Data Protection Statement
We are proud of our alumni and friends and want to stay in touch.
This statement explains how the College (“we” and “our”) handles and uses data we collect about our alumni and our past, current and future supporters and those who have requested to be on our mailing list as a “Friend” of Hughes Hall (“you” and “your”). In broad terms, we use your data to keep in touch with you as alumni (and life-long members of the College) and supporters, in order to keep you appraised of our activities and developments, to provide services to you, and to identify ways in which you can support us, through donations and/or other forms of financial and non-financial support.
The College is currently considering the implications of national changes to data protection legislation, and the obligations of the Colleges to you in helping you understand further how and why we process your personal data. It anticipates that this statement will be revised again within the next six months (i.e. by the end of December 2017).
Your data is used by us for a number of interdependent purposes, including alumni and supporter relations, communications and fundraising. These include:
Communications to you may be sent by post, telephone or electronic means, depending on the contact details we hold and the preferences expressed by you about the types of communications you wish to receive.
If you have concerns or queries about any of these purposes, or how we communicate with you, please contact us at the address given below.
We work closely with the University as a result of their shared interest in having a coordinated approach to their alumni and supporters. We have a separate database from the University, but we also have access to the University’s database: additionally, we maintain other electronic and paper records. Any transmission of data to or from the University is managed through agreed processes which comply with UK data protection legislation. The University has its own data protection statement and procedures.
Most records contain:
Where provided by you, or provided by the University or obtained from reputable sources, we also record:
Where data is included from sources external to the University and the College, we only use data from our partners (as outlined below) or other reputable sources. We may use automated or manual analyses to link data together to help us identify your potential for supporting us and/or the University.
Depending on constraints set by you, and which you may change at any time, we may share any of the above categories of data with the University.
Additionally, we share data on a considered and confidential basis, where appropriate, with:
We do not sell your personal data to third parties under any circumstances, or permit third parties to sell on the data we have shared with them.
We also facilitate communication between individual alumni (of the College or the University), but in doing so we do not release personal contact details without prior permission.
There is no statutory or contractual requirement for you to provide us with any personal data.
You have the right: to ask us for a copy of your personal data (a data subject access request); to object to processing that is causing you, or is likely to cause you, damage or distress; to object to communications or direct marketing; in certain circumstances to require us to correct or erase your personal data; and a right to compensation for damages caused by a breach of the Data Protection Act.
We will retain your data indefinitely or until you request us to do otherwise.
We will publish on our website any changes we make to this data protection statement and notify you by other communication channels where appropriate.
You have the right to lodge a complaint with the Information Commissioner’s Office at https://ico.org.uk/concerns/
Please contact us if you have any concerns or questions about the above information. Where you have specific requests relating to how we manage your data, we will endeavour to resolve these, but please note that there may be circumstances where we cannot comply with your specific request.
Where you opt out of all future communications or exercise your right to erasure, we will continue to maintain a core set of personal data (name, subject(s), matriculation and graduation details, unique University identification number and date of birth) to ensure we do not contact you inadvertently in future, while still maintaining our record of your academic achievements. We may also need to retain some financial records about you for statutory purposes (e.g. Gift Aid, anti-fraud and accounting matters).
If you have any concerns about your personal data held by the University, you will need to contact the University separately.