How we use the data submitted as part of your application

The information that you supply on your application will be held and processed in line with the Data Protection Act 2018, GDPR and subsequent legislation.

Information will be used by the University of Derby (as Data Controller) to assess your suitability to be accepted onto the course you have applied for, we may also use this data for consideration of an alternative course. In addition your data may be used for statistical analysis.

We may contact you to request any additional information that we require to enable us to consider your application in full or to invite you to interview where applicable. We will contact you to inform you of the progression of your application and to provide additional information to support you through to enrolment and attendance on your programme of study.

It will be shared internally with other departments within the University to ensure fair assessment of your application and to provide relevant support services.

We retain this data for 10 years on successful acceptance to the University when your information will be converted to create a student record, after such time it will be securely destroyed. Where you do not progress to study your data will be retained for a period of 2 years; after that time it is deleted securely.

Our lawful basis for processing the data submitted as part of your application is contract. More information about lawful bases for processing data is available on the Information Commissioner's Office website.

As a data subject you can request withdrawal of consent at any time by contacting

The DPO for the University can be contacted via Further information on how we handle your information and details of our DPO can be found in our privacy policy.