Privacy Notice for Donors

When you donate to Birmingham City University you may provide us with personal data. This is likely to include, but is not limited to, the following:

Your name, contact details, reason for donating, relationship with BCU, financial details, communication preferences.

The legal bases for using this personal information are legitimate interests (which means we need to process the personal information to fulfil our or your objectives, we believe it will not adversely affect you and we think you would expect it), legal obligation, contract or your consent.

If we require your consent for any specific use of your personal data, we will collect it at the appropriate time, explaining why we are collecting the data and how we will use it, and you can withdraw this consent at any time. This usually applies for ‘special category data’ which includes information about your health (physical or mental), race, ethnic origin, religious or political beliefs, membership of a trade union and sexual orientation.

Please note, if you donate via the ‘tap to donate’ devices installed at the Royal Birmingham Conservatoire (which is part of BCU), Royal Birmingham Conservatoire / BCU is not a data controller or data processor for this as it does not receive any personal data. It only receives the last 4 digits of the virtual / actual bank card used, the date and time of the transaction and the value of the donation. Therefore, it is unable to identify any of the donors. The data controller and data processor for this information is the device supplier Toucan Giving and JustGiving. You are welcome to read their own privacy notices. However, if you choose to register for donations to have Gift Aid applied, BCU will receive your name, address and email address. BCU would only contact you if there was a query related to Gift Aid. BCU will not use this information to add you to any mailing lists.

We will use your personal information to:

• process your donation.
• fulfil any requirements or activities associated with it which could include:
• recording information and correspondence about your giving
• business administration or legal reporting requirements
• recording your updated contact details and mailing preferences, including about BCU contacting you about other donorship opportunities
• contacting you
• communicating with you about the impact of your donation
• recording your preferences regarding the external reporting of your donation
• advertising the donation (for example, this could involve personal data if the donation is a scholarship / grant in your name)
• press releases,
• recording information about your willingness and capacity to support our charitable objectives, which may be provided by you or from information in the public domain.

We keep your personal information for the length of time necessary to fulfil the requirements and objectives and when this time has been reached, the personal information is securely destroyed.

Your personal data will only be accessible to relevant people. Mostly this would be relevant staff. However, it could include the public, students and donor recipients. E.g. in press releases which could include your name etc. We may also need to share it with third parties supporting the processing of your transaction. We will only do this in appropriate circumstances, for specified purposes, by secure means, using the minimum amount necessary. In addition to the circumstances stated above we will share your personal information if we believe someone’s life is in danger or we believe we are compelled to by law. We will not sell your personal data.

Hard copies of personal information are kept in a secure location and personal data stored electronically is on secure systems within the UK or EU. If included in press releases / on the BCU website this will be accessible worldwide.

You have the right to correct or update your personal data at any time. Please get in touch with your main contact at the University to update your details. You may have the right to have your personal data deleted, the right to restrict processing, the right to object and / or the right to data portability and you have the right to know about and challenge automated decision making and profiling. Follow the links to find out whether those rights apply in these circumstances. To do any of those things or if you have followed the links but would like clarification, please email informationmanagement@bcu.ac.uk.

You have the right to request to see the personal data we hold about you. You can submit a Subject Access Request (SAR) in accordance with the Subject Access Requests (SAR) Procedure.

If you have read this privacy notice and would like further information, you’re welcome to contact our Data Protection Officer by emailing informationmanagement@bcu.ac.uk or by post to: Data Protection Officer, Information Management Team, Legal Services, Birmingham City University, Floor 1, Joseph Priestley Building, 6 Cardigan Street, Birmingham, B4 7BD, or by phoning 0121 202 4597.

If you are not content with how we handle your information, please follow our Data Protection Complaints Procedure. If you have used that procedure and are unsatisfied with the response you have received, you then have the right to complain directly to the Information Commission (IC). You can find out more about this on the IC’s complaints website.

• Birmingham City University’s Data Protection Policy and Appropriate Policy Document
• Birmingham City University’s Privacy Notices  
• The Information Commission (IC) information for members of the public