Brain Images of Normal Subjects

Privacy notice

How we handle data we gather in this service.

What information is gathered?

When you register for the BRAINS Imagebank, the information you provide is

  • your email address

And if you make a data access request you also provide the following:

  • your name
  • your title (optional)
  • your position
  • your address
  • your telephone number (optional)


The data gathered is retained until such a time that you ask us to remove it.

The reason the information is gathered

We use the information to satisfy your request for service, and provide help and support services to you. The information is also used in anonymised aggregated form, to enable The University to improve the quality of service we provide in general, and to provide usage information to our sponsors. We do not use the information for any other purposes.

Legal basis

We collect and use this information under the legal basis: "Consent".

If you receive data from us, i.e. as part of a successful data access request, we collect and use this information under the legal basis: "Public task".

Automated decision-making

This service does not use profiling or automated decision-making processes in relation to you.


The person responsible for this service can be contacted at:

The general University Privacy Statement is continued at

Data controller and contact details

For data collected under this privacy notice, the University of Edinburgh (the “University”) is the Data Controller (as that term is defined in the EU General Data Protection Regulation (Regulation (EU) 2016/679), registered with the Information Commissioner’s Office, Registration Number Z6426984.

You can contact our Data Protection Officer at

Your rights

You have the right to request access to, copies of and rectification or (in some cases) erasure of personal data held by the University and can request that we restrict processing or object to processing as well as (in some cases) the right to data portability (i.e. the right to ask us to put your data into a format that it can be transferred easily to a different organisation). If you wish to make use of one of these rights, please email the contact.

If we have asked for your consent in order to process your personal data you can withdraw this consent in whole or part at any time. To withdraw consent, please email the contact, who will explain the consequences of doing so in any particular case and initiate proceedings for withdrawing consent.


If you are unhappy with the way we have processed your personal data you have the right to complain to the Information Commissioner’s Office at but we ask that you raise the issue with our Data Protection Officer first.