Enquiry and prospectus request forms privacy notice
The information that you provide will be held in accordance with the Data Protection Act 1998, and from 25 May 2018 the General Data Protection Regulation. Your personal data will be collected and processed for the purpose of allowing you to make an enquiry to University of Nottingham, or to request a prospectus.
The University of Nottingham is registered as a data controller with the Information Commissioner’s Office (registration number Z5654762).
How information about you may be used
Your personal data will be processed and stored by a third-party processor, Gecko Labs Limited, on behalf of the University of Nottingham.
The University of Nottingham will use your personal data to process your enquiry, to send you an electronic or hard copy prospectus, to communicate with you to provide you with information relating to your enquiry, or for statistical purposes and internal reporting.
We may share your personal data with other internal departments including with relevant academic departments, marketing and admissions. Where your personal data is shared internally, this will be in order to allow us to process your enquiry or prospectus request, and to send you marketing communications, if you have given us your explicit consent to do so.
The University will not disclose your personal data to any external third party, other than as set out above and/or where you have given us permission to do so, unless we are required to do so by law.
The personal data that you provide for the purposes of making an enquiry to, or requesting a prospectus from, University of Nottingham will be held by the University of Nottingham up to your expected date of entry.
Under the General Data Protection Regulation, the University must establish a legal basis for processing your personal data and communicate this to you. The legal basis for processing your personal data for responding to your enquiry or prospectus request is that processing is necessary for the purposes of legitimate interest pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject. The legal basis for processing your data for marketing purposes is based on the consent of the data subject.
Your right of access to your personal data
You have a right to request a copy of the information that we hold about you. If you would like to request a copy of some or all of your personal data, please contact the University’s Governance and Information Compliance team.
We want to make sure that your personal data is accurate and up to date. You may ask us to correct or remove information that you think is inaccurate.
Your other rights as a data subject
The GDPR provides you, as a data subject, with a number of rights in relation to your personal data. You have the right to withdraw your consent where that is the legal basis of our processing, have inaccuracies in the personal data that we hold about you rectified, a right to erasure, to request that the processing of your personal data be restricted, to object to certain processing activities and to complain to the Information Commissioner's Office about the way we process your personal data.
Changes to our privacy notice
We will keep our privacy notice under regular review and we will place any updates on this web page and inform data subjects of this change. This privacy notice was last updated on 2nd March 2018.
University of Nottingham privacy statement
The University of Nottingham’s Full Privacy Statement is located at https://www.nottingham.ac.uk/utilities/privacy.aspx
Who do I contact if I want to know more?
For further information about your right to access information we hold about you, or to make a complaint about the way in which we are handling your personal information please visit our Governance and Information Compliance pages or contact the Governance and Information Compliance Team.
If you are not satisfied with our response or wish to raise a complaint with our supervisory body, you may complain to the Information Commissioner’s Office.