Privacy Notice for Email Marketing

Your Personal Data

The University of Glasgow will be what’s known as the ‘Data Controller’ of your personal data processed in relation to email marketing from the Scottish Graduate School for Arts & Humanities (SGSAH).This privacy notice will explain how The University of Glasgow will process your personal data. All data will be exclusively used by the Scottish Graduate School for Arts & Humanities.

Why we need it

We are collecting your basic personal data such as name and email address and, where relevant, limited special categories data (such as information relating to your academic studies) in order to provide relevant and timely email marketing should you opt-in to receive such information. We will only collect data that we need in order to provide and oversee this service to you. This information will not be used for any other purpose and will not be passed on to any other organisation for the purpose of allowing them to contact you for marketing purposes. SGSAH and only SGSAH will contact you.

Legal basis for processing your data

We must have a legal basis for processing all personal data. In this instance, the legal basis is:

  • Consent – upon registering for email marketing we will ask that you opt-in to receive emails from us.

What we do with it and who we share it with

  • All the personal data you submit is processed by our partners at Mailchimp.
  • This data is then used only in the facilitation of sending you SGSAH email marketing.

In addition,

  • In doing so your data will be transferred outside of the EU to Mailchimp’s servers in the USA.
  • All passwords are hashed, and the entire website is encrypted with TLS. Login pages and logins have brute force protection and Mailchimp perform regular external security tests.
  • Information on how you use your account may be used for automated decision making and to inform which emails we send you.

How long do we keep it for

Your data will be retained by the University for as long as you remain subscribed. Upon unsubscribing your data will be securely deleted.

What are your rights?*

You can request access to the information we process about you at any time. If at any point you believe that the information we process relating to you is incorrect, you can request to see this information and may in some instances request to have it restricted, corrected or, erased. You may also have the right to object to the processing of data and the right to data portability.

If you wish to exercise any of these rights, please contact admin@sgsah.ac.uk

*Please note that the ability to exercise these rights will vary and depend on the legal basis on which the processing is being carried out. 

Complaints

If you wish to raise a complaint on how we have handled your personal data, you can contact the University Data Protection Officer who will investigate the matter.

Our Data Protection Officer can be contacted at dataprotectionofficer@glasgow.ac.uk

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO) https://ico.org.uk/