Skip to content

Privacy Notice

The ‘ART LAB: Art of Antimicrobial Resistance’ project is a Cardiff University public engagement project which aims to engage the public with microbiology and antimicrobial resistance using arts and film. The ART LAB project will collect and process personal data from participants for monitoring and evaluation purposes. This privacy notice describes the data that will be collected and what it will be used for.

Cardiff University is the Data Controller and is committed to protecting the rights of individuals in line with Data Protection legislation. Cardiff University has a Data Protection Officer who can be contacted This notice may be updated from time to time to ensure continued compliance with current legislation and to reflect best practice.

What information we collect about you, why we collect it and our legal basis for doing so?

Data provided by you

Type of informationPurposeLegal basis (as set out in data protection law)
Name, contact email addressTo notify ART LAB art competition entrants about their artwork entry e.g. if they have won a prize and/or their artwork has been selected for display in the art exhibitionLegitimate interest
Art competition category entered (adults’ competition – artistic medium used; children’s competition – age group)To categorise art competition entries for prize giving purposesLegitimate interest
Your artwork and description of the artwork, uploaded to our website form
As an entry into the ART LAB art competition, to be shown on our website and social media accounts. Selected entries will also be displayed in the art exhibition.

The artwork will be credited with your name (but not your contact email address) wherever it is used, unless you specified otherwise in our online form.
Legitimate interest
Postcode, gender, age, ethnicity, disabilityFor equality and diversity monitoringPublic task
Occupation and/or interestsTo understand the background and interests of the audience (e.g. STEM/Arts/other) to determine the reach of our projectLegitimate interest
Perceived levels of knowledge about microbiology and antimicrobial resistance; behaviours relating to antimicrobial stewardshipTo determine if participants have learnt anything new or changed their behaviours as a result of engaging with the projectLegitimate interest
Personal opinionsTo understand participant experiences of engaging with the project (e.g. levels of enjoyment)Legitimate interest

With the exception of your name, contact email and artwork (recorded in order to contact art competition entrants), all other information will be collected anonymously (postcode, gender, age, ethnicity, disability) or anonymised as quickly as possible after data collection so that individuals cannot be identified and your privacy is protected.

Data collected automatically: ART LAB Website

Our website address is  

As you use our website, data about the pages visited (usage statistics) is sent to Google Analytics so that we know how many people are using it. This includes the individual pages visited, an anonymised IP address, the device, browser and the website you came from. Google can also collect demographic and interests information from the DoubleClick cookie, if it’s present on your device.

Data may be held outside of the UK but Google is certified compliant with the EU-US Privacy Shield. The data is stored for 26 months in accordance with Google’s privacy policy. To request this data or ask for it to be deleted contact

The data collected automatically by our website helps us understand which parts of it are most popular, where visitors are coming from and how they are using it. This will allow us to understand how people are engaging with the ART LAB project and improve related projects in the future.

  • Embedded content

Articles on our website site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

How we keep your data secure

Data Protection legislation requires us to keep your information secure. This means that your confidentiality will be respected, and all appropriate measures will be taken to prevent unauthorised access and disclosure. Only members of staff who need access to relevant personal data will be authorised to do so. Information about you in electronic form will be subject to password and other security restrictions. You can find out more by referring to the University Information Security Policies.

Who we share your information with

Personal data will only be shared within the ART LAB team who are all Cardiff University members of staff.

To communicate our research to the public and the academic community your anonymised data may form part of a report, research publication, conference presentation or public talk. These communications will describe the whole participant cohort (e.g. numbers of participants or percentage of participants who learnt something new through engaging with the project) and/or contain anonymised quotes from free text sections of our surveys with your permission.

How long we’ll keep your information

Records of personal information will be only be kept for the duration of the project which ends September 2022.

What your rights are

If you have any concerns or wish to provide us with updated information, please contact us at:

Under Data Protection legislation you have a number of rights such as a right to request a copy of your personal data held by the University. To find out more about your rights and how you can exercise them, please see our web page your data protection rights.

How to make a complaint

If you are unhappy with the way in which your personal data has been processed you may contact the University Data Protection Officer:

The Data Protection Officer
Compliance and Risk, University Secretary’s Office
Cardiff University
McKenzie House
30-36 Newport Road
Cardiff, CF24 0DE


If you remain dissatisfied then you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:

Information Commissioner’s Office
Wycliffe House
Water Lane