Student Recruitment & Outreach Office Privacy Notice (Undergraduate Information) 

How we collect your personal data:

The data we collect from you will be used by the University only in accordance with the purposes outlined in this privacy notice. We will collect your data in the following manner:

  • By the electronic mailing list subscription form, the prospectus request form the campus tour request form on the University of Galway website.
  • By surveys hosted on Verint EFM and Survey Monkey.
  • By forms hosted on EmailMeForm, Ticket Source, EventBrite and Microsoft and Google Forms on the University of Galway website.
  • By pop-ups hosted on powr.io app on the University of Galway website.
  • By registration forms hosted on virtual event platforms secured by University of Galway for example Zoom & MS Teams.

The data collected in any form will be shared with the following areas of the University:

  • Student Recruitment & Outreach Office.

Types of personal data collected:

May include request for: name, postal address, email address, gender, mobile phone number, date of birth, current education, preferences and interests.

The purpose and legal basis for collecting your data:

The data we collect about you will be used for communicating with you on university offerings and events, to collect feedback and for market research and analysis. Your contact information may be used to communicate with you by email, post, or SMS text message. We may tailor information to send to you based on your personal data (e.g. information relating to CAO if you are Leaving Cert student) and based on your preferences and interests (e.g. if you indicate you are interest in Arts, we may send you information relating to undergraduate programmes in Arts). 

The University will ensure that your data is processed fairly and lawfully in keeping with the principles of data protection. For the purposes outlined in this privacy notice your personal data will be processed on the basis of consent.

How we store and secure your data 

Any data we collect from you will be stored confidentially and securely as required by the University Information Security Policy. The University is committed to ensuring all accesses to, uses of, and processing of University data is performed in a secure manner.

In keeping with the data protection principles we will only store your data for as long as is necessary. For the purposes described here we will use your personal data up to an including the academic year of your intended year of entry into college. We will store your personal detail in an archive for up to seven years from date of submission.

The data will be stored on secure University systems and on approved third-party systems in some instances (EmailMeForm, powr.io, Campaign Monitor, TicketSource, EventBrite, Microsoft Forms, Google Forms, Verint EFM, Survey Monkey, Zoom and MS Teams). 

The data will not be shared with any third party, with the exception of suppliers (who meet GDPR compliance requirements) who administer some of our communication activity. Any data transferred for approved communication activity is sent via HEAnet file sender.

The data will not be stored outside of the EEA. 

Your data protection rights:

GDPR ensures the rights of the individual are protected. Under GDPR, you have the following enhanced rights in relation to how we use your personal data:

  • Right of access—you have the right to request a copy of the information that we hold about you. (Article 15)
  • Right of rectification—you have the right to correct data that we hold about you that it inaccurate or incomplete. (Article 16)
  • Right of erasure – in certain circumstances, you can ask for the data we fold about you to be erased from our records. (Article 17)
  • Right to restriction of processing—where certain conditions apply to have a right to restrict the processing e.g., transferring data to third parties. (Article 18)
  • Right to data portability—which means you have the right to receive your personal data in a structured, commonly used and machine-readable format with the aim of transmitting that data to another controller (organisation/hospital/research body) without hindrance. (Article 20)
  • Right of objection—you have the right to withdraw your consent at any time to having your data processed under this scheme. (Article 21)

Contact

If you have any queries relating to the processing of your personal data for the purposes outlined above or you wish to make a request in relation to your rights you can contact: 

Sarah Geraghty,
Director,
Student Recruitment & Outreach.
E: Sarah.geraghty@universityofgalway.ie 

If you have any concerns in relation to the above or wish to make a complaint you can contact the Data Protection Officer at:

The Data Protection Officer,
University of Galway, Room A129,
The Quadrangle,
University of Galway,
University Road,
Galway
E: dataprotection@nuigalway.ie
T: +353 91 524 411

 If you are not satisfied with the information we have provided to you in relation to the processing of your data or you can also make a complaint to the Data Protection Commissioner via the link in their website.