Privacy Notice

Birkbeck, University of London


Birkbeck exists to provide life changing educational opportunities for its students and undertake cutting-edge research for the public good. In order to carry out this mission, it is necessary to process personal data.

We take our responsibilities to process your data transparently, fairly, lawfully, safely and securely very seriously. This document is part of our efforts to keep you informed about how we treat your data.



For the purpose of subscribing to Economics and Finance Society (EFS) email alerts.


About Birkbeck

Birkbeck College (also known as Birkbeck, University of London) is the data controller for all of the personal data that it holds and processes and is subject to the General Data Protection Regulations (GDPR). Birkbeck is registered with the Information Commissioners Office (ICO) registration number Z718111X

  • Address: Birkbeck College, Malet St, Bloomsbury, London, WC1E 7HX
  • Birkbeck’s Data Protection Officer can be contacted by emailing

If you have any queries about how we use your data, or wish to exercise your rights with regard to your data including, making a subject access request, please contact


About Birkbeck’s approach to personal data processing

In common with all universities, Birkbeck processes the personal data of many individuals in order to carry out its mission.

You will find a complete set of information describing our data processing activities, our data privacy policy, relevant privacy notices, information about the rights of individuals whose data we process and how to exercise these rights on our website at

Birkbeck has many different types of relationship with many different groups of people, and some people have more than one relationship with Birkbeck (for example one person may be both a student and member of staff). It is not possible to provide one single privacy notice that accurately describes all these processing activities. Therefore separate notices are provided that describe each processing activity. It should be noted that more than one privacy notice may apply to the processing of your personal data for different purposes. This should be made clear to you at the point where your personal data is collected. It should also be clearly described within the privacy notice itself. All our privacy notices are available at if you are in any doubt please contact


About our privacy notices

This privacy notice explains how Birkbeck collects, uses and shares personal data and your rights in relation to the data that we hold about you. It includes information about how personal data is used, and the nature of any processing by other data processers or controllers.


The processing purpose covered by this notice

This privacy notice applies to Birkbeck’s processing of personal data for the purpose of subscribing to Economics and Finance Society (EFS) email alerts which we collect through an opt-in on our website, www.bbkefs.comand collecting data sourced from optional surveys.


What data we collect

Birkbeck may obtain, hold and process the following personal data:

  • Names– First Name of subscriber, Last Name of Subscriber
  • Contact Details – Email address of subscriber.
  • Survey Results – Responses to surveys (time and date preferences)


Where we collect it from

  • through opt-in choice to our subscriber list (saved at
  • Survey response forms


How we use the data

We use the data to contact subscribers. This includes:

  • Details of upcoming events and competitions.
  • Surveys (infrequent) to better understand subscribers’ preferred dates for events.

Without this information, the Economics and Finance Society will not be able to alert members to events and provide relevant details of these events (which is the primary function of the society.  The events will occur roughly once a term and therefore subscribers will be emailed proportionately to the event).


Under what lawful basis we process your personal data

Birkbeck uses your personal data under different lawful bases depending on the process being performed. The following are the legal bases identified and examples of the data processing activity to which they apply:

  • Consent (Article 6 (1) )– For the purposes of email alerts Birkbeck collects and processes your data on the lawful basis of your explicit consent. (Article 6 (1) (a))

Withdrawal of consent –you have the right to withdraw consent at any time. You can opt out via the clear unsubscribe at the bottom of our emails.


How long we keep your data for this processing purpose

Records shall be kept until subscribers opt out or ask to be removed.


Sharing your data with other Data Controllers

To our knowledge no data is shared with any third party.


Third Party Service Providers (use of Data Processors)

Birkbeck uses a number of carefully selected third parties to provide services on its behalf. In some cases this requires some elements of the data we hold about you to be passed to them for the express purpose of providing a service to you on our behalf. In each case a data sharing agreement is in place that prevents the third party from making any use of the data provided for any purpose other than that expressly agreed, and requiring the provider to securely destroy the data once the service has been provided. Details of these service providers are available at



In some instances the College may transfer personal data to parties located in other countries, including some outside of the European Economic Area (EEA). This may be because either Birkbeck staff, a Data Processor (or Sub-Processor) contracted by Birkbeck, or another Data Controller who data is shared with are located outside the EEA.

All instances of overseas transfers of personal data are subject to appropriate technical safeguards and contractual provisions incorporating appropriate assurances to ensure the security of the data and full compliance with legislative and regulatory requirements.


Your personal data rights

You have the following rights with regard to your personal data held by the College:

  • The right to request access to their personal data held by the College.
  • The right to have inaccurate or incomplete personal data rectified.
  • The right to erasure of personal data – this will only apply where there is no legitimate reason for the College to continue to process the personal data and it is not done so under the lawful basis of public task.
  • The right to restrict the processing of personal data – individuals have the right to block the processing of their personal data by the College in specific situations.
  • The right to object – you can object to the processing of your personal data by the College in certain circumstances, including the sending and receipt of direct marketing material.
  • The right to object to automated decision making and profiling – you have the right to object to decisions taken by automatic means without human intervention in some circumstances.
  • All requests to exercise any of these rights should be made to the College’s Data Protection Officer, by emailing:


Complaints – If you are unhappy with the College’s handling of your personal data or believe that the requirements of GDPR may not be fully complied with, you should contact the College’s Data Protection Officer in the first instance. You may also follow the College’s formal complaint procedure, and you also have the right to submit a complaint to the Information Commissioner’s Office; further details can be found at


Version History & Review

This privacy notice will be subject to periodic review. Any material changes will be communicated to those affected in an appropriate manner as and when they are required.

Version Effective Date Reason for change
01 5thAugust 2018 Initial Data Protection Document