Data Protection

Under the UK GDPR / Data Protection Act 2018 and EU GDPR, we have a legal duty to protect any personal information we collect from you. We do not pass on your details to any third party or government department unless you give us permission to do so or the law requires/permits it.

As a data controller we have to notify the Information Commissioner of the types of personal information we process and for what purpose we use it for and whom we share it with. The Information Commissioner's Office is the UK's independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

You can see what is recorded on our Data Protection Notification entry if you search for the University of Derby on the information commissioners website and notification number Z859984X.

We use and share your personal information in order to identify, plan, deliver and monitor services that we provide to you. We respect everyone's right to privacy and we are fully committed to the principles of the Data Protection Act 2018 and GDPR.

• Individual rights
• Changes to the Data Protection Act - GDPR
• Data Protection statements
• Record of processing activities

Need advice?

You can contact us at gdpr@derby.ac.uk