COSHH – Privacy Notice

Using your personal information

The University of Strathclyde is the data controller for personal data we hold about you.

What personal information we collect and use

How your personal information will be used:
Who?	What Activity?	What type of data?	Your personal information will be used to:
Registered staff, visitors, postgraduate and undergraduate student users of the COSHH website	COSHH forms	Contact details (username, name, department and email address) Group membership Data stored about you relating to your work or research activities which you provide in your COSHH forms.	Allow you to create, edit and/or digitally sign your required COSHH forms. Control and administer access to your own and other relevant COSHH forms.
Registered staff, visitors, postgraduate and undergraduate student users of the COSHH website	Email	Contact details (name and email address)	Contact you with reminders when COSHH forms require approval, updating, review or editing. Contact you relating to chemical or biological agent requests, modification or approvals.
Registered staff, visitors, postgraduate and undergraduate student users of the COSHH website	Chemical and Biological agent request	Contact details (username, name, department and email address)	Record who requested and/or approved chemical and biological agents held in the COSHH database.

Basis for processing

We are required by law to process data relating to COSHH (Control of Substances Hazardous to Health Regulations 2002).

Who we share your data with

We do not share your personal data with third parties.

How long will we retain your data for?

COSHH data is required to be held for 40 years from date of entry.

Your data

We store this information securely, in accordance with applicable data protection law. Personal information will only be shared with authorised third parties where we are required to do so by law. The information will not be shared for marketing purposes.

Your rights

You have the right to:

request a copy of the personal information about you that we hold.
ask us to delete inaccurate information.
in some cases, you may ask us to restrict how we use your personal information.

If you wish to exercise any of these rights, please contact: dataprotection@strath.ac.uk

Complaints

We seek to resolve directly all complaints about how we handle personal information, but you also have the right to lodge a complaint with the Information Commissioner's Office https://ico.org.uk/concerns/