University of Dundee

Information Governance - Data Protection

Privacy Notice - School of Social Sciences - CEPMLP - Extractives Hub

University of Dundee

How we use your information

The Extractives Hub is a project to develop and maintain a library of up to date resources concerning management and governance in the extractives sector.

The principal method of dissemination of that information is via this website ( We also email briefings and updates to our members to keep them informed of developments in the sector and on the website.

The Extractives Hub also offers expert help to officials from developing countries upon request via its helpdesk and access to a group of local champions who offer in-country support.

Personal data

The personal data held and processed by the Extractives Hub will vary according to how you interact with the site.

If you visit the site, Google Analytics, a third party cookie that we installed on the site, might collect some data related to your visit. Please click here to see details on Google Analytics' data policy.

If you sign-up to become a member of the site we will hold the information you provided during registration, including your first name, last name, email address, country, type of organisation you work for, areas of interest and specialty plus option to opt in/out for the newsletter and site access password.

If you seek support via the helpdesk or from a local champion, the champion and the University of Dundee will hold your name, email address, telephone number, position, country, description of enquiry or details of feedback, area of interest (optional), and government ministry or agency (optional).

When you visit our site, cookies are used to facilitate some of its functionality. The purpose of the cookies is as follows:

Strictly necessary cookies

Name of Cookie Purpose Strictly necessary
Cfid Used in conjunction with CFTOKEN this cookie helps to uniquely identify a client device (browser) to enable the Extractives Hub to maintain user session variables. CFID contains a sequential number to identify the client. Yes
Cftoken Used in conjunction with CFID this cookie helps to uniquely identify a client device (browser) to enable the ExtractivesHub to maintain user session variables. CFTOKEN contains a random number to identify the client. Yes
JSESSIONID General purpose platform session cookie, used by ExtractivesHub to maintain an anonymous user session by the server. Yes

Other cookies

Name of Cookie First/Third Party Provider Purpose
-gat Third Google Analytics This cookie is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes.
_ga Third Google Analytics This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports.
_gid Third Google Analytics Used to distinguish users.

If you delete the cookies in your browser after each session, the Extractives Hub cannot track you between visits. We have also provided a cookie controller on our site. If you take no action, we will record that a visit has taken place and the resources that were accessed, but we cannot identify you.

If you choose to log into the site, we can track the information and resources you access for our records and reporting to our funders, but you are under no obligation to log-in.

When we do make reports to our funders, we will not identify anyone individually (ie we will report aggregate data concerning the use of different elements of our services).

Special categories of personal data

We do not process special categories of personal data in the provision of our site and services.

Data controller

The data controller for this information is the University of Dundee. Your data may be processed using the University's line of business systems. For this project that will normally be Microsoft Office 365 and (for secure file sync and share). Both of these organisations have adopted 'binding corporate rules' in respect of the protection of your information.

The University has appointed Skotkonung Ltd as its data processor for the management of the Extractives Hub website and to process your personal information in connection with your use of the site. They have signed an agreement with the University and undertaken to protect your data on the University's behalf.

Skotkonung Ltd use the following sub-processors in the provision of their services:

Sub-processor Purpose Security
Microsoft Azure Provider of the hosting environment for the database and website and email client used to generate emails generated by the Hub. Skotkonung have appointed Microsoft under Microsoft standard terms and conditions

The project is funded by the UK Government's Department for International Development (DFID). The University will make regular reports of anonymous data to DFID to fulfil funding requirements.

Lawful processing

The University processes your information for these purposes further to your consent. You are free to withdraw that consent at any time by emailing or, where you receive newsletter, by using the 'unsubscribe' option.

Where you sign-up to be able to log into our website your personal data is retained until you request that your data is deleted. Where you sign-up for newsletters your email address for receiving the newsletter is retained until you click 'unsubscribe' in the newsletter or email Where you interact with our helpdesk or local champions the retention of your data will be determined by the nature and extent of your service requirements.

Where the University or Skotkonung Ltd is subject to a legal obligation, for example disclosures to relevant authorities, that will form the lawful basis for such processing.

Your rights

The University respects your rights and preferences in relation to your data. If you wish to update, access, erase, or limit the use of your information let us know by emailing

If you wish to complain about the University's use of your information please contact the University's Data Protection Officer in the first instance by emailing You may also wish to contact the Information Commissioner's Office.