To ensure that we process your personal data fairly and lawfully we are required to inform you:
We will also explain what rights you have to control how we use your information and how to inform us about your wishes. Durham University will make the Privacy Notice available via the website and at the point we request personal data.
Our privacy notices comprise two parts – a generic part (ie common to all of our privacy notices) and a part tailored to the specific processing activity being undertaken.
The Data Controller is Durham University. If you would like more information about how the University uses your personal data, please review these pages or contact Information Governance Unit:
Telephone: (0191 33) 46246 or 46103
Information Governance Unit also coordinate response to individuals asserting their rights under the legislation. Please contact the Unit in the first instance.
The Data Protection Officer is responsible for advising the University on compliance with Data Protection legislation and monitoring its performance against it. If you have any concerns regarding the way in which the University is processing your personal data, please contact the Data Protection Officer:
Kristina Holt, e-mail: firstname.lastname@example.org
Durham University’s Development and Alumni Relations Office (DARO) supports a global community of stakeholders (students, alumni, parents, donors, mentors, employers, researchers, policy-makers, and advocates) related to the research, engagement and outreach activities pursued by Durham University and its peer organisations. In order to deliver all of the related products, services and opportunities in a bespoke manner and to ensure each individual and constituency receives relevant information, DARO process personal data of stakeholders. This helps to ensure that you are getting the best contact available from DARO for your purposes. This also helps us, where appropriate, to ask for your support with the things we believe you care about the most.
If you are a student/graduate, some of the personal data that the University holds about you is transferred from your student record to the University’s alumni database, Raiser’s Edge. This personal data will have been collected from you as part of your studies application process or provided by you via updates to your department or college during your time as a student and will include:
Some of the personal data the University holds about you has been created by us as part of your education record, namely:
Some of the personal data the University holds about you is provided by you during your transactions with us (contact details updates, www.dunelm.org.uk website activity, event registration, volunteer activity or making/soliciting a donation), namely:
The University may hold personal data relating to your professional history. This data may have been provided by you, or it may have been obtained from social media (e.g. LinkedIn, Facebook) or publicly available sources (Companies House and other business-related resources, the World-Wide-Web, publications and news articles such as Queen’s Honours List, Times Rich List, and the National Change of Address File and other services that provide email addresses and telephone numbers), namely:
The University may hold personal data that has been created by Durham University from other personal data that we already hold (i.e. name, address, postcode, employment data), either through internal or external research/profiling, namely:
When processing your personal data the University relies on a combination of Consent, Contract, Legal Obligation or Legitimate Interests as the legal basis under the GDPR, as detailed in the table below. Where the University relies on Legitimate Interest you have the right to object to your data being processed for the purposes stated (see section entitled How to object to the processing of your personal data). However, if the University stops processing data for the stated purposes this may impact our ability to undertake certain activities that you have asked us to undertake, such as claiming Gift Aid on your donations if you object to your name and address being processed. If this is likely to happen, we may refer back to you to obtain clarification that this is what you intend.
The Legitimate Interests that are being pursued in the processing of personal data are:
Responding to our obligations in relation to the Higher Education Statistics Agency.
Creating your record in our relationship management system (Raiser’s Edge)
Legitimate Interests or Consent
Verifying your identity (alumni)
Legitimate Interests or Contract
Processing your contact preference forms
Meeting our obligations in relation to the Telephone Preference Service
Sending you direct mail by post
Processing your gifts
Contract and Consent
Processing our Gift Aid claims
Consent and Legal
Event registration and management
Volunteer registration and management
Career mentor/mentee registration and management
Legitimate Interests, Contract and Consent
Conducting our telephone campaigns (fundraising)
Identifying potential major gift supporters and qualifying prospective levels of giving
Conducting due diligence on prospective major donors
Legal Requirement or Legitimate Interests
Major donor cultivation and solicitation
Making legacy estimates/valuations
Analysis of visits to our website www.dunelm.org.uk
Analysis of the effectiveness of our email communications
Reporting and benchmarking DARO performance
Responding to our obligations in relation to the Higher Education Statistics Agency
Participating in higher education ranking or league tables providers with whom we hold a data sharing agreement
Personal data of alumni, donors and other stakeholders is stored DARO in a propriety cloud-based database supplied by Blackbaud, Inc. called Raiser’s Edge (RE) under a contract for service. RE is hosted by Blackbaud on their servers located in the EEA. Access to personal data is restricted to the staff in DARO and any other members of the University staff who have a requirement to maintain a relationship with you, and is controlled through password protection and user security profiles. Blackbaud Inc. do not permit their staff to have access to the personal data stored in RE.
