentation (including the equality and diversity monitoring section) is true and complete. I understand that any offer of employment may be conditional upon satisfactory screening. I agree that any deliberate omission, falsification or misrepresentation in the application form or supporting documentation will be grounds for rejecting this application or subsequent dismissal, if employed by the University of Glasgow. This also applies to any medical questionnaire/forms I may complete. I understand I may be contacted by the University of Glasgow at any date regarding my application.”

Criminal Conviction Data

Any details that you provide will be treated in the strictest confidence and will not automatically exclude you from being considered for this or any other vacancy. Certain posts are exempt from the Rehabilitation of offenders Act 1974, applicants for such posts are required to declare all criminal convictions, spent or unspent. Posts which fall under the exemption will be clearly marked within the job description. Successful applicants for such posts will be required to undergo a satisfactory enhanced Disclosure check through Disclosure Scotland prior to appointment. Please note it is a criminal offence to apply for a child care position if you are on the Disqualified from Working with Children List.

Complaints

If you wish to raise a complaint on how we have handled your personal data, you can contact the University’s Data Protection & Freedom of Information Office who will investigate the matter.

Our Data Protection and Freedom of Information Office can be contacted via the links on the following page: https://www.gla.ac.uk/myglasgow/dpfoioffice/

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO) https://ico.org.uk/

People XD Accessibility - What to do if you can’t access parts of this website

We want as many people as possible to be able to use this website, if you need further information, please visit our Accessibility Statement:

  • https://www.gla.ac.uk/legal/accessibility/statements/peoplexd/