Research Volunteers Privacy Notice

Introduction

LSTM is committed to ensuring that your privacy is protected and will only process personal data in accordance with the Data Protection Act 2018 and UK General Data Protection Regulation (UK GDPR) and any other applicable data protection legislation.

What information is being collected & what is the legal basis for collecting your data?

We collect contact information including:

• Name
• E-mail address
• Telephone number.

We also collect limited health information (special category data), such as smoking status, where this is relevant to the research studies we recruit participants for.

The lawful basis for processing your personal data is LSTM’s legitimate interests in maintaining a register of volunteers who may be contacted about opportunities to participate in future research studies. Where we collect special category data, such as health information, we rely on your explicit consent.

If you are successfully recruited into a future research study you will be provided with an updated privacy notice for the study which will set out the lawful basis for processing your data in relation to the study you are participating in.

How are we using your data?

LSTM uses your personal data to help researchers identify suitable participants for future research studies and to contact you about opportunities to take part in relevant research.

How is your information collected?

We collect data via encrypted online forms wherever possible. Paper versions of forms are also used where necessary, for example at events where device connectivity cannot be guaranteed. All the collected information is screened and quality checked by research staff, and an initial confirmation message will be sent to you electronically.

How is your information processed?

LSTM uses secure IT systems, including Microsoft services and specialist research recruitment software, to manage volunteer information.

Appropriate technical and organisational measures are applied to keep personal data safe including limiting access to data to those who have a business need to access it within LSTM.

When LSTM uses a supplier appropriate due diligence is undertaken to ensure that they also have appropriate security measures in place.

If information is transferred outside the UK, appropriate safeguards will be used to ensure personal data remains protected in accordance with UK data protection law.

Who will your information be shared with?

Volunteer information is only accessible to a small team of research staff at LSTM who specialise in research participant recruitment.

With your agreement, your information may be shared with other LSTM researchers so they can contact you about their studies.

Retention of your data and updating your information
We store your information until you ask us to delete it. We will periodically contact you to check that you are still willing to be contacted about research participation opportunities.

Your rights and how to find out what information we hold about you

The GDPR gives individuals the following rights, it should be noted that these rights are not an absolute:

1. The right to be informed
2. The right of access
3. The right to rectification
4. The right to erasure (to be forgotten)
5. The right to restrict processing
6. The right to data portability
7. The right to object
8. Rights in relation to automated decision making and profiling

These rights may be limited where data are processed for research purposes.

How to contact us

If you would like further information or to make an access request for your personal data, please contact the LSTM data protection officer dataprotection@lstmed.ac.uk, 0151 702 9323, or by post to:

Data Protection Officer
Liverpool School of Tropical Medicine
Pembroke Place
Liverpool
L3 5QA
United Kingdom