Hey Girls Period Pack Request
Page 1: Privacy Notice
Privacy Notice – University of the Highlands and Islands period product provision
The Data Controller of the information being collected is: University of the Highlands and Islands, Executive Office, Ness Walk, Inverness, IV3 5SQ.
For any queries or concerns about how your personal data is being processed you can contact the relevant Data Protection Officer at dataprotectionofficer@uhi.ac.uk
This privacy statement relates to the following process:
The provision of free period products via Hey Girls.
Your information will be used for the following purposes:
To allow students to access period products, the university has teamed up with the organisation Hey Girls who can send products directly to your home address. You will complete a UHI survey detailing which products you require, and this information will be shared with Hey Girls who will organise for the products to be sent to you.
The processing involves the following processes:
Purpose 1: Provision of the free sanitary products
- You fill in the survey to tell UHI what products you wish to recieve
- UHI shares this data securely with Hey Girls
- Hey Girls may email you to confirm the order and provide updates on delivery
- Hey Girls post the selected products to you
Our legal reason for using the data is/are:
|
Purpose 1: Provision of the free sanitary products
|
Contract – The processing is necessary for the purposes of a contact with you, that being the contract to provide you with free period products
|
|
Purpose 2: Verification and financial record keeping
|
Legal obligation / public task – the processing is necessary for the purposes of checking that orders are valid and money is being spent appropriately and for financial record keeping as required by law and UHI’s public task surrounding how it spends public money.
|
Your data will, or may, be shared with the following recipients or categories of recipient:
Your data (name, address and UHI email address) will be shared with Hey Girls.
Your data will be retained for the following length of time:
Your data will be deleted by Hey Girls sixty days after they post your products. Your data will be deleted by UHI;
1. In the survey – three months from the end of the month in which you submit your order. For example, if you submit an order on the 10th of March, your data will be deleted at the end of June.
1. In financial records – Six years from the end of the financial year in which you place your order.
This process involves your data being sent outside of the UK or is subject to a restricted transfer (transfer outside the control of the UK GDPR).
Hey Girls uses Dropbox as its corporate storage provider. Dropbox uses servers based in Germany. Your data, therefore, may be transferred to Germany as part of providing this service to you.
This international transfer takes place under the following safeguard:
Brexit deal bridge arrangements that allow transfers to and from the UK/EEA until an adequacy decision is decided on.
The following rights are rights of data subjects:
- The right to access your personal data
- The right to rectification if the personal data we hold about you is incorrect
- The right to restrict processing of your personal data The following rights apply only in certain circumstances:
- The right to withdraw consent at any time if consent is our lawful basis for processing your data – you can withdraw consent by contacting support@uhi.ac.uk
- The right to object to our processing of your personal data
- The right to request erasure (deletion) of your personal data
- The right to data portability
You also have the right to lodge a complaint with the Information Commissioner’s Office about our handling of your data.