Stakeholders and Fundraising

Privacy notice - Stakeholders

The University of Derby’s stakeholders are kept up to date of relevant information regarding the University’s activities and progress, and to develop and maintain relationships, and retain levels of engagement.

The data we hold

The majority of the information we hold is obtained directly from you; and if you interact with any other departments or schools within the University, we may receive data from these areas.

The personal data stored and processed by the University of Derby may include:

How we will use your information

Data Protection law says that we are allowed to use personal information only if we have a proper reason to do so. In the case of engaging with stakeholders, our basis for the use of personal information is legitimate interest. A legitimate interest is when we have a business reason to use personal information. But even then, it must not unfairly go against what is right and best for you.

Unless you have requested otherwise, your data will be used and processed for a full range of stakeholder engagement activities and programmes involving both academic and administrative departments at the University.

These include the following communications and marketing activity, which may be sent by mail, email and telephone.

Tools may be used to monitor the effectiveness of our communications with you, including email tracking, which records when an email sent from us is opened and/or how many links are clicked within the message – the data from such tracking is used in an anonymised and aggregated form.

As part of this, we may analyse the personal information we collect to create a profile of your interests and preferences so that we can contact you in the most appropriate way and with the most relevant information. This allows us to target our resources as effectively as possible which our stakeholders tell us is important for them.

We do not currently take automated decisions about you.

The processing of University of Derby's stakeholder data appropriate to 'legitimate interest', will be completed by a third party and then accessible to the University of Derby.  This third party has been assessed and approved via our Data Protection Impact Assessment process

Our prospect research and wealth screening activities are:

Adhere to guidelines and follow good practise:

Retention of information

We consider our relationships with our stakeholders to be lifelong and we will hold your details until you tell us you no longer wish to hear from us. If we communicate with you because of your professional, civic or elected position we will hold your details for 5 years past your official position coming to an end.

We will always try to ensure that the information we hold about you is up to date, reasonable and not excessive.

In the event that a stakeholder no longer wishes to hear from us their data will be securely destroyed.

You will always have the right to:

Privacy notice - Fundraising

The University of Derby’s prospective supporters, donors and past donors are kept up to date of relevant information regarding the University’s activities and progress, and to develop and maintain relationships, and retain levels of engagement. We work to secure philanthropic support (financial and in-kind) for the university’s students, teaching, research and capital projects.

This policy sets out how the University of Derby uses your personal data for its charitable purposes and is provided in addition to the university’s policies 

The data we hold

The majority of the information we hold is obtained directly from you; and if you interact with any other departments or schools within the University, we may receive data from these areas.

The personal data stored and processed by the University of Derby may include:

How we will use your information

Data Protection law says that we are allowed to use personal information only if we have a proper reason to do so. In the case of engaging with prospective, current and past donors and supporters, our basis for the use of personal information is legitimate interest. A legitimate interest is when we have a business reason to use personal information. But even then, it must not unfairly go against what is right and best for you.

Unless you have requested otherwise, your data will be used and processed for a full range of supporter and donor engagement activities and programmes involving both academic and administrative departments at the University.

These include the following communications and marketing activity, which may be sent by mail, email and telephone.

Fundraising is a key part of University of Derby activities and we are committed to working in a transparent, ethical, responsible and honest way. To reflect this commitment, we are a member of the Fundraising Regulator, adhere to the Regulator’s Code of Practice and we will also always abide by our institutional obligations as an exempt charity. https://www.fundraisingregulator.org.uk/

Our prospect research and wealth screening activities is:

Assisting affective fundraise for the University:

Adhere to guidelines and follow good practise:

The university does not collect and store any bank or credit/debit card details within our database.

The University of Derby is a PCI DSS compliant organisation which means we adhere to high security standards in order to protect your payment card details when you provide us with this information. Bank details used for processing Direct Debits are stored by a trusted third-party, under the Direct Debit Guarantee scheme. Also, please note that we do our best to keep information secure, including the use of SSL technology (secure server software) wherever personal data is collected online.

Tools may be used to monitor the effectiveness of our communications with you, including email tracking, which records when an email sent from us is opened and/or how many links are clicked within the message – the data from such tracking is used in an anonymised and aggregated form.

As part of this, we may analyse the personal information we collect to create a profile of your interests and preferences so that we can contact you in the most appropriate way and with the most relevant information. This allows us to target our resources as effectively as possible which our stakeholders tell us is important for them.

We do not currently take automated decisions about you.

The processing of University of Derby’s stakeholder data appropriate to 'legitimate interest'. will be completed by a third party and then accessible to the University of Derby. This third party has been assessed and approved via our Data Protection Impact Assessment process.

Retention of information

We consider our relationships with our stakeholders to be lifelong and we will hold your details until you tell us you no longer wish to hear from us. If we communicate with you because of your professional, civic or elected position we will hold your details for 5 years past your official position coming to an end.

We will always try to ensure that the information we hold about you is up to date, reasonable and not excessive.

In the event that a stakeholder no longer wishes to hear from us their data will be securely destroyed.

You will always have the right to:

If you have any questions regarding the above privacy notices, please contact us at:

Development and Alumni Relations Office (DARO)
University of Derby
Kedleston Road
Derby
Email: development@derby.ac.uk
Tel: 01332 591368

Data Controller

The Data Controller is the University of Derby, Kedleston Road, Derby. If you would like information about how the university uses your personal data please email us at gdpr@derby.ac.uk or call 01332 592151.

Data Protection Officer

The Data Protection Officer is responsible for advising the University on compliance with Data Protection legislation and monitoring its performance against it. Our Data Protection Officer is Helen Rishworth. Contact our Data Protection Officer

Further information about how we handle your information.

November 2018
  • Updated.
February 2019
  • We have updated this privacy notice to make some sections clearer and easier to understand
  • The data controller section has been moved for consistency.
September 2019
  • We have updated this privacy notice to make some bullet points clearer and easier to understand
  • The title of the page has been altered.
April 2020
  • We have updated this privacy notice to make some bullet points clearer
  • Additional points have been added
  • Some alterations to the body of the text have also been made.
June 2020
  • Data Protection Officer - Updated.