For the purposes of this privacy notice, the University of York is the data controller as defined in the UK GDPR. We are registered with the Information Commissioner’s Office and our ICO entry can be found here. Our registration number is: Z4855807.
Usage data is automatically collected when using the website. This includes information such as:
We may also collect information that your browser sends whenever you visit the website or when you access it by or through a mobile device.
Cookies can be "persistent" or "session" cookies. Persistent cookies remain on your personal computer or mobile device when you go offline. Session cookies are deleted as soon as you close your web browser. We use both session and persistent cookies for the purposes set out below.
Necessary / essential cookies
Cookies policy/notice acceptance cookies
We use Google Analytics on this website. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our website. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network. Data collected by Google Analytics may be kept indefinitely, however, this data is anonymised and is not personally identifiable. This data is stored securely on Google’s own systems and is subject to the terms and conditions of the Google Analytics service.
We may use your personal data (e.g. from usage data) for the following purposes:
We may share your personal information in the following situations:
We will retain your personal data (e.g. from usage data) for internal analysis purposes for up to 12 months, except when this data is used to strengthen the security or to improve the functionality of our service, or we are legally obligated to retain this data for longer time periods.
Data collected by Google Analytics may be kept indefinitely, however, this data is anonymised and is not personally identifiable.
Your information, including personal data (e.g. usage data), may be processed by us, our hosting company and our website service providers. These servers may not be your country of location. This means that this information may be transferred to — and maintained on — computers located outside your country, where the data protection laws may differ from those in your jurisdiction.
If you have requested to join our mailing list we keep details of your name, organisation, job title and email address for the purpose of sending you the requested newsletters. This data is stored on the MailJet system, which we use for sending newsletters. Mailjet is ISO 27001 certified and GDPR compliant. You can unsubscribe using a link in the newsletters or by emailing firstname.lastname@example.org.
Last updated: 18 February 2022