This policy was last amended on 23 May 2018.
1. Who we are
Gresham College is a registered charity in England and Wales (Charity no. 1039962) and a limited company (Company no. 2953431).
Gresham College’s registered address is Barnard’s Inn Hall, Holborn, London, EC1N 2HH.
2. Our Purpose
Gresham College is an independently funded educational institution. The College's main activity is the provision and administration of the Gresham Lectures given by the Gresham Professors in a tradition going back more than 400 years.
3. Why we hold and process personal data
We keep data for the pursuit of our charitable and educational aims.
We hold and process personal data for a number of reasons:
To keep a record of our subscribers, donors and actions taken by our supporters including our communications with them
To send our audiences and supporters marketing information about our lectures and other activities where we have their consent or are otherwise allowed to
To fulfil contractual obligations entered into with supporters and donors
To meet wider legal obligations and reporting duties
To ensure we do not send unwanted information to supporters or members of the public who have informed us they do not wish to be contacted.
Our website and educational outputs are available to all in line with our charitable obligations.
4. Your Consent and Notices of Changes
5. Information we collect
You provide data to us when you attend our events, register with us, sign up to our mailing list, order a ticket, make a donation, use our website or follow us on social media.
We log your visits on our website and your attendance at ticketed events. We receive data from your devices and networks, including location data. We are constantly improving our website and online presence, which means we regularly get new data and create new ways to use data.
Attendance at Events or Involvement in our Projects
We gather information on those who participate in projects or attend our events including your name and e-mail address.
Website Use and Social Media Interaction
We log usage data when you visit or otherwise engage in our work such as when you view or click on content, or perform a search. We use log-ins, cookies, device information and internet protocol (“IP”) addresses to identify you and log your use. This helps us to understand how people engage with our content and the preferences of our audiences.
Your Device and Location
When you visit or leave our website (including our plugins or cookies or similar technology on the sites of others), we receive the URL of both the site you came from and the one you go to next. We also get information about your IP address, proxy server, operating system, web browser and add-ons, device identifier and features, and/or ISP or your mobile carrier. If you use our website from a mobile device, that device will send us data about your location. Most devices allow you to prevent location data from being sent to us and we honour your settings.
6. How We Share Information
We may use others to help us with our website and online tools. We may need to share your data when we believe it’s required by law or to protect your and our rights and security.
Our Charitable and Educational Work
We do not share our data with third parties unless compelled to do so or in a strictly controlled way to certain Service Providers working on our behalf as set out below.
Where other third-party sharing takes place we will always seek permission from you.
We use others to help us provide our work including our website and other core online services including our CRM and mailing tools (e.g. for maintenance, analysis, audit, payments, fraud detection, marketing and development), printing and distribution of our programme and other postal mailings. They will have access to your information as reasonably necessary to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes.
It is possible that we will need to disclose information about you when required by law, warrant, or other legal process or if we have a good faith belief that disclosure is reasonably necessary to (1) investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (2) enforce our agreements with you, (3) investigate and defend ourselves against any third-party claims or allegations, (4) protect the security or integrity of our Service (such as by sharing with companies facing similar threats); or (5) exercise or protect the rights and safety of Gresham College and its staff.
7. Your Choices and Obligations
We keep most of your personal data for as long as you are subscribed to our newsletter or on our programme mailing list. We keep some of your data even after you end your relationship with us. You can always access or delete your personal data.
We retain the personal data you provide as needed to carry out our charitable work. If you are an audience member or supporter who receives mailings we keep your data until you ask us to delete it.
We retain your personal data even after a supporter or audience member has stopped receiving mailings or a Professor has ceased his or her Professorship to comply with legal obligations (including law enforcement requests), meet our regulatory and financial requirements, resolve disputes, maintain security, prevent fraud and abuse, or fulfil your request to “unsubscribe” from further messages from us. The list of the Gresham Professors is a historical record which is maintained for posterity with the limited amount of information we require to achieve this.
Rights to Access and Control Your Personal Data
You can always access or delete your personal data. You have choices about how your data is collected, used and shared. Just contact us via email to make any changes.
To make a formal complaint about Gresham College’s approach to data protection or raise privacy concerns directly with our data protection team, please contact:
Barnard’s Inn Hall
You also have the right to make a complaint directly to the UK's data protection authority, the Information Commissioner's Office (ICO). The ICO can be contacted at https://ico.org.uk/global/contact-us/
Concerns can also be logged via the ICO website.
8. Other Important Information
We monitor and try to prevent security breaches.
We implement security safeguards designed to protect your data, such as HTTPS. We regularly monitor our systems for possible vulnerabilities and attacks.
Cross-Border Data Transfers
Sometimes we store and use your data outside your country. We process data both inside and outside of the United Kingdom. Where we transfer data we do so either within the EEA, under EU-U.S. and Swiss-U.S. Privacy Shield frameworks or through written contract terms.
We target our communications using profiling based on the information we know about you. We do not share personal data with third parties for their direct marketing purposes.
Profiling is a common technique used in direct marketing and involves analysing data to improve the targeting of communications. Gresham College uses profiling techniques to help ensure our communications are relevant. Profiling allows us to target our resources effectively and continue to provide free public lectures that are relevant to our audiences. The data may have been provided to Gresham College by our audience and supporters when responding to our marketing campaigns, or when using our website, or social media sites such as Facebook.
When building a profile we may analyse geographic, demographic and other information relating to you, as well as your previous responses to our marketing campaigns. We do this in order to determine whether we believe a particular marketing campaign might be of interest.