STEAMhouse Contacts
1. Who are we?
STEAMhouse is a higher education corporation of Birmingham City University, who is a data controller registered with the Information Commissioner’s Office (ICO).
2. What type of personal data is collected?
Information you give us: When you visit the STEAMhouse website and / or book to attend an event or course at / through BCU’s STEAMhouse, you will provide us some personal information. You may give us information about you by filling in forms or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you book for an event or course, register to use our site, subscribe to our service, participate in discussion boards or other social media functions on our site, and when you report a problem with our site. Examples of the information you give us may include your name, address, email address, phone number, staff or student ID, date of birth, access or dietary requirements, qualifications / admission criteria, personal description and photograph.
Information we collect about you: with regard to each of your visits to our website and booking system we may automatically collect the following information: technical information, including the IP address, your STEAMhouse / booking system login information, operating system and platform; information about your visit to the website, including the URL clickstream to, through and from our site.
Information we receive from other sources: we may receive information about you if you use any of the other websites we operate or the other services we provide. In this case, we will have informed you when we collected that data that it may be shared internally and combined with data collected on this site. We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive relevant information about you from them.
The legal basis for using this personal information is ‘contract’ (which means the processing is necessary for the performance of a contract with you or in order to take steps at your request to enter into a contract). In this case the ‘contract’ is the booking that you are making.
Where other lawful bases do not apply, we will process your data on the basis of your consent. For example, we would ask for your consent to send you electronic marketing communications or if we asked you for special category information (for example information about your health, race, ethnic origin or sexual orientation - which would only be collected for equal opportunity monitoring purposes).
3. How will the personal data be used and how long is it kept?
We will use your personal information to:
- process your booking and facilitate the provision of the event or course
- to administer our site and for internal operations, including data analysis, testing, research, statistical and survey purposes;
- to allow you to participate in interactive features of our service when you choose to do so;
- to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
- to send your information about products, services and opportunities. If we have your consent to send electronic marketing to you, we might use your contact details for that purpose. Please note, consent is not required for postal marketing.
We could keep your personal information for 7 years after the end of the contract (e.g. event or course) although we would securely destroy it sooner if it no longer had any use. When this time has been reached, the personal information is securely destroyed.
4. Who can access my personal data and will they share my personal data with anyone?
Your personal data will only be accessible to people who need it to process the booking, run the course and associated activities, administer any qualifications or to market other opportunities to you (if you had provided consent, where relevant) or for whom the personal data is relevant for their STEAMhouse related functions. Hard copies of personal information are kept in a secure location and personal data stored electronically is on secure systems within the UK or EU.
We share relevant personal data with organisations that we are working with to run the event or course, as well as suppliers, sub-contractors and funders to enable them to make the event or course and associated activities happen. They might also be data controllers of the personal data (if they are using it for their own purposes) or they might be data processors (using it only for the purposes that BCU decides). BCU will not sell your information for any purposes. BCU will not share your personal data for any electronic marketing purposes unless you have provided consent for this. Where events / courses are run by more than one organisation and you provide your personal data to one of the organisations that is not BCU, they might share that personal data with BCU for the same reasons as described above. BCU would process and protect this personal data in the same way as the personal data you provided directly to BCU. We may share minimal personal data with analytics and search engine providers that assist us in the improvement and optimisation of our website and booking system.
In addition to the circumstances stated above we will share your personal information if we believe someone’s life is in danger or if we believe we are compelled to by law.
5. What rights do I have regarding my personal data?
You have the right to correct or update your personal data at any time. Please get in touch with your main contact at the University to update your details. If you are a BCU student, your main contact for this is your Faculty Student Centre. If you cannot contact them, please email informationmanagement@bcu.ac.uk to update your personal data. You may have the right to have your personal data deleted, the right to restrict processing, the right to object and / or the right to data portability and you have the right to know about and challenge automated decision making and profiling. Follow the links to find out whether those rights apply in these circumstances. To do any of those things or if you have followed the links but would like clarification, please email informationmanagement@bcu.ac.uk.
You have the right to request see the personal data we hold about you. You can contact our Data Protection Officer by email informationmanagement@bcu.ac.uk or by post to Data Protection Officer, Information Management Team, Birmingham City University, Floor 1, Joseph Priestley Building, 6 Cardigan Street, Birmingham, B4 7RJ.
You have the right to lodge a complaint with the Information Commissioners Office about the handling of your personal data and can find out more about this on their website.