Our responsibilities and legal basis for processing your data

As part of our work we process and store personal information relating to students, staff, alumni, current and potential supporters and friends of the University and we therefore adhere to the Data Protection Act 1998. We take our responsibilities under this Act seriously and ensure the personal information we obtain is held, used, transferred and processed in accordance with the Act. When this Act is updated, revised or replaced we will review our data processing practices as required by and in line with the most up-to-date legislation.

The University processes the information outlined in this Privacy Notice in pursuit of our legitimate interests in:

• Communicating with students, staff, alumni, and current and potential supporters;
• Providing benefits and services to students, staff, alumni and supporters;
• Furthering the University’s educational charitable mission (which includes fundraising and securing the support of volunteers);
• Enabling the University to achieve its strategic and operational goals.
  

We may pursue these legitimate interests by contacting you by telephone, email, mail or social media. Information about how you can manage the way that we contact you, including how to opt out from some or all contact from the University here.

Whilst the University relies on legitimate interest as the legal basis for processing where the interests and rights or freedoms of the data subject concerned it recognizes that it is not the only lawful ground for processing data do not override this. As such, where appropriate the University will sometimes process your data on an alternative legal basis – for example, because you have given us consent to do so.