Update Details and Alumni Data Privacy Notice
Make sure we have your up to date contact details so we can keep you in the loop with all things Winton Club.
Registering as a member of the Winton Club
Recent graduates are automatically members of the Winton Club Alumni Association unless we are otherwise notified at the time of your enrolment. If you are not receiving Venta magazine by post or email you may not be a current member of the Alumni Association. To join, please email us on email@example.com
Have you moved house, got married, changed your email address or changed jobs?
Email us on firstname.lastname@example.org to give us your current information.
Alumni Data Privacy Notice
The University of Winchester treats very seriously both the personal data and the sensitive personal data it processes on behalf of primarily its students and staff members, and also a wide range of other people who it works with and has contact with, including alumni.
The University has been and is continuing to work hard to comply fully with the new General Data Protection Regulation (GDPR) which is enforceable from 25 May 2018. The GDPR makes a number of key changes to data protection law in the United Kingdom and within the European Union (EU) and potentially beyond the EU. More information on these changes, which include strengthening of some individual rights and some new individual rights can be found on The Information Commissioners’ Office (ICO) website at: https://ico.org.uk/
The ICO will enforce compliance with the GDPR from 25 May 2018.
The University processes both personal data and sensitive personal data under a range of different ‘lawful bases’ depending on the nature of the respective ‘processing purposes’.
For the ‘personal data’ of alumni, these ‘lawful bases’ include one or more of:
- ‘Public task’ (as the University is designated as a ‘public authority’ in law).
- Legitimate interests; and
- Legal obligation.
In addition for sensitive personal data, the University processes under one or more of the ‘lawful bases’ conditions listed in Article 9(2) of the GDPR.
The ‘purposes of the processing’ range from sharing general updates and news about the University and opportunities for involvement (such as for example as a Former Student Governor in May 2018), to opportunities to attend events, to informing alumni of a Postgraduate Open Evening, to complying with legal obligations where the University is required to provide personal data under for example a subject access request (under The Data Protection Act 1998 - until 25 May 2018; and The General Data Protection Regulation - from 25 May 2018).
When communicating with key audiences such as alumni, ‘Legitimate interests’ is a lawful basis used by the University for specific processing purposes in line with ICO guidance.
Such ‘Legitimate interests’ for the processing include under the generally accepted three-part test for this ‘lawful basis’ as follows:
1. Purpose test: are you pursuing a legitimate interest? - The University has a legitimate interest in processing via the respective ‘processing purposes’ here the opportunities for former students to study at The University of Winchester, which includes the gaining of educational qualifications. In a wider sense, the University also has a legitimate interest in processing via the ‘processing purposes’ to achieve social bettering and transformation through education, and enable individuals to achieve their potential; and finally to increase applications and enrolments to the University of Winchester by communicating via direct marketing (email, SMS, postal) to alumni considering studying again at the University of Winchester.
2. Necessity test: is the processing necessary for that purpose? - It is necessary for the University to process data for the purpose of:
(a) increasing applications and enrolments to the University of Winchester by communicating via direct marketing (email, SMS, postal) to alumni considering studying again at the University of Winchester, and there is no other realistic alternative which is as effective; and
(b) communicating with individuals, including alumni and ex staff. We believe that there is no other realistic alternative which is as effective for interests including fundraising and general updates on developments with the University, which either as alumni (former students) and/or as ex staff members they were previously associated with.
3. Balancing test: do the individual’s interests override the legitimate interest?” - The University believes that alumni would reasonably expect the University to use their personal data in these ways, as summarised in the respective processing purposes. In addition, we do not believe that it would cause alumni unwarranted harm for the University to use their personal data in these ways, as summarised in the processing purposes.
Linked to its above mentioned ‘processing purposes’, the University processes a specific amount of personal data, which includes for example the names and contact details of alumni. Such processing enables alumni to keep themselves updated on news about the University and opportunities for involvement (for example as a Former Student Governor), to opportunities to attend events and Postgraduate Open Evenings.
In certain specific circumstances and linked also to its above mentioned ‘processing purposes’ and where there is also an additional ‘lawful basis’ for this further processing, the University may process a specific amount of sensitive personal data. This is done in line with ICO guidance, and may include information about an individuals’ health for example.
Sometimes the University has a requirement to share this information with groups of recipients. They include sharing details within the University.
Personal data and sensitive personal data will be kept for no longer than necessary.
There are a number of individual rights available, and more information on these can be found at https://ico.org.uk/
If consent has been used as the lawful basis for a particular ‘processing purpose’, there is a right to withdraw consent (if applicable).
There is a right to lodge a complaint with a supervisory authority. This is the ICO, who can be contacted in various ways as listed at: https://ico.org.uk/global/contact-us/
The majority of the personal data held by the University is obtained from the individual it relates to.
In some cases, individuals are under a statutory or contractual obligation to provide the personal data (if applicable, and if the personal data is collected from the individual it relates to).
We review and update (where necessary) this policy statement in line with current guidance and developments.
The data protection officer for the University is:
Joe Dilger, Data Protection Officer,
The University of Winchester, Sparkford Road
SO22 4NR, United Kingdom
Tel: +44 (0) 1962 841515, Ext. 7306.
The name and contact details of our organisation are:
The University of Winchester,
SO22 4NR, United Kingdom
Fax: +44 (0) 1962 842280