Leiden University Privacy Statement on Research on Research Institute

This privacy statement sets out how your personal data is used in relation to the Research on Research Institute (RoRi), including the website at https://researchonresearch.org/. This privacy statement does not cover any research-based activities undertaken in relation to RoRI, for which separate privacy statements will be provided.

Why is Leiden University processing personal data for The Research on Research Institute?

The Research on Research Institute (RoRI) is a collaboration between Leiden University, The Wellcome Trust Limited (as sole trustee of the Wellcome Trust), The University of Sheffield and Digital Science & Research Solutions Ltd (together, RoRI Founding Partners), who collect, store and use personal information about you as joint controllers, and will only use your personal information when the law allows us to. Each Founding Partner has agreed not to use personal data collected in connection with RoRI for its own separate purposes.

Who is responsible for the processing of my personal data?

Leiden University with whom you may have interacted in connection to RoRi is responsible for processing your personal data under the terms of the General Data Protection Regulation (GDPR). If you have any questions, please contact info@cwts.leidenuniv.nl or the Data Protection Officer of Leiden University (privacy@bb.leidenuniv.nl).

If there has been no such direct interaction with Leiden University, and it is not otherwise obvious from the circumstances which Leiden University should have primary responsibility for your personal data, please email hello@researchonresearch.org. 

For what purposes will my personal data be processed and on what legal grounds?

Where you have provided contact details to Leiden University for purposes not directly related to RoRi, Leiden University may use your contact details for purposes that RoRi believe will benefit you and that form an extension of your relationship with Leiden University. One example is notifying you about a RoRi event, for which the legal basis is the legitimate interests and you have the right to object and an opt-out service is provided.

Newsletters and marketing

Where you have provided your opt-in consent to receive newsletters and / or communication in relation to RoRI, the RoRI Founding Partners may use your contact details to contact you about RoRI activities such as events, symposia, etc. To withdraw your consent, please email hello@researchonresearch.org.

Podcasts

Where you have agreed to participate in a RoRI podcast as a participant, RoRI will collect the personal data you provide and use it in connection with that podcast.

This data shall be made publicly available via the following services as part of the dissemination of the podcast:

• [Buzzsprout]
• [Spotify]
• [Apple Podcasts]

Events

When you attend or register for a RoRI event, RoRI will collect the personal data you provide and use it in connection with that event, which may include sharing your details with other attendees and co-organisers, for which the legal ground is consent.    

Who has access to my personal data and will my data be shared with third parties?

In order to process your personal data for the purposes noted above, Leiden University might share your personal data between the RoRI Founding Partners and other participants of RoRI, but will not share your personal data with any external third party data controller.

What personal data are processed?

The following personal data are processed:

• [Name]
• [E-mail address]
• [Social media handles]
• [Affiliation/organisation]
• [Area of research/interest]
• [Job title]

What are my rights on the grounds of the GDPR and how can I exercise these rights?

Under data protection law, you have certain rights in relation to your personal data under certain circumstances. These are:

• Request access to your personal information. This enables you to receive a copy of the personal information RoRi hold about you and to check that RoRi are lawfully processing it;
• Request correction of your personal information. This enables you to have any incomplete or inaccurate information RoRi hold about you corrected;
• Request erasure of your personal information. This enables you to ask RoRi to delete or remove personal information where there is no legitimate reason for RoRi continuing to process it. You also have the right to ask RoRi to delete or remove your personal information where you have exercised your right to object to processing (see below);
• Object to processing of your personal information where RoRi are relying on a legitimate interest (or those of a third-party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where RoRi are processing your personal information for direct marketing purposes;
• Request the restriction of processing of your personal information. This enables you to ask RoRi to suspend the processing of personal information about you, for example if you want RoRi to establish its accuracy or the reason for processing it;
• Request the transfer of your personal information to another party; and
• Withdraw your consent for RoRi to use your personal information at any time.

If you would like to exercise the rights listed above, please email privacy@bb.leidenuniv.nl  or hello@researchonresearch.org.

How long will my personal data be retained?

RoRi collect, store and use your personal information for no longer than is necessary for the purposes for which it was processed.

Any complaints?

If you have a complaint about how Leiden University process your personal data, please contact the Data Protection Officer of Leiden University (privacy@bb.leidenuniv.nl). If you do not agree with the way in which Leiden University handles your complaint, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).    

Last updated: November 2020