Privacy Notice
A PDF copy of this notice is available: Library Privacy Notice (PDF Download)
On this page:
- About this notice
- What is personal information?
- Who is responsible for my personal information?
- How do you process my personal information?
- Will you share my personal information outside the library?
- What are my privacy rights?
- Are changes made to this notice?
About this notice
This notice provides important information about the collection, use, and disclosure (collectively, “processing”) of your personal information by the UWinnipeg Library. It is relevant to patrons and visitors to the Library’s website. If anything in this notice is unclear or you have questions, please contact Sam Popowich at s.popowich@uwinnipeg.ca. You may also contact the University’s Information and Privacy Office.
What is personal information?
Personal information means any recorded information which relates to you as an identifiable individual. It also includes information which does not identify you explicitly but, when combined with other information reasonably available, may allow you to be identified. Information which cannot be used to identify you, including information where your identity has been removed, is not considered personal information for the purpose of this notice.
Who is responsible for my personal information?
The Library is responsible for the processing of personal information relating to patrons and website visitors. We are the “controller” of this information. We engage the assistance of third parties to carry out certain tasks that involve the processing of your personal information. These third parties are known as “data processors”. We will seek to inform you, whether through this notice or through additional, specific notices, of our use of data processors.
How do you process my personal information?
How your personal information is processed, including where it is stored and for how long, will vary based on your engagement with the Library and its services. Examples of common processing activities are detailed below.
Regular Library Patrons (including UWinnipeg students and employees)
To populate student accounts in our patron database, the Library receives an automatic import of the following information from UWinnipeg’s student information:
- Student type and ID #
- Active directory ID #
- First and last name
- Chosen first, last, and middle name (if applicable)
- UWinnipeg email address
- Preferred email address (if applicable)
- Mailing address
- Phone number
To populate employee accounts, the Library manually enters the following information into the patron database.
- Employee ID #
- Active directory ID #
- First and last name
- UWinnipeg email address
Once your account is populated and a barcode created by Student Central, the patron database creates a record of the items you check out/return and any fees owing/paid.
Data processor: OCLC
Data processor privacy statement: OCLC, INC. PRIVACY STATEMENT
Storage location: OCLC Canadian data centre
Retention period: 18 months
We also retain historical data from previous patron databases on a local server. The types of personal information retained and the purposes of processing are similar to the current OCLC- powered database.
Visiting Library Patrons
To provide loan services to non-campus patrons, the Library collects:
- First and last name
- Email address
- Mailing address
- Phone number
This information is used to create a record of the items you check out/return and any fees owing/paid.
Data processor: N/A
Data processor privacy statement: N/A Storage location:
Local copy Retention period: 5 years
Interlibrary Loan Users
To provide interlibrary loan services, the Library collects:
- First and last name
- UWinnipeg email
- Patron type (undergraduate, graduate, faculty, or staff)
- Patron barcode
This information is used to create a record of the items you loan/return and any fees owing/paid.
Data processor: N/A
Data processor privacy statement: N/A
Storage location: Local server Retention period: 5 years
Chat Reference Users
If you engage with the Library using the online chat feature, the following information is collected:
- Internet protocol address
- Browser information
- Name (optional)
- Email address (optional)
This information is used to provide the chat services and create transcripts for service assessment and training.
Data processor: Springshare
Data processor privacy statement: Springshare Privacy Policy
Storage location: Springshare Canadian data centre; transcripts stored as local copies
Retention period: 2 years
Remote Locker Users
If you use the Library’s remote locker service, your patron barcode is collected and used to provide access to the locker.
Data processor: Bibliotheca
Data processor privacy statement: PRIVACY POLICY FOR BIBLIOTHECA LIMITED
Storage location: Bibliotheca US data centre
Retention period: 6 years
Proxy Users
If you use the Library proxy server to connect with subscription resources from off-campus, your active directory username and internet protocol address are processed to verify your credentials. A record of the items you access via the proxy server is created.
Data processor: OCLC
Data processor privacy statement: OCLC, INC. PRIVACY STATEMENT
Storage location: OCLC Canadian data centre
Retention period: 6 months
WinnSpace Users
When you submit a scholarly work to UWinnipeg’s institutional repository, WinnSpace, the following information is collected:
- First and last name
- Email address
- Phone number (optional)
Any personal information associated with or embedded into the scholarly work will also be processed as shown below.
Data processor: N/A
Data processor privacy statement: N/A
Storage location: Local server
Retention period: Permanent
Borealis Users
When you log into UWinnipeg’s research data repository, Borealis, the following information is collected to authenticate your credentials:
- First and last name
- Email address
- Institutional affiliation
Any personal information associated with or embedded into the data will be processed as shown below.
Data processor: Borealis
Data processor privacy statement: BOREALIS PRIVACY STATEMENT
Storage location: Borealis Canadian data centre
Retention period: Permanent
Will you share my personal information outside of the library?
All personal information held by the Library is subject to the University’s Privacy Policy and applicable privacy legislation, such as Manitoba’s Freedom of Information and Protection of Privacy Act (“FIPPA”). These place strict controls on the sharing of your personal information. Other than with the data processors listed above, we do not routinely share your personal information outside of the Library. In the event of a security incident, we may share your personal information with the University’s Security Services office or local law enforcement. If you do not pay your fines, the Library may share your personal information with collection agencies. We may also share your personal information to investigate and enforce University policies and for purposes permitted under FIPPA.
What are my privacy rights?
Subject to certain limitations, you have the right to request access to your personal information and request correction of your personal information if you believe there is an error or omission. To exercise these rights, please contact Sam Popowich at s.popowich@uwinnipeg.ca or the University’s Information and Privacy Office. Your personal information is collected under the University of Winnipeg Act and 36(1)(b) of the Freedom of Information and Protection of Privacy Act.
Are changes made to this notice?
This notice will be updated as required. It was last updated on February 28, 2023.