Privacy notice

The following information is needed for us to manage your subscription to the Digital Capability Service. We’ll use it, as described in our standard privacy notice, to provide the service you’ve requested, as well as to identify problems or ways to make the service better. We’ll share this information with Potential.ly so they can process the data on our behalf; our contract prohibits them from using the information for anything else. Your data will be shared by Jisc in an anonymised way, enabling us to produce institutional reports with aggregated data only.  We’ll keep the information until we are told that you no longer wish to subscribe. You may instruct us to stop processing it at any time by emailing help@jisc.ac.uk with ‘Digital capability discovery tool stop’ in the title.

 

If you log on with your institution’s Identity Provider we process:

  • The IP address, browser version, service provider accessed and time of access for each authentication request

  • Your pseudonymised user identifier and your affiliation to your organisation

  • Cookies to maintain session state and user preferences

If you create an account and log on with the Jisc Digital Capability Identity Provider we process:

  • The IP address, browser version, service provider accessed and time of access for each authentication request

  • Your email address, encrypted password, pseudonymised user identifier and your affiliation to your organisation

  • Cookies to maintain session state and user preferences


Where is personal data located?

All Overt Software Solutions Ltd hosting servers are located in ISO 27001 data centres in the UK. We also perform encrypted backups offsite to a location in the EU.

Retention periods

Log files are removed after 6 months. User data on the Jisc Digital Capability IdP will remain in place until the user requests that their data be removed or on termination of the service.

Sub-processors

The only sub-processors used are those which provide hosting hardware and infrastructure. They can only access our systems at our request.

 

  • UK hosting supplier: UK Dedicated Servers Limited

  • EU hosting supplier for encrypted backups: Hetzner Online GmbH