When logging into this website, you will have provided us with information about yourself (‘personal data’). We (The University of Oxford) are the ‘data controller’ for this information, which means we decide how to use it and are responsible for looking after it in accordance with the UK General Data Protection Regulation and associated data protection legislation.
We will use your data to provide you access to the CRAFFT SIMS website and facilitate your use of CRAFFT SIMS, your name and email to identify and track your activity, what NHS site they are authorised to view data for to ensure their access is suitable.
Access to your data within the University of Oxford will be provided to those who need to view it as part of their work in carrying out the purposes described above. Where we use a third party, they are required to take appropriate security measures to protect your data in line with University of Oxford policies. We do not allow them to use your data for their own purposes. We permit them to process your data only for specified purposes and in accordance with our instructions.
We will retain your personal data will be stored until the end of the data retention period as defined within the CRAFFT study protocol.
Your data will be held securely in accordance with the University’s policies and procedures. Further information is available on the University’s Information Security website.
Information on your rights in relation to your personal data are explained here.
If you wish to raise any queries or concerns about our use of your data, please contact us at octru-it@ndorms.ox.ac.uk. If you want to exercise any of the rights described above or are dissatisfied with the way we have used your information, you should contact the University’s Information Compliance Team at data.protection@admin.ox.ac.uk. The same email address may be used to contact the University’s Data Protection Officer. We will seek to deal with your request without undue delay, and in any event in accordance with the requirements of the GDPR. Please note that we may keep a record of your communications to help us resolve any issues which you raise. If you remain dissatisfied, you have the right to lodge a complaint with the ICO at https://ico.org.uk/concerns/.