This privacy notice explains who we are, how and why we collect and use personal information about you, what personal data is collected, our purposes and lawful bases for processing, who we share your personal data with, relevant retention periods, and how you can exercise your privacy rights. Please do read this notice to understand our practices and if you have any questions please contact us using the contact details provided below.
Who we are
Throughout this notice, “University”, “we”, “our” and “us” refer to the Manchester Metropolitan University, an exempt charity under Schedule 2 to the Charities Act 1993 (amended by the Charities Act 2011). The University is the Controller in respect of the personal data you provide and we gather as part of your use of the Mcr Met Food app.
The University is registered as a Controller with the Information Commissioner’s Office (ICO). We manage personal data in accordance with the General Data Protection Regulation (GDPR) and the University’s Data Protection Policy.
Data collected
The personal data collected when you register for and use the app include:
- Your name
- Your email address
- Record of your purchases
- Whether you are a student, staff member or a visitor
Purposes of processes
This personal information will enable us:
- To record your purchases for the purposes of administering a loyalty points system based on the volume of purchases.
- To conduct analytics activities in order to help drive relevant offers personalised to your individual purchase history.
- To conduct promotional and marketing activities, such as communicating personalised offers.
- Your email address is your unique identifier to assign loyalty points to your user account and will be used to notify you of special offers and offers available in Mcr Met Food outlets.
Recipients
The University does not sell or disclose your personal data to any third parties unless legally obliged to do so or there are exceptional circumstances. We do use the services of Kappture for the provision of the tills and as a data processor to assist us to deliver the MCR MET FOOD app services and maintain the app. Inevitably in providing these services they will have access to some personal data. They are bound by data protection legislation and the terms of a contract to only use personal data for the specific purposes instructed.
Lawful basis for processing
We rely upon the article 6(1)f - legitimate interests lawful to process your personal data in the ways described above. We believe we process your information in ways which you would reasonably expect and which involve minimal privacy impact to you.
Push notifications
You are able to opt out of receiving our push notifications at any point, this can be amended within the app settings.
Retention
You may remove this app from your mobile device at any time. By removing the app you will no longer receive any information on offers or be able to redeem vouchers. Removing the app does not delete your account or personal data collected. You are able to request the deletion of your account by sending a request via email to: [email protected].
Period of inactivity – If the account is not used for a period of 18 months we will assume it is no longer in use and delete the account.
Further information
Please see our FAQs, these provide further information and may help to answer your query. For further information about data protection at the University, your data subject rights and how to exercise them and our full index of privacy notices please see our data protection pages.
Contacting us
For any further information about this privacy notice, the Mcr Met Food app or our use of your personal data please contact: [email protected] in the first instance.
Our Data Protection Officer can also be contacted using [email protected], by calling 0161 247 3884 or in writing to: Data Protection Officer, Legal Services, All Saints Building, Manchester Metropolitan University, Manchester, M15 6BH.
Right to lodge a complaint with supervisory authority
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) as the supervisory authority in respect of the processing of your personal data.
We would encourage you to expend our internal complaints procedure through our initial contact and the University Data Protection Officer, prior to contacting the ICO. Please contact: [email protected] or telephone: 0303 123 1113. For any further contact information, visit the ICO website.
Updates to this privacy notice
We may update this privacy notice from time to time in response to changing legal, technical or business developments. When we update our privacy notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.