The Digital Futures at Work Research Centre (Digit) is committed to respecting your privacy. This notice explains how we use any personal information we collect about you and your rights in relation to it. Please read it carefully.
Who we are
Our website address: digit-research.org
What personal data we collect and why we collect it
Contact and chatroom/forum registration forms
We keep contact and booking form submissions for a certain period for customer service purposes, but we do not use the information submitted through them for marketing purposes.
Forms are sent via email and their content is encrypted in transit.
No data from these forms is stored in the website database.
Newsletter subscription
No personal details are stored on the website database.
Submitted details (name and email) are transferred to Mailchimp, our marketing automation platform. You can unsubscribe at any time and your personal data will be deleted.
Mailchimp’s privacy policy: mailchimp.com/legal/privacy/
Chatroom/forum contributions
When Participants leave comments on the site we collect the data shown in the Topics and Replies, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: automattic.com/privacy/. Your profile picture (if you have one) is visible to the public in the context of your comment.
If you upload images to the chatroom, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Our website, like most, uses cookies. You can prevent their use through your browser settings, but you will then not be able to use all the functionality of our website.
We provide more information about the cookies we use in our Cookies page.
Embedded content from other websites
The website includes embedded video content from YouTube. Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Further information about Google’s handling of user data: policies.google.com/privacy.
The website uses web fonts provided by Google but these are hosted locally so no personal data is collected by Google’s content delivery network.
We use a Twitter Feed plugin to display social media content on our website. As a result, our website makes requests to Twitter’s servers in order to display images and videos. These requests make your IP address visible to Twitter, who may use it in accordance with their data privacy policy: twitter.com/en/privacy#update
The Tweets displayed in the Twitter feed include the ability to Reply, Share, or Like the Tweet directly on our website. If you choose to interact with these functions then you will make a connection to Twitter.com, who may collect your IP address, your web browser User Agent, store and retrieve cookies on your browser, embed additional tracking, and monitor your interaction with the widget, including correlating your Twitter account with whatever action you take within the widget (such as “liking” a Tweet), if you are logged in to Twitter. For more information about how this data may be used, please see Twitter’s data privacy policy.
We may also embed audio/visual content from other third-party services such as Vimeo and SoundCloud. Embedded content from these websites behaves in the exact same way as if the visitor has visited these websites. They may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content if you have an account and are logged in to that website.
Vimeo privacy policy: vimeo.com/privacy
SoundCloud privacy policy: soundcloud.com/pages/privacy
See also ‘Third-party Cookies’ on Cookies page.
Security measures
No personal details are stored in the website database by our security plugins.
Some data (including IP address, hostname, location) is temporarily stored in security logs on the server and/or sent via email to alert the website administrator of critical problems or suspicious activities on the site.
Analytics
We use Google Analytics to track how our site is being used: how users find our website, how they move around on it, how long they stay for.
No personal data is sent to Google Analytics. No Remarketing or Advertising features are set and IP addresses are anonymised while tracking. We enable support for user opt-out and exclude tracking for users sending Do Not Track header.
See also Cookies.
Who we share your data with
Except as set out here, we do not share, or sell, or disclose to a third party, any information collected through our website.
How long we retain your data
We will keep contact form entries and chatroom/forum registration records for the duration of the Digit project (five years).
What rights you have over your data
You can request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
The website is hosted at SiteGround in datacentres located in London (UK). It is protected by 256-bit encryption. SSL certificate provided by Let’s Encrypt from the Internet Security Research Group (ISRG).
Siteground security details: siteground.com/datacenters/
Let’s Encrypt privacy policy: letsencrypt.org/privacy/
Website administrator emails reside in the data centres of Zoho.com, which adhere to GDPR: zoho.com/gdpr.html
Emails to Digit from the website contact and chatroom/forum registration forms reside in the email servers of the University of Sussex.
Website database backups are encrypted and stored at Amazon S3 – server located in London – and at Microsoft’s OnDrive – data centres located in GB – for up to 1 year.
AWS data privacy statements: aws.amazon.com/compliance/data-privacy/
Microsoft’s privacy commitment: microsoft.com/en-gb/trust-center/privacy
Additional information
How we protect your data
We have various measures in place to protect the website from malicious attack, including firewall protection, malware scanning, bot/spam blocking and encryption.
What data breach procedures we have in place
The website has internal reporting systems and contact mechanisms to alert us to any malicious activity on the site.
Contact information
If you have any privacy-specific concerns, please contact the Data Protection Officer: Alex Elliott, GDPR@sussex.ac.uk.
Last updated: 5 February 2021