The Dragon Capital Chair in Biodiversity Economics (“Dragon Capital Chair”, “we”, “us” or “our”) is committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly.

This Privacy Notice explains how we collect, use, store and protect personal information when you visit or use the Dragon Capital Chair website at www.dragonchair.org.uk, contact us, register for or attend events, or otherwise interact with us.

The Dragon Capital Chair is a 10-year programme (2020–2030) based at the LEEP Institute within the Department of Economics at the University of Exeter Business School.

1. Information we collect

We may collect and process personal information that you provide to us when you use the website or contact us. This may include:

Your name and contact details, such as email address, telephone number and organisation.
Information you provide when contacting us through our website or by email.
Information provided when registering for or attending an event.
Information provided when subscribing to communications, newsletters or updates.
Information contained in correspondence or enquiries you send to us.
Technical information collected when you use our website, such as IP address, browser type, device information and information about how you use the website.
Information collected through cookies and similar technologies, where applicable.

We only collect information that is reasonably necessary for the purposes described in this Privacy Notice.

2. How we use your information

We may use personal information for the following purposes:

To respond to enquiries and requests.
To provide information about our research, projects, publications and activities.
To organise and administer events.
To communicate with individuals who have requested information or updates from us.
To maintain and improve our website and its functionality.
To understand how visitors use our website and improve the user experience.
To maintain the security and integrity of our website.
To comply with legal and regulatory obligations.
To establish, exercise or defend legal claims where necessary.

We will not use your personal information for purposes that are incompatible with the purpose for which it was originally collected without first providing appropriate information and, where required, obtaining your consent.

3. GDPR and data protection

We take our responsibilities under applicable data protection legislation seriously.

Where applicable, we process personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, together with other applicable data protection and privacy legislation.

We aim to ensure that personal information is:

Processed lawfully, fairly and transparently.
Collected for specified and legitimate purposes.
Adequate, relevant and limited to what is necessary.
Accurate and kept up to date where necessary.
Retained only for as long as necessary.
Kept secure and protected against unauthorised access, loss, misuse or disclosure.

The ICO recommends that privacy information clearly explains what personal data is collected, why it is processed, the lawful basis for processing, who it may be shared with, how long it is retained and what rights individuals have.

Lawful basis for processing

Depending on the circumstances, we may process your personal information under one or more of the following lawful bases:

Consent – where you have given clear consent for us to process your information for a specific purpose, such as receiving certain communications.

Contract – where processing is necessary to enter into or perform a contract with you.

Legal obligation – where processing is necessary for us to comply with a legal or regulatory requirement.

Legitimate interests – where processing is necessary for our legitimate interests, or those of a third party, provided those interests are not overridden by your rights and interests.

Vital interests – where processing is necessary to protect someone’s life or other vital interests in circumstances permitted by law.

We will only rely on a lawful basis that is appropriate to the particular processing activity.

4. Sharing your information

We will not sell, rent or otherwise trade your personal information.

We may share personal information where necessary with:

The University of Exeter and relevant university departments or services.
Organisations or service providers that support the operation of the website or delivery of our activities.
Event organisers, venues or service providers where necessary to administer an event.
IT, website hosting, security, analytics or communications providers where required to provide their services.
Professional advisers where appropriate.
Government, regulatory or law-enforcement authorities where we are legally required to do so.

Where we use third-party service providers to process personal information on our behalf, we take reasonable steps to ensure that appropriate contractual, technical and organisational safeguards are in place.

5. International transfers

Some third-party service providers may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place in accordance with applicable data protection legislation.

6. How long we keep your information

We will only retain personal information for as long as is reasonably necessary for the purposes for which it was collected, including where necessary to meet legal, accounting, reporting or regulatory requirements.

Retention periods will vary depending on the type of information and the purpose for which it is being processed.

When personal information is no longer required, it will be securely deleted or otherwise disposed of in accordance with applicable requirements.

7. Website security

We take reasonable technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no website or method of transmission over the internet can be guaranteed to be completely secure. You should therefore take appropriate precautions when submitting information online.

8. Cookies and website analytics

Our website may use cookies and similar technologies to ensure that the website operates correctly, improve functionality and, where applicable, understand how visitors use the website.

Cookies may collect information such as your browser type, device type, pages visited and general website usage information.

Where cookies require your consent, we will provide an appropriate mechanism for you to accept or reject them.

For more information about the cookies used on this website, please refer to our Cookie Policy.

9. Links to other websites

Our website may contain links to external websites, including websites operated by partner organisations, academic institutions, social media platforms and other third parties.

This Privacy Notice applies only to the Dragon Capital Chair website. We are not responsible for the privacy practices, content or security of external websites.

We recommend that you review the privacy notice of any external website before providing personal information.

10. Your data protection rights

Depending on the circumstances, you may have rights under data protection legislation, including the right to:

Be informed about how your personal information is being used.
Request access to the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information where there is no lawful reason for us to continue processing it.
Request restriction of processing in certain circumstances.
Object to certain types of processing, including processing based on legitimate interests.
Request the transfer of certain personal information to another organisation where the right to data portability applies.
Withdraw consent where we are relying on your consent to process your information.

These rights are subject to certain legal conditions and exemptions.

The ICO confirms that individuals have a right to be informed about the collection and use of their personal information and that privacy information should be clear, accessible and written in plain language.

11. How to exercise your rights

If you would like to exercise any of your data protection rights, or have a question about how we use your personal information, please contact us using the details below.

Dragon Capital Chair in Biodiversity Economics
Xfi Building
University of Exeter
Rennes Drive
Exeter
EX4 4ST
United Kingdom

Email: [Insert appropriate contact email address]

We may need to request additional information from you to confirm your identity before processing certain requests.

We will respond to valid requests within the timescales required by applicable data protection legislation.

12. Complaints

If you have concerns about the way we have handled your personal information, we encourage you to contact us in the first instance so that we can investigate your concerns.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection.

The ICO website provides information about data protection rights and how to make a complaint.

13. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our activities, website functionality, technology, legal requirements or data protection practices.

Any changes will be published on this page and the “Last updated” date will be amended accordingly.

We recommend checking this page periodically to ensure that you are aware of the latest version.

14. Contact us

If you have any questions about this Privacy Notice or the way we process personal information, please contact:

Dragon Capital Chair in Biodiversity Economics
Xfi Building
University of Exeter
Rennes Drive
Exeter
EX4 4ST
United Kingdom

Email: [Insert appropriate contact email address]

Website: www.dragonchair.org.uk