Research on Research Institute Privacy Statement
This privacy statement sets out how your personal data is used in relation to the Research on Research Institute, including the website at

The Research on Research Institute (RoRI) is a collaboration between The Wellcome Trust Limited (as sole trustee of the Wellcome Trust) (Wellcome), The University of Sheffield (Sheffield), The University of Leiden (Leiden) and Digital Science & Research Solutions Ltd (Digital Science) (together, Founding Partners), who collect, store and use a range of personal information about you as joint controllers, and will only use your personal information when the law allows us to. Details of each Founding Partner can be found within their respective privacy statements referred to below. Each Founding Partner has agreed not to use personal data collected in connection with RoRI for its own separate purposes.

It is important that you read this statement, together with the relevant statements of the Founding Partners at the end of this statement.

This privacy statement does not cover any research-based activities undertaken in relation to RoRI.

Types of personal data that RoRI processes

● Name
● E-mail address
● Social media handles
● Opinions / views
● Affiliation / organisation
● Area of research/interest
● Job title
● IP address and log information

Purpose for processing personal data and legal basis

Newsletters and marketing

Where you have provided your opt-in consent to receive newsletters and / or communication in relation to RoRI, the Founding Partners will use your contact details to contact you about RoRI activities such as events, symposia, etc., the legal basis for which is your consent.

To withdraw your consent, please follow the instructions at the bottom of relevant e-mail or otherwise email


Where you have agreed to participate in a RoRI podcast as a participant, RoRI will collect the personal data you provide and use it in connection with that podcast.

This data shall be made publicly available via the following services as part of the dissemination of the podcast:

● Buzzsprout
● Spotify
● Apple Podcasts


When you attend or register for a RoRI event, RoRI will collect the personal data you provide and use it in connection with that event, which may include sharing your details with other attendees and co-organisers (which may include other partner organisations that are involved with RoRI).

Responsibility for your personal data

For the above purposes, the Founding Partner with whom you have interacted (e.g. by e-mail) in connection with the relevant purpose shall be responsible for your personal data in connection with that purpose. If there has been no such direct interaction with a Founding Partner, and it is not otherwise obvious from the circumstances which Founding Partner should have primary responsibility for your personal data, please email

How we share your information

In order to process your personal data for the purposes noted above, the Founding Partners might share your personal data between themselves and other participants of RoRI, but will not share your personal data with any external third party data controller other than as expressly set out in this document. Your personal data will also be shared where it is necessary for legitimate reasons in connection with RoRI, such as to the agents, advisers and service providers used in the running / administration of RoRI. For example, for the functioning of the website, your personal data may be processed by service providers involved in the operation of the website, including Google and Tilda.

Your rights over your personal data

Under data protection law, you have certain rights in relation to your personal data under certain circumstances. These are:

Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it;

Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected;

Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below);

Object to processing of your personal information where we are relying on a legitimate interest (or those of a third-party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes;

Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it;

Request the transfer of your personal information to another party; and

Withdraw your consent for us to use your personal information at any time.

If you would like to exercise the rights listed above, please email

How long we keep and use your information

We will keep and use your information for no longer than permitted by data protection law or until such a time as you withdraw your consent.

We will undertake periodic reviews of your personal data to ensure we are not retaining it for an excessive period of time.

Founding Partner's privacy statements

Please use the links below for more information on how each of the Founding Partners use personal data generally:

1) Wellcome's Privacy Statement that can be found on its website (

2) Sheffield's Privacy Statement that can be found on its website;

3) Leiden's Privacy Statement that can be found on its website and

4) Digital Science's Privacy Statement that can be found on its website (

Last updated: 11 December 2020

Made on