Privacy Notice for Events

Birmingham City University (BCU) is the data controller. You can contact our Data Protection Officer by emailing informationmanagement@bcu.ac.uk or by post to:

Data Protection Officer
Information Management Team
Birmingham City University
Floor 1, Joseph Priestley Building
6 Cardigan Street
Birmingham, B4 7RJ

When you sign up to an event you provide some personal information; typically your name, email address, phone number and possibly any accessibility requirements or dietary requirements. We use this information to facilitate your attendance and enjoyment of the event.

BCU will process your personal data for the following purposes:

• to reserve a place for you at the event(s) you wish to attend;
• to provide you with information about the event(s) for which you have registered, that includes event updates, and possible changes, cancellation or similar information;
• to provide you with information about accessibility, transportation, parking, etc. that may impact on your attendance to the event(s);
• to fulfil and monitor our legal responsibilities, for example, under public safety legislation;
• (with your consent) to communicate with you about other events, news, and opportunities at BCU including opportunities to be involved in research;
• (with your consent) to accommodate your accessibility requirements or dietary requirements.

The lawful basis for the above processes is legitimate interests unless it states that we need your consent. Legitimate interests means we need to process the personal information to fulfil our objectives, we believe it will not adversely affect you and we think you would expect it. We will only process your Special Category data (accessibility requirements or dietary requirements) on the lawful basis of:

• your explicit consent
• or if it is necessary: vital interests (for example, in a medical emergency);
• or if it is necessary: for the establishment, exercise or defence of legal claims;

Your accessibility and dietary requirement information will be securely destroyed / deleted within a month of the event. If you were not asked when you signed up to the event, we may use your contact information to contact you to ask whether you would like to join a mailing list to receive invitations to similar events. Every three years we will review our contacts and ask you whether you would still like to be on the mailing list. In either situation, if we do not receive a response from you, or if we receive a negative response then your personal data will be securely destroyed / deleted.

If you are a visitor attending an event (as opposed to a member of staff or a student), please also read the Privacy Notice for Visitors. You may also wish to read the Privacy Notice for Photography / Filming as that takes place at some events.

Hard copies of personal data are kept in a secure location and personal data stored electronically is on secure systems within the UK or EU. Your personal data may be stored in a relevant database such as for inviting you to similar events if you have consented to this processing.

Your personal data will only be accessible to relevant University staff.

If you have provided personal data relating to accessibility needs or dietary requirements we will share this with relevant staff and, where relevant, an external catering service or an external venue.

If you receive an unwanted communication from us, please tell the person who contacted you. If you are not able to contact them, please email informationmanagement@bcu.ac.uk. BCU will act to remove you from our contacts or limit contact, depending on your wishes.

In addition to the circumstances stated above we will share your personal data if we believe someone’s life is in danger or we believe we are compelled to by law. We will never sell your details to a third party or transfer your data to countries outside the EEA.

You have the right to correct or update your personal data at any time. Please get in touch with your main contact at the University to update your details. If you cannot contact them, please email the event organiser to update your personal data. You may have the right to have your personal data deleted, the right to restrict processing, the right to object and / or the right to data portability. Follow the links to find out whether those rights apply in these circumstances. To do any of those things or if you have followed the links but would like clarification, please email informationmanagement@bcu.ac.uk.  

You have the right to see the personal data we hold about you. You can submit a Subject Access Request (SAR) in accordance with the Subject Access Requests (SAR) Procedure.

Data protection law also gives you rights regarding ‘automated individual decision-making and profiling’. However, BCU does not carry out any ‘automated individual decision-making and profiling’ for events, so these rights are not relevant in this circumstance.

You have the right to lodge a complaint with the Information Commissioners Office about the handling of your personal data and can find out more about this on the ICO website.

• Birmingham City University’s Data Protection Policy and Appropriate Policy Document
• Birmingham City University’s Privacy Notices
• The Information Commissioner’s Office (ICO) information for members of the public