The personal data of some alumni and supporters may be stored in a proprietary software application used to manage fundraising campaigns conducted by telephone. This software is hosted in the 'cloud' by the third party supplier only for so long as is necessary for the period of the telephone campaign. Access to the sotware is restricted to students emplolyed under a contract to make calls to alumni and supporters, the campaign manager and DARO staff and is controlled throught user name and password.
All University employees, contractors and volunteers that are given access to personal data receive mandatory Data Protection training and have a contractual responsibility to maintain confidentiality.
Personal data is processed by the Development and Alumni Relations Office and the University’s colleges, departments and Durham Student Organisations to:
Personal data is processed by the University for a variety of purposes (detailed above) for which, in the interests of efficiency or effectiveness, or to meet the specific preferences of data subjects, profiling takes place. For example:
Automated decision-making takes place in only a limited number of instances (for example, to produce ask amounts for the periodic telephone campaigns) but there would be no legal or significant impact on you as a result of this decision making.
Personal data is shared with third party organisations in a limited number of instances.
If you are a member of the alumni community of, or have donated to, either of the independent colleges of St John’s and St Chad’s, which are charities in their own right your personal data held by Durham University will be shared with those colleges under a Data Sharing Agreement which requires the colleges to provide assurances of protection of the data.
If you are a member of our alumni and/or donor community and our records show that you reside in the United States of America (USA), your personal data may be shared with the North American Foundation for the University of Durham (Dunelm USA) who have an independent 501c3 status in the USA, for the purpose of alumni relations and fundraising. For students, prospective students/parents, alumni and donors who have interacted with DunelmUSA, a reciprocal data sharing agreement is in place whereby the University may receive personal data relating to you.
The University is required to disclose some personal data of graduates to the Higher Education Statistics Agency (HESA) for the purpose of a survey of new graduates.
Additionally, we share data on a considered and confidential basis, where appropriate, with affiliated organisations and individuals which support and provide services to alumni and supporters, such as volunteer partners closely related to us (e.g. development and advisory board members).
DARO may share personal data with other third party organisations which carry out contracts on behalf of the University (such as a venue hosting a University event). The University will only share personal data that is relevant and proportionate. The University’s partners are subject to contractual agreements which help to ensure compliance with Data Protection legislation. This will happen in the following circumstances:
When DARO shares personal data as detailed above we ensure that security is maintained, using tools such as encryption and secure file transfer protocols.
Personal data is NEVER sold on to third parties.
This information is additional to the information in Part 1 about Retention.
DARO considers its relationship with alumni, donors and other stakeholders to be life-long. This means that we will maintain a stakeholder record for you until such time as you tell us that you no longer wish us to keep in touch. In this instance the University will delete the majority of your personal data it holds, but will maintain basic personal data to ensure that we do not inadvertently create a new or duplicated record in the future.
Individuals have the right to object to DARO processing their personal data for any or all of the purposes set out in this Privacy Notice; they may do so at any time. To exercise this right, please email email@example.com giving clear details of the processing activities and/or types of personal data to which your objection applies (see sections above for descriptions).
When someone visits www.dunelm.org.uk we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be transparent about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
A cookie is a simple text file that is stored on your computer or mobile device by a website's server and only that server will be able to retrieve or read the contents of that cookie. Cookies allow websites to remember user preferences, choices and selections, such as what's in your shopping basket. Durham University Alumni Online Community also make use of the Google Analytics service to understand how you navigate around our site.
This privacy notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.
We keep our privacy notice under regular review. This privacy notice was last updated on 20 November 2018
If you have any questions which you feel have not been covered by this Privacy Notice, please do not hesitate to email us or write to:
Senior Data Officer, Development and Alumni Relations Office, Palatine Centre, Durham, DH1 3LE