Privacy notice

Privacy notice

Privacy notice for patient partners

This notice explains how the University of Aberdeen handles your personal information when you register your interest in patient and public involvement (PPI) activities that take place within the Epidemiology Group and the Aberdeen Centre for Arthritis and Musculoskeletal Health.

Who we are

The organisation responsible for your personal information in terms of data protection legislation is the University of Aberdeen. 

If you have any questions about the University’s handling of your information, or your rights under privacy laws, you can contact the University Data Protection Officer in the following ways:

Information we collect and use about you

You will have provided us with information such as your name, telephone number and/or email address and areas of interest for taking part in PPI activities.

Why we process this information, and our lawful basis

We collect and use your personal information with your consent in order to send you information about taking part in PPI activities that will be used to conduct academic and scientific research with researchers at the University of Aberdeen.

The University is authorised to undertake research under powers provided by the Universities (Scotland) Acts, and also undertakes research in the public interest

Disclosing your information

We will not disclose the information you provided on the sign-up form to any other organisation, other than when required do so by law or with your consent (either verbal or written).

The external suppliers we use for IT support may have access to your personal information in order to provide that service to the University. Our third-party supplier arrangements are regulated by contracts designed to protect the information and limit the way it is used.

How long your information is kept

We will keep information about you for a maximum of 2 years after your last contact with us for PPI activities.

Your rights

You have the right to withdraw your consent at any time for the University to continue to process your information. If you wish to withdrawn consent, please contact us at the following address:

Epidemiology Group
University of Aberdeen
AB25 2ZD


You also have rights to obtain a copy of your personal information, and to ask us to correct inaccurate or incomplete personal information. Under certain conditions, you can ask us to restrict the way we use your personal information, erase your personal information and object to the University processing your personal information. These rights depend on our lawful basis for processing your personal information. This means we may not be able to comply with your request in every case. If we cannot do as you ask, we will always reply to you and explain our position.

There is no charge to make a request, but we may need evidence to confirm your identity before we respond in full.

You can ask about your privacy rights or make a request about your personal information by contacting the University Data Protection Officer:

If are dissatisfied with the way the University has handled your personal information or dealt with your data protection issue, you have the right to lodge a complaint with the Information Commissioner. The Information Commissioner’s Office can be contacted via their website at


Privacy notice for data linkage

The University of Aberdeen is the sponsor for this study based in the United Kingdom. We will be using information from you in order to undertake this study and will act as the data controller for this study. This means that we are responsible for looking after your information and using it properly. The University of Aberdeen will keep identifiable information about you for a minimum of 10 years after the study has finished. Your rights to access, change or move your information are limited, as we need to manage your information in specific ways in order for the research to be reliable and accurate. If you withdraw from the study, we will keep the information about you that we have already obtained. To safeguard your rights, we will use the minimum personally-identifiable information possible.

You can find out more about how we use your information at or by contacting the University's Data Protection Officer on .

The University of Aberdeen will collect information from you for this research study in accordance with our instructions. The University of Aberdeen will use your name, date of birth and contact details to contact you about the research study, and make sure that relevant information about the study is recorded for your care, and to oversee the quality of the study. Individuals from the University of Aberdeen and regulatory organisations may look at your medical and research records to check the accuracy of the research study. The only people in the University of Aberdeen who will have access to information that identifies you will be people who need to contact you for the study or audit the data collection process.

The University of Aberdeen will keep identifiable information about you from this study for a minimum of 10 years after the study has finished. The University of Aberdeen will collect information about you for research purposes from, for example, Information Services Division (Scotland), the NHS Central Register and other NHS organisations. This information will include your name, date of birth, Community Health Index (CHI) number/NHS/hospital number, contact details and health information, which is regarded as a special category of information. We will link the above information to the survey information gathered on this study for research purposes.