The University of Nottingham is registered as a Data Controller under the Data Protection Act 2018 (registration No. Z5654762).

The University of Nottingham, University Park, Nottingham, NG7 2RD (0115 951 5151), is committed to protecting your personal data and informing you of your rights in relation to that data.

One of the University’s responsibilities as a data controller is to be transparent in our processing of your personal data and to tell you about the different ways in which we collect and use your personal data. The University will process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR, GDPR) and the Data Protection Act 2018 (DPA) and this privacy notice is issued in accordance with the UK GDPR Articles 13 and 14.

We may update our Privacy Notices at any time. The current version of all of our Privacy Notices can be found below, and we encourage you to check back here regularly to review any changes.

The University has appointed a Data Protection Officer. Their postal address is:

Data Protection Officer,
B16 Lenton Hurst,
University of Nottingham,
University Park,
Nottingham
NG7 2RD

They can be emailed at dpo@nottingham.ac.uk and telephoned on (0115) 748 7179.

We hold a range of personal data about you, some of which you may provide to us directly and some of which we may receive from third parties. We collect information about you when you visit our website for the first time, and when you interact with our pages. We also collect information when you voluntarily complete contact forms, provide feedback and submit queries. Website usage information is also collected using cookies.

We only process data for specified purposes and if it is justified in accordance with data protection law.

We use your information collected from the website to personalise your repeat visits to our website, and to help us understand what works and what doesn’t on our website. We’ll use information you submit through our contact forms and other ways of giving feedback to help you with your specific issues.

Processing is necessary for our legitimate interest in giving you information on items that may be of interest or benefit to you. Under the UK GDPR we must establish a legal basis for processing your personal data and let you know what this is. It is in the University’s legitimate interest to process your personal data for the outline above. This processing shouldn’t impact on you negatively and is necessary for our website to function correctly.

We use several different third-party services to process your data, which allow us to give you the best possible experience. If we do want to collect personally identifiable information through our website, we will be up front about this. We always make clear when we collect personal information and explain what we intend to do with it.

We can’t take responsibility for the behaviour of sites linked to or from our website. You should consult their individual privacy policies for more information.

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. For further information visit www.aboutcookies.org or www.allaboutcookies.org.  You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result.

Sometimes we’ll embed content in our pages that we don’t control or operate. This is common for social media sites such as Twitter and LinkedIn. When you interact with these elements, which are always marked clearly, you’ve not interacted with our website but instead the service embedded, and we can’t guarantee what data is collected.

We use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

We use the third-party service, SendInBlue, as our e-mail marketing software, which allows us to give you the best possible experience. We will only use the data you enter when you voluntarily complete contact forms, provide feedback and submit queries for the purpose of sending you our newsletter, in which we provide you with information about our services and news. We do not make, and do not allow SendInBlue to make, any attempt to find out the identities of those visiting our website.

We will only keep your personal data for as long as necessary to fulfil the purposes for which we collected it. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Personally identifiable data that’s used at a top level for the maintenance and upkeep of the website is held in your own browser in the form of cookies, which you have control over. You may delete them at any time. Data collected through contact forms, feedback and queries will be held for a variable amount of time depending on exactly what it’s being used for, but it’ll usually be in line with the University of Nottingham’s retention policy. We’ll always tell you at the point when this data is going to be collected if it’s not.

You have a number of rights under UK GDPR. Further information about these rights and how to invoke them can be found on the University of Nottingham website’s privacy policy: https://www.nottingham.ac.uk/utilities/privacy/privacy.aspx

If you have any questions about this privacy notice or how your data is processed, please contact the data protection team at the University of Nottingham: data-protection@nottingham.ac.uk

This privacy notice is reviewed regularly and we will alert you to any changes we might make