The law on data protection sets out a number of different reasons for which an organisation may collect and process your personal data, including:
Consent
In specific situations, we can collect and process your data with your consent. For example, when you tick a box to receive email marketing.
Contractual obligations
In certain circumstances, we need your personal data to comply with our contractual obligations. For example, if you order an item from Sheffield Store for home delivery, we’ll collect your address details to deliver your purchase, and pass them to our courier.
Legal compliance
If the law requires us to, we may need to collect and process your data. For example, we can pass on details of people involved in fraud or other criminal activity affecting SSU to law enforcement .
Legitimate interest
In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running SSU and which does not materially impact your rights, freedom or interests. For example, we will use your @sheffield.ac.uk email address to send you information SU elections.