Information Governance – Data Protection

Privacy Notice – School of Social Sciences – CEPMLP – Energy Hub+

University of Dundee

How We Use Your Information

Energy Hub+ is a project to develop and maintain a library of up to date resources concerning management and governance in the extractives sector.

The principal method of dissemination of that information is via this website ( We also email briefings and updates to our members to keep them informed of developments in the sector and on the website.

Energy Hub+ also offers expert help to officials from developing countries upon request via its helpdesk and access to a group of local champions who offer in-country support.

Personal Data

The personal data held and processed by the Energy Hub+ will vary according to how you interact with the site.

If you visit the site, Google Analytics, a third party cookie that we installed on the site, might collect some data related to your visit. Please click here to see details on Google Analytics’ data policy.

If you sign-up to become a member of the site we will hold the information you provided during registration, including your first name, last name, email address, country, type of organisation you work for, areas of interest and specialty plus option to opt in/out for the newsletter and site access password.

If you seek support via the helpdesk or from a local champion, the champion and the University of Dundee will hold your name, email address, telephone number, position, country, description of enquiry or details of feedback, area of interest (optional), and government ministry or agency (optional).

When you visit our site, cookies are used to facilitate some of its functionality. The purpose of the cookies is as follows:

If you delete the cookies in your browser after each session, the Extractives Hub cannot track you between visits. We have also provided a cookie controller on our site. If you take no action, we will record that a visit has taken place and the resources that were accessed, but we cannot identify you.

If you choose to log into the site, we can track the information and resources you access for our records and reporting to our funders, but you are under no obligation to log-in.

When we do make reports to our funders, we will not identify anyone individually (ie we will report aggregate data concerning the use of different elements of our services).

Special Categories Of Personal Data

We do not process special categories of personal data in the provision of our site and services.

Data Controller

The data controller for this information is the University of Dundee. Your data may be processed using the University’s line of business systems. For this project that will normally be Microsoft Office 365 and (for secure file sync and share). Both of these organisations have adopted ‘binding corporate rules’ in respect of the protection of your information.

The project is funded by the UK Government’s Department for International Development (DFID). The University will make regular reports of anonymous data to DFID to fulfil funding requirements.

Lawful Processing

The University processes your information for these purposes further to your consent. You are free to withdraw that consent at any time by emailing or, where you receive newsletter, by using the ‘unsubscribe’ option.

Where you sign-up to be able to log into our website your personal data is retained until you request that your data is deleted. Where you sign-up for newsletters your email address for receiving the newsletter is retained until you click ‘unsubscribe’ in the newsletter or email Where you interact with our helpdesk or local champions the retention of your data will be determined by the nature and extent of your service requirements.

Your Rights

The University respects your rights and preferences in relation to your data. If you wish to update, access, erase, or limit the use of your information let us know by emailing

If you wish to complain about the University’s use of your information please contact the University’s Data Protection Officer in the first instance by emailing You may also wish to contact the Information Commissioner’s Office.