Our Privacy Notice describes how the Fundraising and Alumni Team processes your personal data, helping us develop and maintain engaging services and activities that enrich your experience with the University.
Our Privacy Notice describes how the External and Corporate Relationships department processes your personal data with specific reference to university alumni and development. We will refer to this as ‘ECR’ throughout this statement.
We process your data to help us develop and maintain engaging services and activities which enrich your experience with the University.
Sir David Baxter’s generous donation in 1888 laid the foundations for the Dundee Technical Institute. We have since developed into a dynamic, industry focussed University, with a strong educational offering, known for our creativity and innovation. We have a mission “to offer transformational opportunities” for our students and we work towards this goal in partnership with our alumni, staff, donors and the wider community.
ECR exists to support our alumni, friends and supporters, keeping you informed as to what is happening at the University and beyond: engaging you with relevant activities which may be of interest to you. This includes sharing University, alumni and supporter news and activities, events, reunions, fundraising projects, networking, career and volunteering opportunities.
This Notice sets out how the University’s External and Corporate Relationships alumni and development teams (“ECR”) uses your personal data to help create a mutually beneficial relationship with you, whilst always processing data fairly and securely.
We do value your privacy and we recognise the need to treat your data appropriately in accordance with the Data Protection Act 1998 (DPA98) and the EU General Data Protection Regulation 2018 (GDPR) and the Data Protection Act 2018 (DPA18).
Personal data refers to personal information that we hold about you from which either on its own, or in combination with other information, you can be identified. A list of the data we process is set out below.
Processing means doing anything with your personal data, such as collecting, recording or holding the data as well as disclosing, destroying or using the personal data in any way.
Abertay University is your data controller.
We keep this Privacy Notice under regular review and it may be amended from time to time. Changes to the Privacy Notice will be published on our website.
We collect data from current and potential supporters, who are alumni and non alumni.
We collect information about you if you make a donation or fundraise in aid of Abertay University.
We will include:
Some of the information we process, such as disability details for access to an event, is sensitive personal information that we will not process unless we have your explicit consent, or we are legally required to do so.
We also process sensitive data that you have shared with us e.g. where giving in memory of a loved one and providing health details.
Processing your data helps us to develop and maintain engaging services and activities to enrich your experience with the University. The bases upon which we process your data are public task, legitimate interest, performance of a contract, legal requirement and consent. It enables us to:
1) Communicate and engage with you:
2) Provide you with beneficial services by developing programmes that give you opportunities to:
3) Inform our interactions by:
We will only process your data for the specific purpose, purposes that we tell you, or if specifically permitted by the Data Protection legislation. We will only process your data to the extent necessary for that specific purpose or purposes.
We will sometimes use your data to create profiles that help us to understand, analyse or predict certain aspects relating to you/your behaviour. We use the outcomes to shape our interactions with you, making them beneficial and timely e.g. tailor the communications you receive to ensure you are told about events or let you know about fundraising projects or groups that may interest you.
We collect your data from a variety of sources, including those that are available publicly and information from social media:
We always aim to keep your data accurate and up to date. Data that is inaccurate can be amended on your request. Please notify us if your personal details change or if data we hold about you is inaccurate.
Depending on your privacy settings, we may use social media sites like LinkedIn, Facebook and Twitter and/or other data enrichment services to validate your data and help us maintain our communication with you.
We create and hold your data electronically. ECR considers its relationship with alumni, supporters and other stakeholders as lifelong. If you inform us that you no longer wish to stay in touch or support us, we will maintain enough data to comply with your wishes and ensure that we do not inadvertently re-create a new record for you or communicate with you in the future. As an alumnus we need to retain some core information about your education with us, your academic award(s), and for identification purposes.
We will never sell or share your data to third parties. We will not disclose your data to third parties without your consent, except where they are acting as authorised agents for the University for the above purposes or where we are permitted or required to do so by the Act. If you have given a donation, we may share data to process your donation with your bank, under your instruction. Personal data will not be shared with service providers other than those acting on the instructions of the University. Where this is the case, a written contract will be put in place between the University and the provider to set out the purposes for which the information can be used and the security measures that must be in place. This contract will ensure that the service provider agrees never to use your data for any additional purpose not set out in the agreement with the University.
The University’s alumni and donor database, Raiser’s Edge, is hosted in The Netherlands by Blackbaud Inc, a global non-profit software provider, operating under a Safe Harbour agreement and a formal agreement with the University. The University takes its obligations to your data very seriously and will ensure that all appropriate safeguards and security provisions are in place, and Blackbaud’s compliance with its agreements and privacy notice are monitored.
Please note that by registering for an event via a service such as Eventbrite you will be supplying your personal data to the company/website and as such you are accepting and consenting to the practices in their Privacy Policies.
Abertay University is not affiliated with Eventbrite in any way and is using their services solely for the purposes of facilitating event ticketing and registration and does not accept any responsibility or liability for personal data which you have chosen to provide to such third party sites.
We may have to disclose your data if required to do so by law in order to comply with a legal obligation, for example, to complete The Destinations of Leavers from Higher Education – DLHE and the Graduate Outcomes Survey (created by the Higher Education Statistics Agency), to protect or defend our rights, interests or property or that of third parties act (in urgent circumstances) to protect the personal safety of Abertay University constituents or the public, or protect against legal liability.
You have the right to:
Everyone working at the University has a legal duty to keep information about you confidential. There are strict codes of conduct in place to keep your information safe. Staff abide by the Data Protection Acts 1998 and 2018, the EU General Data Protection Regulation 2018 and the University Data Protection Policy and other IT-related policies.
We ensure that suitable measures are in place to prevent the unlawful or unauthorised processing and against the accidental loss of, or damage to, your personal information. This includes:
You can update your own data or contact preferences at any time by completing this form.
You can also email firstname.lastname@example.org at any time.
If you wish us to stop contact, you can do so completing the following form.
We will still need to retain minimal details about you on our database to:
If you would like to formally access your personal information in the first instance please make a request in writing to:
Data Protection Officer
Dundee DD1 1HG
Tel: 01382 308000 email: email@example.com
You will not have to pay a fee to exercise any of your rights. However, the University may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. You are also entitled to contact the Information Commissioner’s Office (the “ICO”) (www.ico.org.uk) about any concerns about the way the University has handled your personal data. The University would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
From time to time we may use your data for new purposes not described in this Privacy Notice. If there are changes we will always post the policy changes on this Privacy Notice.
Last Updated: December 2019