City Hall, Cathays Park
Cardiff, CF10 3ND
Media Cymru Privacy Notice
Media Cymru is a research and development programme led by the Creative Economy Unit of Cardiff University and funded by the UK Research and Innovation (UKRI) Strength in Places Fund, the Welsh Government, and the Cardiff Capital Region (CCR) City Deal. Media Cymru aims to accelerate growth in the Cardiff Capital Region’s media sector.
The Data Controller
Cardiff University is the Data Controller for the Media Cymru programme and is committed to protecting the rights of individuals in line with Data Protection legislation.
What information do we collect about you?
Media Cymru collects the following data:
- Personal identification information (first and last name, email address, phone number, IP address) and other similar business information.
- Other data provided by you via our application forms and through surveys, monitoring forms and other research means.
- Usage data of our services and support offers.
- Financial details that demonstrate your eligibility when applying for grant funding.
How do we collect your data?
We collect data and process data when you:
- Register online for our e-newsletter.
- Register to participate in our events and trainings/courses via our website form.
- Apply for funding or support from Media Cymru projects.
- When you receive funding and support from Media Cymru projects.
- Voluntarily complete a survey or monitoring form.
- Participate in Media Cymru activities and research projects.
- Provide feedback or get in contact with us via email.
- Use or view our website via your browser’s cookies.
- Engage and follow us on social media (Twitter and LinkedIn).
How will your information be used?
Media Cymru collects your data so that we can:
- Send you regular updates via our e-newsletter if you subscribed to the service.
- Email you opportunities for support and/or collaboration with Media Cymru, we think is relevant for you.
- Improve the services and support of Media Cymru.
- Process your data to receive grant support and or funding from Media Cymru.
- Process your data for research purposes (for further information on our research ethical framework please visit link).
- Process your data for the evaluation of the Media Cymru programme and reporting to relevant organisations.
- For audit and evaluation purposes your data will be used for the purpose of complying with applicable legislation (including but not limited to subsidy control legislation).
Who will we share your data with?
If you agree, Media Cymru will share your data with our consortium partners and funding organisations for the above-mentioned uses. If you are successful in receiving Media Cymru support, the processing of your data will be detailed further in any contractual agreement.
Some processing may be undertaken on the University’s behalf by an organisation contracted for that purpose. Organisations processing personal data on the University’s behalf will be bound by an obligation to process personal data in accordance with GDPR legislation.
Consortium Partners and Funding Organisations
BBC Cymru Wales
Cardiff Capital Region
Cardiff Metropolitan University (PDR)
Dragon Post Wales
Ffilm Cymru Wales
Seren Virtual Production
University of South Wales
For funding applications: the decision-making panel
How do we store your data?
Data Protection legislation requires us to keep your information secure. This means that your confidentiality will be respected, and all appropriate measures will be taken to prevent unauthorised access and disclosure. Only individuals who need access to relevant personal data will be authorised to do so and will be instructed about confidentiality of your data. Information about you in electronic form will be subject to security restrictions, while paper files will be stored in secure areas with controlled access. You can find out more by referring to the University Information Security Policies.
Media Cymru further processes and stores your personal data in a password protected customer relationship management (CRM) system. Our current CRM system provider is HubSpot. You can read their Privacy Notice at: https://legal.hubspot.com/privacy-policy
What is our legal basis for processing your personal data?
Secondary funding competitions application process – contract.
Research and evaluation – public task and consent.
Events, newsletters and communications – consent.
Financial details to demonstrate eligibility for funding – legal obligation to collect this data as per subsidy control legislation.
The legislation gives individuals a specific right to withdraw consent and you have the right to withdraw consent at any time by unsubscribing from the newsletter using unsubscribe links or contacting us regarding your data.
What are cookies?
A cookie is a tiny text file that contains information that may be passed between your browser (e.g. Internet Explorer, Chrome, Firefox, or Safari) and a computer running a website (typically the site that set the cookie). It does not contain any code and cannot do anything. Most websites set them, and many cannot function properly without them. Typically, they just contain an identifier so that the server knows that it has seen this visitor before. New visitors to the website are served with a cookie preference banner from CookieYes where users can provide controlled consent for features including social media sharing and selected analytics.
How long will your information be held?
Media Cymru will retain and store personal data for the lifecycle of the programme (1 January 2022 – 31 December 2026). We may be required to retain your personal data after this date for evaluation purposes and this will be for no longer than is necessary. We are also required to maintain records of all expenditure and income on the project (including any match-funding or in-kind contributions) for six years until April 2033 for audit and evaluation purposes.
What are your rights?
Please visit the University Data Protection webpages for further information in relation to your rights.
How to make a complaint
If you are unhappy with the way in which your personal data has been processed, you may in the first instance contact the University Data Protection Officer:
The Data Protection Officer
University Secretary’s Office
30-36 Newport Road
Cardiff CF24 0DE
You also have the right to apply directly to the Information Commissioner.
Information Commissioner’s Office,