The University of Nottingham, University Park, Nottingham, NG7 2RD (0115 951 5151), is committed to protecting your personal data and informing you of your rights in relation to that data.
The University of Nottingham is registered as a Data Controller under the Data Protection Act 2018 (registration No. Z5654762).
One of the responsibilities as a data controller is to be transparent in our processing of your personal data and to tell you about the different ways in which we collect and use your personal data. The University will process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR, GDPR) and the Data Protection Act 2018 (DPA) and this privacy notice is issued in accordance with the UK GDPR Articles 13 and 14.
We may update our Privacy Notice at any time. The current version of our Privacy Notice can be found below, and we encourage you to check back here regularly to review any changes.
The Data Protection Team
Ingenuity Impact has appointed a Data Owner and Data Steward. Their postal address is:
Ingenuity Impact (Data)
The University of Nottingham
C03, The Ingenuity Centre
Jubilee Campus
Nottingham
NG7 2TU
They can be emailed at ingenuityimpact@nottingham.ac.uk and telephoned on (0115) 846 6913.
What information do we hold?
We hold a range of personal data about you, some of which you may provide to us directly and some of which we may receive from third parties. This includes but is not limited to contact information, course information, special category personal data (such as age group, gender and gender identity, sexual orientation, disability or health condition, ethnicity, religion or belief, socio-economic information, etc).
How do we use it and why?
We only process data for specified purposes and if it is justified in accordance with data protection law. Unless consent is explicitly obtained, personal data is used for the following reasons:
If you are affiliated with an Ingenuity Impact partner organisation (such as the UK university where you most recently studied or where you are employed) you will be asked to give consent to having your data shared for the above purposes. This will enable relevant partners to provide you with information about any specific funding and support opportunities during and after the programme (where relevant) and it will support their monitoring activity. This processing is justified because we are required to produce a report in order to access statutory funding for both Ingenuity Impact (the University of Nottingham) and for its partner organisations.
The legal basis for this processing is: Consent, Performance of a Contract, Vital Interests, Legitimate Interests.
We also process the following special category personal data about you: racial or ethnic origin, religious or philosophical beliefs, health and sexual orientation. The additional processing condition for this processing is the Data Subject has given explicit consent. Processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes. This processing is justified because monitoring purposes ensure that we are evidencing the diversity of the Ingenuity Impact programme. There may also be specific funding and support opportunities available to underserved and underrepresented social groups taking part in the programme.
Who do we share it with?
We share with the following parties: The Ingenuity Impact University Partner organisation the data subject selects in their initial registration to the programme. It is only shared when the data subject explicitly gives consent in the registration form. We share the data for the purposes of monitoring purposes, making contact and providing details of additional specific funding and support opportunities.
How long do we keep your data?
Ingenuity Impact will only keep your personal data for as long as necessary to fulfil the purposes for which we collected it. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
We retain your data for 6 years after the end of engagement in the programme cycle.
Your rights as a data subject
You have a number of rights under UK GDPR. Further information about these rights and how to invoke them can be found on the University of Nottingham’s website here: www.nottingham.ac.uk/utilities/privacy/privacy.aspx
Where can I get more information?
If you have any questions about this privacy notice or how your data is processed, please contact the Data Steward at ingenuityimpact@nottingham.ac.uk
