How we manage your data.

Project: Help us understand your experiences as a Patient Safety Specialist

How will we use information about you?  

The University of Cambridge is hosting this project. We will be using information from you in order to carry out this project, so we are the data controller for this project. This means that we are responsible for looking after your information and using it properly. Thiscovery is collecting information on our behalf and is acting as data processor.

The University of Cambridge will keep identifiable information about you for two years. This will be stored securely by THIS Institute, University of Cambridge. Some of the information that you provide might be considered Special Category data under Article 9 of the General Data Protection Regulation (GDPR). As part of the consent process for this project we therefore need to seek your consent for the processing of this data.

We will need to use the following information from you for this project:  

  • Your consent form.
  • Your name and contact details if you are interested in taking part in the next stage of the project or in being informed about the results of the project.  

People will use this information to do the study or to check your records to make sure that the study is being done properly. Only the direct recruiting team, data management and authorised audit systems will have access to your personal information.

All information for analysis and all reports will be robustly anonymised. Your data will have a code number instead.

We will keep all information about you safe and secure. For more information please see the University of Cambridge privacy notice – how we use your data. In the future, the data may be shared anonymously with other academic researchers working with THIS Institute. These partners will hold a data agreement with THIS Institute and will be bound by the same ethical requirements.  

If you agree to take part in this project, the information we gather may be shared anonymously with academic and commercial researchers external to the project in and outside the UK. This is so that our work can be used to support other likeminded researchers.

Once we have finished the project, we will keep some of the data so we can check the results. We will write our reports in a way that no-one can work out that you took part in the project. Personal identifiable information will be deleted 24 months after the end of the project. This is to allow us to communicate any results from the project to those participants who want to be kept informed and agree to be re-contacted.

What are your choices about how your information is used?

You can stop being part of the project at any time, without giving a reason, but we will keep non-identifiable data that you have already submitted.

We need to manage your records in specific ways for the study to be reliable. This means that we won’t be able to let you see or change the data we hold about you.  

International data transfers  

Some data processing involves trusted technology partners who may process data outside the UK/EEA as part of Thiscovery’s platform infrastructure (such as survey platforms and secure hosting services). When this happens, we ensure your data is protected by:

  • Using partners in countries with UK adequacy decisions where possible
  • Standard contractual clauses providing equivalent protection standards
  • Additional security measures including encryption and access controls
  • Primary data storage remaining in the UK/EEA

Where can you find out more about how your information is used?  

You can find more about how we use your information via the following:  

Get in touch

For questions or concerns about anything to do with the project, please email the project team at pss-psp@thisinstitute.cam.ac.uk. For technical problems or questions about the platform, please contact the Thiscovery team using the chat or email at help@thiscovery.org.  

For any complaints or concerns

If you have a complaint about any aspect of the study, please contact the Director of THIS Institute, Professor Mary Dixon-Woods (mary.dixon-woods@thisinstitute.cam.ac.uk). If you are still not satisfied, you can contact the University of Cambridge Data Protection Officer at dpo@admin.cam.ac.uk.

If you are not happy with their response or believe they are processing your data in a way that is not right or lawful, you can complain to the Information Commissioner’s Office (www.ico.org.uk or 0303 123 1113).