University of Northumbria Hubbub Website Privacy Notice
1. Introduction and Data Controller
The University of Northumbria at Newcastle (“we”, “our”, “us”) is registered with the Information Commissioners Office as a Data Controller - Registration Number Z7674926. We are committed to processing personal data in accordance with our obligations under the UK General Data Protection Regulation (GDPR) and related UK data protection Act 2018.
This privacy notice describes the type of data we may process about individuals (“you”, “your”) who have applied to or are registered with Northumbria Physiotherapy Clinic (“the Clinic”) along with how and why we process it. It also provides details of how you can exercise your rights under GDPR
2. How do we get your personal data?
Information you give us
You may give us information about you by filling in forms on our site https://giving.northhumbria.ac.uk (the site) or by corresponding with us by phone, email or otherwise. The information you give us may include your name, address, phone number, email address, gift information and your Gift Aid choices. If you wish to alter or remove any information held on you by the Advancement Office more broadly please see the ‘Your rights’ section of the Advancement Office Privacy Notice for information on how to do so.
Information we collect about you when you use this service
With regard to each of your visits to the site we may use Google Analytics to automatically collect the following information: technical information, including the Internet Protocol (IP) address used to connect your computer to the internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from the site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
Information we receive from other sources
We may receive information about you if you use any of the other websites we operate or the other services we provide as outlined in the Advancement Office Privacy Notice. We also work closely with third parties (for example, contractually bound third party service providers) and may receive information about you from them subject to the third parties’ own privacy frameworks, the existence of a business need which has been balanced against the rights and freedoms of data subjects, and an appropriate legal basis for processing the personal information.
3. Processing of Personal Data
For the purposes of the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR), the Data Controller is the University of Northumbria at Newcastle, Floor 1, Pandon Building, Newcastle upon Tyne, NE2 1XE (‘we’, ‘us’, ‘our’) and the Data Processor is Sponsorcraft Ltd, 35-39 Old Street, London EC1V 9HX. Hubbub is a trading name for Sponsorcraft Ltd. The University of Northumbria at Newcastle’s Advancement Office and Sponsorcraft Ltd (Hubbub) will hold and process your data securely in line with all relevant UK legislation related to the storing and usage of personal information. Your personal information will be treated confidentially and handled with the utmost care and respect, and we will never sell, trade or give-away data.
4. Why we process your data and the lawful basis for processing
The first principle of the General Data Protection Regulation (GDPR) requires that whenever an organisation processes personal data, it must be processed ‘lawfully, fairly and in a transparent manner’. This requires is to identify a lawful basis under Article 6 GDPR. The following lawful basis have been identified for us to process your personal data:
6(1)(b) Processing is necessary for the performance of our contract with you, in this case processing your donation. Without this information we would not be able to process your data to fulfil that task.
We will use information provided when you use the Hubbub service:
•to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information and services that you request from us;
•to notify you about changes to our services;
•to ensure that content from the Site is presented in the most effective manner for you and for your computer.
The Advancement Office’s legal bases for processing personal information are outlined in our full Advancement Office Privacy Notice, which forms part of this Hubbub Causes Privacy Notice. You can update your contact preferences or tell us you no longer wish to hear from the Advancement Office at any time by contacting us via vc.giving@northumbria.ac.uk
5. How do we keep your Personal Data secure
As data controller, The University of Northumbria at Newcastle will hold your data securely under the terms of all applicable data protection legislation and it will be treated confidentially and with the utmost care and respect.
The data that we collect from you (‘you’) for processing as part of your use of the Hubbub platform is stored in Dublin, Ireland, hosted by Amazon Web Services (AWS), in line with the EU-approved AWS Data Protection Agreement and Model Clauses.
Stripe holds the highest level of PCI-DSS certification. If you would like to read Stripe's privacy policy you may do so here: https://stripe.com/gb/privacy. No details related to payments are stored by The University of Northumbria at Newcastle or Sponsorcraft Ltd (Hubbub), although we do keep a record of donations.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy and the Advancement Office Privacy Notice.
6. Sharing your Personal Data with Third Parties
We may share information you provide as part of your use of this service with contractually bound third party data processor service providers including suppliers and sub-contractors for the performance of any contract we enter into with you. This includes Sponsorcraft Limited, which operates the site and processes your information on our behalf. The Advancement Office will never sell your data to or trade it with any third parties.
- The Stripe Privacy Notice can be found here https://stripe.com/gb/privacy.
- The Hubbub Privacy Notice can be found here Privacy Notice - https://hubbub.org/privacy/
7. How Long will your Personal Data Held
We are using the site to support fundraising and, therefore, appeals may remain on the platform following the completion of any appropriate fundraising campaign. This is to help show the impact of appeals and the donations that have supported them, and to encourage others to get involved and make a difference. We will periodically review the appeals hosted on the site to ensure that they remain consistent with University priorities, strategy and our educational charitable mission. Cause information will be retained by the Advancement Office subject to its Privacy Notice, which also outlines its data retention policy.
8. What Are Your Rights Under GDPR
GDPR provides individuals a number of rights in relation to the processing of personal data, each of which may apply to differing degrees’ dependent upon the nature of the processing and the legal basis for it. You have the right to:
- Be informed as to how we use your data (via this privacy notice)
- Request access (a copy) of the personal information that we hold about you.
- Correct inaccurate or incomplete data
- Request that we stop sending you direct marketing communications.
In certain circumstances, you may also have the right to:
- Ask to have certain data ‘erased by us.
- Request that we restrict certain processing of your personal data.
- Request that we provide any data you submitted to us electronically be returned to you or passed to a third party as a data file.
- Object to certain processing of your personal data by us
9. Data Protection Officer (DPO) Contact Details
Our Data Protection officer is Duncan James. To exercise your rights, or if you wish to raise a concern about our processing of your data, please contact the DPO on +44 (0)191 243 7357 or via email at dp.officer@northumbria.ac.uk.
10. Lodging a Complaint with the Information Commissioners Office (ICO)
If you are dissatisfied with our processing of your data, or a response to a complaint you have made to us, you have the right to complain to the ICO via Telephone: 0303 123 1113 (local rate) or 01625 545 745, via email: casework@ico.org.uk or for more information see Information Commissioner’s web site.
