Website Privacy Notice

The National Manufacturing Institute Scotland (NMIS) is committed to transparency and to complying with its responsibilities under data protection legislation. This privacy notice sets out important information regarding how we will use your information and your rights under the legislation.

We are required to be transparent as to how it processes personal data. This notice is intended to meet those transparency requirements and to ensure that all website users understand how their data will be used.

Who will process my personal information?

Under data protection legislation the National Manufacturing Institute Scotland is the ‘data controller’. This means that we are responsible for how it uses and processes your personal data and for responding to requests from you in relation to your personal data.

How we use your information

We have set out below: how and why we will use your information; where we obtain your data; how we will use your information; and who it is shared with. For each type of processing, we are required to identify our ‘lawful basis for processing’ – see Appendix 1.

This notice covers personal data collected via the National Manufacturing Institute Scotland’s website, e.g. if you submit a query, etc. If you engage with us for other purposes via our website e.g. complete a web-form. you will be provided with a more detailed privacy notice in relation to that process/service. This is to increase transparency and to ensure you understand how your information will be used. Any additional privacy notices supplement this central notice.

If you have any queries regarding the use of your personal data via the website please contact nmis-enquiries@strath.ac.uk

Our website uses cookies to improve and enhance your website experience, please see our Cookie Notice for further information.

Social media

NMIS operates a number of social media tools such as Facebook, Twitter etc. Where personal data is collected using these tools it will be processed in accordance with the provider’s privacy policy/notice. 

Links to other websites

Our website contains links to other websites run by other organisations. This privacy policy applies only to our website. We are not responsible for the privacy policies and practices of other sites, even if you access them using links from our website.

Is my data secure?

Your personal data will be managed securely. Access will be restricted to only those staff who require it and on a ‘need to know’ basis. NMIS will employ any technical and organisational measures necessary to protect your data. 

How long will we keep your personal data?

When we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected.

At the end of that retention period, your data will either be deleted or anonymised.

Hotjar

We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

Microsoft Clarity

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Your rights

You have the right to:

• find out what personal data we process about you and obtain a copy of the data, free of charge within one month of your request. We may make a charge for additional copies of the same information
• ask us to correct inaccurate or incomplete data
• withdraw consent to process your personal data at any time, if you were asked for and provided consent (and where no other lawful basis for processing applies).

If you think we are acting unfairly or unlawfully you can:

• object to the way we are using your data; and
• complain to the UK Information Commissioner’s Office.

Under certain conditions, you also have the right to ask us to:

• restrict the use of your data e.g. if you have raised issues about the accuracy or use of your personal data until we have investigated and responded to your concerns
• erase your information or tell us to stop using it to make decisions about you; and
• comply with your wishes where you have previously agreed to us processing your data for a particular purpose and have withdrawn your consent to further processing

Please contact us if you wish to exercise/enquire about any of these rights.

Email: nmis-enquiries@strath.ac.uk

To find out more about data protection and your rights please see the Information Commissioner's Office website: www.ico.org.uk

Appendix 1

Administrative purposes

Category of processing	Lawful basis for personal data	Lawful basis for special category data (if applicable)
Managing and responding to enquiries from visitors.	Legitimate interests: to provide requested information to an individual
Use of online chat functionality to communicate in real-time with website visitors.	Legitimate interests Consent (for marketing purposes)
Use of social media management tool to analyse data and manage content.	Consent (for marketing purposes)
Entering into a contract for goods/services	Necessary for the performance of a contract	Substantial public interest Explicit consent