Privacy notice and data

How we use your data

While hosted at the University of Strathclyde, AROS is committed to transparency and to complying with its responsibilities under data protection legislation. This privacy notice sets out important information regarding how we will use your information and your rights under the legislation. It is important that you read this notice prior to providing your information.

The Legislation
The General Data Protection Regulation (GDPR) is new legislation in force from 25th May 2018, and regulates how organisations are allowed to use personal data. This notice is intended to meet the transparency requirements of GDPR, and to ensure that individuals and organisations who interact and work with AROS understand how their data will be processed.


The University of Strathclyde is a data controller under data protection legislation. This means that the University—as host organisation for AROS— is responsible for how it uses and processes your personal data, and for complying with requests from you in relation to your personal data where appropriate under the legislation.


How we use your information
This privacy notice tells you how we handle personal information provided by anyone who signs up for the AROS Newsletter or contacts the AROS team via this website.

What information we collect and use, and why
We collect or use the following personal information as part of AROS Newsletter sign-up so that we can email our newsletter to you: your name and your email.

Lawful basis and data protection rights
Under UK data protection law, we must have a ‘lawful basis’ for collecting and using your data. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases and other rights on the ICO’s website. Our lawful bases for collecting or using your personal information for the purpose of the AROS Newsletter is based on consent. That means that we have permission from you after we gave you all the relevant information during Newsletter sign-up. To be clear, you do have the right to withdraw your consent at any time. Should you choose to unsubscribe, we will delete your information.

Where we get personal information from
We collect your information directly from you during Newsletter sign-up.

How long we keep your information
We will keep your information for as long as the hosting team manage AROS communication during the set-up phase. Information will be securely stored in line with University of Strathclyde Data Management principles. If you unsubscribe from the Newsletter, your data will be deleted. If you have given consent only for use of the data by the AROS hosting team, your data will be deleted at the point at which the AROS hosting team stop managing AROS communication during the set-up phase. If you have provided consent for data sharing (for transparency, we collect this separately), the data will be kept and shared with the future AROS team as set out below.

Who we share information with
If, during Newsletter sign-up, you also provided consent to the AROS hosting team sharing your data with the future AROS team when they take over communication management, we will share your data securely with the future AROS team. They will then get in touch with you to update on how they manage your data for the purpose of AROS communication. At that point the AROS hosting team will delete your data from our secure storage.

Contact for any questions
Any enquiries regarding data protection should be made to the University’s Data Protection Officer at dataprotection@strath.ac.uk.