How we use the data submitted as part of your application

Our lawful basis for processing the data submitted as part of your application is contract. More information about lawful bases for processing data is available on the Information Commissioner's Office website.

We retain this data for 10 years on successful acceptance to the University when your information will be converted to create a student record, after such time it will be securely destroyed. Where you do not progress to study your data will be retained for a period of 2 years; after that time it is deleted securely. 

As a data subject you can request withdrawal of consent at any time by contacting gdpr@derby.ac.uk.

Our Data Protection Officer (DPO) is James Eaglesfield on +44 (0)1332 591762. Our Deputy DPO is Helen Rishworth on +44 (0)1332) 591954. Alternatively you can email gdpr@derby.ac.uk.

Further information on how we handle your information can be found on our Privacy Notices.