This website is managed by the Oxford Sustainable Finance Programme based at the Smith School of Enterprise and the Environment, University of Oxford.

As a consequence of operating our website, tracking usage by visitors and enabling you to contact us via the website, we hold information relating to you as a visitor to our website. 

This means that we process some personal data relating to you. We intend that this notice will provide transparency and enable every individual to understand how and why their personal data is used by us. We want you to have maximum visibility, understanding and control over our processing of your personal data relating to your use of our website.  

All references in this Privacy Policy: to “we”, “us” and “our” refer to Oxford Sustainable Finance Programme to our website to the website www.cgfi.ac.uk and to “you” and “your” are to you, the user. 

Oxford Sustainable Finance Programme is committed to protecting the privacy and security of your personal information. This notice describes how we collect and use your personal data submitted to us online, by email, on paper or face-to-face, in accordance with the General Data Protection Regulation (GDPR) and associated data protection legislation. 

Please ensure that you read this Privacy Notice carefully and any other similar notice we may provide to you from time to time when we collect or process personal information about you.

Data controller

The University of Oxford is the ‘data controller’ for the information that you provide to Oxford Sustainable Finance when you visit the CGFI website, attend our events or sign up to our newsletter. This means that we, as part of the University of Oxford, decide how to use it and are responsible for looking after it in accordance with the GDPR. 

Data protection officer

The Data Protection Officer is James Bristow, Information Compliance Team, Vice Chancellor’s and Registrar’s Office, University Offices, Wellington Square, Oxford, OX1 2JD. Email: data.protection@admin.ox.ac.uk and tel: 01865 280 299. Registration number Z575783X.  

How is the information collected?

We may collect this information from you directly through the online contact forms on our website, on email, in person or via other digital platforms including social media. 

Lawful basis for processing your personal data 

Our lawful basis for processing data relating to your use of our website is consent. You have the right to withdraw or vary this consent (and unsubscribe from communications from us) at any time by emailing: data.protection@admin.ox.ac.uk  with the subject heading “Consent Change”. This will not affect the lawfulness of any use of your information that we make before you withdraw your consent. We do not process special categories of personal data for update or marketing purposes.

Access to your data 

Access to your personal data within CGFI and Oxford Sustainable Finance Programme will be provided to those staff who need to view it as part of their work administering the website 

Where we store or use your data 

We may store the data we collect in hard copy or electronically.   The data is stored on secure servers and/or in our premises within the UK. We may share your data with third parties or transfer your data outside the EAA under certain circumstances. 

Retaining your data 

We will only retain your data for as long as we need it to fulfil our purposes, including any relating to legal, accounting, or reporting requirements. 

Your rights

Under certain circumstances, by law, you have the right to: 

• Request access to your data (commonly known as a “subject access request”). This enables you to receive a copy of your data and to check that we are lawfully processing it. 
• Request correction of your data. This enables you to ask us to correct any incomplete or inaccurate information we hold about you. 
• Request erasure of your data. This enables you to ask us to delete or remove your data under certain circumstances, for example, if you consider that there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your data where you have exercised your right to object to processing (see below). 
• Object to processing of your data where we are relying on our legitimate interests (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. 

• Request the restriction of processing of your data. This enables you to ask us to suspend the processing of your data, for example, if you want us to establish its accuracy or the reason for processing it. 
• Request the transfer of your data to another party. 

Depending on the circumstances and the nature of your request it may not be possible for us to do what you have asked, for example, where there is a statutory or contractual requirement for us to process your data and it would not be possible to fulfil our legal obligations if we were to stop. Further information on your rights is available from the Information Commissioner’s Office (ICO). 

If you want to exercise any of the rights described above or are dissatisfied with the way we have used your information, you should contact Oxford University’s Information Compliance Team at data.protection@admin.ox.ac.uk. The same email address may be used to contact Oxford University’s Data Protection Officer. If you remain dissatisfied, you have the right to lodge a complaint with the ICO at https://ico.org.uk/concerns/. 

Changes to this privacy notice 

We aim to meet high standards and so our policies and processes are subject to review. From time to time we may change this Privacy Policy and will inform you by publishing updated content to our website.