Events privacy notice

The Events team is part of the University of Surrey. We are registered as a data controller with the Information Commissioner’s Office and are committed to ensuring that the personal data we process is handled in accordance with data protection legislation. We have a named Data Protection Officer, Suzie Mereweather, who can be contacted via dataprotection@surrey.ac.uk.

The Events team collects and processes the following data about people it keeps on its mailing list: 

  • Name and address
  • Email address (if provided)
  • Phone number (if provided).

We only collect the data we need and keep that data up to date. 

We have this data about you on our mailing list because you were previously invited to an event, you previously accepted an invitation to an event or you provided it when booking for an event.

The University collects only the data we need and we keep the data up to date and only for as long as it is needed. 

We collect your personal data in order to:

  • Send you a personal invitation to a University event.
  • Send you information about events that may be of interest to you and inviting you to register for them.
  • Send you newsletters to keep you up to date about forthcoming events taking place at the University or organised by the University.
  • Enquire if you have received an invitation to a particular event and if you will be attending.
  • Ask for feedback about University events you may have attended which includes surveys.

We do not use the data we collect to make decisions about individuals or to analyse information on an individual level.

We take our obligations for data handling very seriously and it is therefore important for you to know that the lawful basis for us processing your information is that consent has been provided by the data subject and they have given his or her consent for the processing of their personal data for one or more specific purposes.

We collect the data about you from the forms you complete when registering for events, or purchasing tickets for events, or completing online forms, or from the information you provide when contacting us by e-mail or telephone to book to attend an event. The data is then kept in a database and used to contact individuals to achieve the purposes listed above. Some analysis of the data is also undertaken but only in an aggregate form to provide information about the success of events and never in ways in which individuals can be identified.

We keep your personal data in accordance with the University’s retention schedules. This means that your data is kept for 5 years and then destroyed. 

We may share your personal data with the following departments within the University:

  • The University’s Advancement team (who support the University’s alumni community) who work with us to plan events.
  •  The Marketing team who may use the information in an aggregated and anonymous form to assess the effectiveness and success of events.
  • Departments and schools within the University’s academic faculties who may wish to invite you to an event of interest.

Your data will not be shared with any external organisations.

As an individual whose data we process (a data subject), you have certain rights in relation to the processing. Find detailed information about your rights as a data subject.

You have the right to:

  • Withdraw your consent for us to process your personal data where we have relied on that consent as our basis for processing your data.
  • Ask us to confirm that your personal data is being processed and to access (i.e. have a copy) of that data as well as to be provided with supplemental information about the processing.
  • Request that we rectify any inaccuracies where the data we hold on you is inaccurate or incomplete.
  • Have your data erased by us, although in certain circumstances we may not be able to do this. The circumstances where this applies can be found in the guide to data subject rights information.
  • Restrict the processing of your personal data in certain ways.
  • Obtain your personal data for reuse.
  • Object to certain processing of your personal data.

If you would like to exercise any of your rights please visit our make a privacy request section.

Make a complaint

If you have any concerns about the way that we have handled your personal data please email the Data Protection team as we would like to have the opportunity to resolve your concerns.

If you’re still unhappy, you have the right to complain to the Information Commissioner’s Office (an independent body set up to advise on information rights for the UK) about the way in which we process your personal data.