Data Protection

Under the UK GDPR / Data Protection Act 2018 and EU GDPR, we have a legal duty to protect any personal information we collect from you. We do not pass on your details to any third party or government department unless you give us permission to do so or the law requires/permits it.

As a data controller we have to notify the Information Commissioner of the types of personal information we process and for what purpose we use it for and whom we share it with. The Information Commissioner's Office is the UK's independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

You can see what is recorded on our Data Protection Notification entry if you search for the University of Derby on the Information Commissioners Website and notification number Z859984X.

We use and share your personal information in order to identify, plan, deliver and monitor services that we provide to you. We respect everyone's right to privacy and we are fully committed to the principles of the Data Protection Act 2018 and GDPR.

• Individual rights
• Changes to the Data Protection Act - GDPR
• Data Protection statements
• Record of processing activities

Please be aware that we are currently following the ICO's guidance during the Coronavirus (COVID-19) pandemic. Whilst we will endeavour to meet our statutory timescales, the ICO recognises that during the pandemic there may be understandable delays when making information rights requests. Please see the ICO's guidance for more information.

Need advice?

Contact gdpr@derby.ac.uk or +44 (0)1332 592151.

Our Data Protection Officer is Mrs Helen Selby. You can contact her directly on +44 (0)1332 591954.