Privacy Notice – Midlands Innovation (hosted at the University of Nottingham)
How the University of Nottingham processes your personal data
The University of Nottingham, University Park, Nottingham, NG7 2RD (0115 951 5151), is committed to protecting your personal data and informing you of your rights in relation to that data.
The University of Nottingham is registered as a Data Controller under the Data Protection Act 2018 (registration No. Z5654762).
One of the University’s responsibilities as a data controller is to be transparent in our processing of your personal data and to tell you about the different ways in which we collect and use your personal data. The University will process your personal data in accordance with the UK data protection legislation and this privacy notice is issued in accordance with the UK GDPR Articles 13 and 14.
We may update our Privacy Notices at any time. The current version of our Privacy Notices can be found below, and we encourage you to check back here regularly to review any changes.
The Data Protection Officer
The University has appointed a Data Protection Officer. They can be contacted at: Data Protection Officer, B16 Lenton Hurst, University of Nottingham, University Park, Nottingham NG7 2RD, email: dpo@nottingham.ac.uk.
What information do we hold?
We hold a range of personal data about you, some of which you provide to us directly and some of which we may receive from third parties, such as from event booking platforms or partner organisations. This information may include your name, organisation, and email address, which we use to manage an event registration, newsletter subscription, or engagement with us, and to communicate with you accordingly. Where applicable, we also hold information relating to your dietary and accessibility requirements, which we collect and use solely to support any event attendance and participation.
How do we use it and why?
We only process personal data for specified purposes and where this is justified in accordance with data protection law. This processing is necessary to manage and support engagement with Midlands Innovation and its associated projects, and to keep stakeholders in the Midlands and national research and innovation ecosystem informed and updated with information relevant to them. This includes administering registrations for events run by Midlands Innovation, maintaining contact lists for key stakeholders across our projects, responding to enquiries, managing communications, and improving the services and user experience provided through our websites.
The legal basis for this processing is: legitimate Interests and consent.
We may process special category personal data relating to your health, specifically information about any accessibility requirements you choose to share with us. This information is processed on the basis of your explicit consent and is used solely to help Midlands Innovation make appropriate arrangements and provide any support needed to enable your participation in our events and activities.
What information do we receive from third parties?
We may also receive personal data about you from third parties, regarding information such as:
Who do we share it with?
Where necessary and required Midlands Innovation may share information about you with the following parties:
We share the data for the purposes of legitimate interest.
How long do we keep your data?
The University will only keep your personal data for as long as necessary to fulfil the purposes for which we collected it. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. We will retain your personal data for six years after completion of the activity, event, programme, or engagement for which your data was collected. Following this period, your personal data will be securely deleted or anonymised.
Your rights as a data subject
You have a number of rights under UK GDPR. Further information about these rights and how to invoke them can be found on our website here: https://www.nottingham.ac.uk/utilities/privacy/privacy.aspx
Where can I get more information?
If you have any questions about this privacy notice or how your data is processed, please contact the data protection team at dpo@nottingham.ac.uk.
This privacy notice is reviewed regularly and we will alert you to any changes we might make.
