Privacy and Cookie Policy

Our Privacy and Cookie policy was updated on 21 February 2018. Our Cookie Policy is now on a separate page.

Our privacy policy

From 25 May 2018, the University will process your personal data in accordance with the General Data Protection Regulation.

One of our responsibilities as a Data Controller is to tell you about the different types of ways in which we collect and use your personal data. This privacy notice provides detail of this.

Why we collect your personal data

The purposes for which your data is being collected may include:

  • Communicating with you about an event for which you have registered
  • Sending you our monthly email newsletter if you have opted in to receive this
  • Facilitating your company’s relationship with the University on an ongoing basis, including keeping a record of events and projects your company has participated in
  • Complying with the monitoring and reporting requirements of our funders

Where does the University get your personal data from?

The University may obtain your data from the following sources:

  • Personal data that we collect automatically from our website
  • Personal data from publicly available sources e.g. via Google, Wikipedia
  • Personal data provided by third parties
  • Personal data provided by you

How we use your personal data

From 25 May 2018, the University will process your personal data in accordance with the General Data Protection Regulation.

The University may share your personal data, including your sensitive personal data, between colleagues and departments who legitimately need access to that information in order to carry out their normal duties to support and facilitate your relationship with the University. (For example, if you attend an event as part of the Enabling Innovation programme, that data will be shared with colleagues also involved in delivering the programme to enable us to effectively administrate the programme.) Your data will also be added to the University’s Customer Relationship Management system to enable us to effectively manage our relationship with your company. Within the University, a number of different teams and departments may be involved in interacting with your company and the individuals within your company. By maintaining a record of your interactions with the University, we aim to avoid duplication of contact and to provide a more streamlined communication process.

How long do we keep your data for?

The University of Nottingham will store your personal data in accordance with its Records Retention Schedule.

When will we share your data with third parties?

We will only share your data with third parties with your prior consent. For example, if you are participating in a funded project with multiple delivery partners such as the Enabling Innovation programme, we will share your data with the other programme delivery partners (in this case Nottingham Trent University and the University of Derby) to enable us to effectively administrate the programme and comply with the reporting requirements of our funders. You will be notified of this data sharing arrangement at the point at which you enrol in the programme.

Legal basis for processing your personal data under the GDPR

Under the General Data Protection Regulation, the University must establish a legal basis for processing your personal data and communicate this to you. The legal basis for processing your personal data on this occasion is:

  • 6(1)(a) +A4:B9 – Consent of the data subject
  • 6(1)(b) – Processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract
  • 6(1)(f ) – Necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.

Your rights as a data subject

The GDPR provides you, as a data subject, with a number of rights in relation to your personal data. You have the right to:

  • withdraw your consent where that is the legal basis of our processing
  • access your personal data that we are processing
  • have inaccuracies in the personal data that we hold about you rectified
  • be forgotten
  • request that the processing of your personal data be restricted
  • obtain a copy of your personal data in a commonly used electronic form portability…
  • object to certain processing activities
  • complain to the Information Commissioner’s Office about the way we process your personal data

If you require advice on exercising any of the above rights, please contact the University’s data protection team on