Falmouth University Privacy Notice for Research Impact Evaluation data collection

Falmouth University is committed to protecting the personal data of individuals who engage with us as we evaluate our research activities to ensure they are benefiting people, place, and environment. This notice outlines how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and all other current data protection legislation. 

How does this privacy notice relate to other privacy notices? 

If you engage with the University as part of a Research Impact Evaluation activity, this privacy notice will apply. If you provide us with your email address, then the Email Subscribers Privacy Notice will also apply. This notice, Research Impact Evaluation, will still apply to your data which we process as part of your engagement and will continue to be relevant even after you have engaged with us. 

What personal data will be processed? 

The personal data in the information you provide may include some (but not necessarily all) of: 

  • Contact details: Name, email address, postal address. 
  • Records of communications sent to you by the University or that we receive from you. 
  • Any other information you provide to the University either in person or by other means. 
  • We may also in some cases process any special category information that you choose to provide, such as about health, sexual orientation, racial or ethnic origin, political opinions, or religious or philosophical beliefs. You will always be able to opt out of providing this information.  

Why are you processing this personal data? 

The University will process your personal data for the following purposes: 

  • Monitor and evaluate research project benefits: Measure outcomes, track impact, and identify areas for improvement. 

What is your legal basis for this processing? 

Our primary legal basis for processing your personal data for research impact evaluation is that it is necessary for the performance of a task carried out in the Public Interest, also known as a Public Interest Task. 

When we process special category data, such as information about health, ethnicity, or sexual orientation, we will only do so with your explicit consent. Providing this data is entirely voluntary, and you must actively consent for the University to process it. 

In limited circumstances, we may also process your data where it is necessary for our legitimate interests, provided these are not overridden by your own rights and interests, or where we have a contractual obligation to do so. 

Will any data be shared with a third party? 

Your information is stored in line with the requirements of the UK GPDR and will only be accessible to University staff who require it to conduct the research evaluation.  We will never sell your personal data or share it with external organisations for commercial or marketing purposes. 

We may share anonymised, aggregated data in our research publications.  Additionally, we may be legally required to share certain data with statutory bodies, such as specific UK Government departments, to fulfil our legal and regulatory obligations. 

How long is my personal data kept by the University? 

The information you provide to the University will be kept for up to 8 years after your last engagement with us, or until you tell us you no longer want the University to hold your personal data. 

Data provided to Government Departments under the University’s legal obligations may be kept for longer periods of time for statistical analysis. We will securely delete or anonymise your personal data once complete. 

Your rights under the UK GDPR 

You have the following rights under the UK GDPR: 

  • Access to your personal data: You can request a copy of the personal data we hold about you. 
  • Rectification of inaccurate data: You can ask us to correct any inaccurate or incomplete information about you. 
  • Erasure of your data: You can ask us to delete your personal data in certain circumstances. Where data has been analysed and used in reporting, erasure of data may no longer be possible. 
  • Restriction of processing: You can request that we restrict the processing of your data under certain conditions. 
  • Data portability: You can request to receive your personal data in a portable format. 
  • Right to object to processing: You can object to the processing of your personal data in certain circumstances. 

How to exercise your rights 

To exercise any of your rights under the UK GDPR, you can contact our Data Protection Officer at: 

DPO@Falmouth.ac.uk 

You can also contact the Research and Knowledge Exchange team at  

research@falmouth.ac.uk 

Complaints 

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). 

Changes to this Notice 

We may update this privacy notice from time to time. We will notify you of any changes by posting the new notice on our website. 

Contact us 

If you have any questions about this privacy notice, please contact our Data Protection Officer at the email address provided above. 

Effective date: 27/05/2026