Privacy Statement
Pwy ydyn ni
This website is operated by Cardiff University. The University is the “Data Controller” for the information collected through this site.
What information we collect
When you complete the questionnaire, we collect:
- Your responses to the questionnaire (your “scores”).
We do not collect or store any information that directly identifies you (such as your name, email address, or IP address).
If you choose to send your scores to someone else, we will process that transmission only for the purpose of delivering the scores. We do not retain the recipient’s details after the scores are sent.
How we use your information
We use the questionnaire scores to:
- Provide you with feedback based on your responses.
- Support research, teaching, and service evaluation by the University (in anonymised and aggregated form).
We do not use your information for marketing or profiling, and your scores cannot be traced back to you.
Legal basis for processing
Under the UK General Data Protection Regulation (UK GDPR), the University processes this information on the basis of:
- Task in the public interest (Article 6(1)(e)), in support of research and education.
- Where applicable, legitimate interests (Article 6(1)(f)) to operate and improve the service.
As no special category or identifying data is collected, further legal bases are not required.
Where your data is stored
Your anonymous questionnaire scores are stored securely on University servers located in the UK. Access is restricted to authorised staff only.
How long we keep your data
Your scores are kept for as long as is necessary to provide you with feedback and to support anonymised research and evaluation. Since the data is non-identifiable, it may be retained indefinitely in aggregated form.
Your rights
Because your scores are stored without identifying details, the University cannot directly link data back to you. This means that rights such as access, rectification, and erasure normally do not apply, unless you provide additional information that allows us to identify your record.
You have the right to contact the University’s Data Protection Officer if you have concerns about how your data is handled.
Contact us
Data Protection Officer:
Data Protection Officer
Compliance and Risk, University Secretary’s Office
Cardiff University
42 Park Place
Cathays, Cardiff
CF10 3BB
Supervisory Authority: You also have the right to raise concerns with the UK Information Commissioner’s Office (ICO): https://ico.org.uk
Welsh 
English