Introduction
This website is operated and maintained by the Wellbeing Impact Study of HS2 (WISH2) research team who are based at the RAND Europe Community Interest Company and RAND Europe (EU) AISBL and the University of Cambridge.
Your privacy is important to us and we operate in compliance with GDPR. We strive to ensure that we operate to highest standards with your data. This site sets out how we collect information your data through this site and in your contact with us. To ensure that your data is protected we have a Data Protection Officer responsible for our privacy obligations to you.
Privacy principles
- We shall use your data lawfully, fairly and transparently.
- We shall collect your information for specified, explicit and legitimate purposes and compatible scientific and statistical research purposes.
- Your data collected will be minimised to what is necessary.
- Your data held shall be accurate and otherwise deleted.
- We restrict the time that we can identify you from your data unless it is necessary to enable us to undertake our research and we tell you this.
- We maintain your data to high security standards.
Information we collect about you on this website
We collect information about you through this website:
| Information collected | How we use the information | How we store, share and retain the information | Why we need the information | Legal justification for using the information |
| Your email address and identity and other contact details such as your name and email address, when you provide them to us through our contact page. | To contact you about your interaction with the website. | We will use your information only to respond to your request and then delete it. We will not store it when it is no longer needed to fulfill your request. We will not share your data with any third parties unless we need to do so to fulfill your request (e.g. if you ask to be put in touch with someone) | So we can respond to your contact request. | It is in our legitimate interest to provide you with information or services that you have requested. |
Information we collect from our research participants
If you agree to participate in the WISH2 research, we will collect different types of information from you as outlined in the table below. Under the UK General Data Protection Regulation, the legal justification for using research participant information depends on the type of information and who is using it.
The legal basis under which RAND Europe Community Interest Company (CIC) use participant information is “legitimate interest” or “scientific and research purposes” (depending on the type of information). The legal basis under which the University of Cambridge use participant information is “public task” or “scientific and research purposes” (depending on the type of information). This is subject to appropriate safeguards to ensure the data are secure.
| Information collected | How we use the information | How we store, share and retain the information | Why we need the information | Legal justification for using the information |
| Name and other contact details | Writing, calling or emailing you to collect information from you. In certain circumstances we will associate any information you provide (through surveys, interviews or otherwise) with your identity to check the accuracy of our work. | Your information will not be disclosed to third parties unless we tell you at the time of collection. Any such third parties will only be involved in the delivery of the research and will be restricted to only use the information for the project. Your information will not be used for sale or marketing purposes. | So we can contact you to provide you with full information about the research study, and to tell you about the research project outcomes. We will destroy this information once the study is finished. | It is in our legitimate interest and/or a public task to provide you with information or services that you have requested. |
| Survey and interview or focus group responses including your views and experiences | We use this information to answer research questions that we formulate. Your information may be aggregated, used to inform our research of individual opinions or provide expert insight. | We will collect this data in web forms, transcribed voice and paper surveys, in voice recordings and in written interview records. These are stored on our servers which may access control and limitations on sharing outside either the UK or EU. Your information will not be disclosed to third parties unless we tell you at the time of collection. Any such third parties will only be involved in the delivery of the research and will be restricted to only use the data for the project. Your information will not be used for sale or marketing purposes. | This information will form the body of data to answer our research questions. This ensures that up-to-date and relevant information is brought to bear in providing evidence to support policy and decision making. De-identified copies of this information will be placed in the UK Data Service for use by other researchers, which is a requirement of the funding for this study. | It is in our legitimate interest and/or a public task to process these data. For special category data, which includes health data, we also process information on the basis of it being necessary for scientific and research purposes, subject to appropriate safeguards. |
| Data from your medical records | We use this information to answer research questions that we formulate. Your information may be aggregated, used to inform our research of individual opinions or provide expert insight. | We will store this information on our servers with enhanced access controls and limitations on sharing outside either the UK or EU. Your information will not be disclosed to third parties. | This information will form the body of data to answer our research questions. This ensures that up-to-date and relevant information is brought to bear in providing evidence to support policy and decision making. This information will not be shared outside the WISH2 research team; it will be securely deleted when the research is complete. | We will obtain your consent for access to this information. It is in our legitimate interest and/or a public task to process these data. For special category data, which includes health data, also process information on the basis of it being necessary for scientific and research purposes, subject to appropriate safeguards. |
What rights you have over your data
We operate in accordance with EU law including UK GDPR. This means you have the right to:
- Access, correct or erase your personal data
- Object to the processing of your personal data
- Request that we restrict how we process your data
- Request that your data be transferred
- Withdraw your consent for us to access your data.
If you wish to do any of these things please get in touch with us via the Contact Form.
Changes to this policy
RAND Europe reserves the right to amend this policy at any time. Older versions of this policy are maintained and can be accessed on request to the Data Protection Officer by email at REdpo@randeurope.org or in writing to Data Protection Officer, RAND Europe, Eastbrook House, Shaftesbury Road, Cambridge, CB2 8BF, UK
This notice was last updated on 23rd of January 2024.