Privacy notice for businesses, organisations and other external stakeholders

Data Controller

The Data Controller is the University of Brighton, Mithras House, Lewes Road.

If you would like information about how the university uses your personal data please contact dataprotection@brighton.ac.uk, 01273 642010.

Data Protection Officer

The Data Protection Officer is responsible for advising the university on compliance with data protection legislation and monitoring its performance against it.

If you have any concerns regarding the way in which the university is processing your personal data, please contact Rachel Page, Head of Data Compliance and Records Management, 01273 642010 dataprotection@brighton.ac.uk.

What information does the university collect?

The university collects and processes a range of information about you. It is likely that you will give us information when you make an enquiry to the University, share a business card or if you book to attend an event. In some cases this information will be in the public domain – for example company, organisation or public office websites/directories.

This includes:

• your name, email address, a contact telephone number and on occasion, your business address;
• details of your engagement or nature with the University, and details of other organisations that you may have represented while engaging with the university.

We do not process "special categories" data.

Why do we collect your data?

We use your data so that we can deliver the services you have accessed, to engage with you or to respond to your issue – this could include:

• To invite you to an event or conference on a topic you have expressed interested in/have an associated interest in
• To send you communications about the work of the University as it relates to the topic you have expressed an interest in/have an associated interest in
• To seek your official support or opinion on matters related to the University and Higher Education
• To respond to requests for further information

How your data is held?

Your personal data is held within our content management system, our CRM system (including ThankQ data base) and our email system. It is accessed by staff within the University who manage areas your details are attached to.

Who has access to data?

Your information will be shared internally to enable us to best deliver the services you have enquired about, to monitor our engagement and manage relationships.

The University will not share your data with third parties, unless you are a member of the Green Growth Platform.

• If you are a member of the university’s Green Growth Platform, the University may share personal data about you with third parties, specifically the University of Portsmouth’s Greentech South, and Liverpool John Moores University’s Eco Innovatory as part of the Clean Growth UK network 

How does the university protect data?

The University takes the security of your data seriously. It has internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.

Where is your data held?

Your data is held on our CRM system and our email system, it may also be held on our Content Management System if you have provided your information via a web form on the University’s website.

All data relating to business engagement is held within the EEA and will not be transferred outside of the EEA.

How long will we keep your data?

We will retain your data for two years from the last point of activity with us, after which point it will be deleted.

For engagement in an official public capacity, we will retain your data for as long as you are in office – after which data will be transferred to incoming officials.

Data subject's rights: access, rectification, erasure, restriction of processing, objection to processing, right to data portability

As a data subject, you have a number of rights. You can:

• access and obtain a copy of your data via a subject access request
• require the university to change incorrect or incomplete data
• require the university to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing
• object to the processing of your data, in certain circumstances, for example, where the university is relying on its legitimate interests as the legal ground for processing; or for direct marketing purposes
• ask the university to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override the university's legitimate grounds for processing data
• withdraw your consent at any time, where we have requested and obtained your consent
• where our lawful basis is consent or performance of a contract we will allow portability of your data.

If you would like to exercise any of these rights, please contact Rachel Page, Head of Data Compliance and Records Management, 01273 642010, dataprotection@brighton.ac.uk.

Whether providing personal data is a statutory or contractual requirement and the consequences for failing to provide the data

There is no statutory or contractual requirement to provide your personal data to us, we are processing it under legitimate interest as you have indicated that you are interested to receive information on one of our business services.

The existence of automated decision making, including profiling, information about the logic involved, including the significance and the envisaged consequences of such processing for the data subject

We will not use your personal data for automated decision making / or profiling about you as an individual.

The right to complain to the ICO

If you are unsatisfied with the way the university has processed your personal data, or have any questions or concerns about your data please contact dataprotection@brighton.ac.uk.

If we are not able to resolve the issue to your satisfaction, you have the right to apply to the Information Commissioner’s Office (ICO).

Privacy notices

Changes to this notice

We keep our privacy notices under regular review. This privacy notice was last updated in April 2019.

Other privacy notices

We do our utmost to protect your privacy. Please be aware that other privacy notices exist within the university in respect of data held, including but not limited, to activities in relation to your enquiries, application, current students, alumni and use of our website.