Under GDPR, individuals have particular rights regarding the processing of their personal data, which we have described below.
1. Rights to information about how your personal data is processed (Article 13)
- The right to be informed encompasses the University’s obligation to provide ‘fair processing information’, typically through privacy notices
- It emphasises the need for transparency over how we use personal data
2. Your Right of Access to Personal Information Article
Article 15 of the GDPR provides individuals with a right of access to their own personal data held by the University. A request for all such information is commonly referred to as a Subject Access Request.
An individual is entitled to:
- A description of the data
- The Recipients of the data
- Information about any automated decisions that have been made
- A copy of the data on request
- All of the above within one month.
You can access the Subject Access Request form here - Right to Access Form
Completed forms should be sent to our email or via post to –
Information Compliance Department
University of Hull
Cottingham Road
Hull
HU6 7RX
The University will not process any request until we have received proof of identity (e.g. photocopy of Passport/Driving License). Please note we can only release copies of personal data to the data subject (the person who the data is about), unless consent is received stating otherwise.
3. Rights to Rectification and Erasure (Articles 16, 17, and 19)
- Data subjects have the right to correct inaccurate personal data held by the University about them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed. Once data the University holds is no longer necessary for the purpose for which it was collected and processed, individuals sometimes have the right to have their data erased. If you believe the University is processing inaccurate data about you please email us.
4. Rights to restriction of processing (Article 18)
- In some cases individuals have the right to restrict the processing of their personal data or object to the processing of that data. If you wish to withdraw consent for the processing of your personal data or otherwise restrict/object to the processing of your personal data please contact the Information Compliance Team. The processing of your data will be restricted while the complaint is resolved. Third parties who may be processing your data will be notified.
5. Rights to data portability (Article 20)
- Data subjects have the right to receive the personal data concerning them in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance from the University. If you wish to discuss the portability of your personal data please contact the Information Compliance Team.
6. Rights to object to processing (Articles 21-22)
Individuals have the right to object to:
- Processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
Direct marketing (including profiling); and
- Processing for purposes of scientific/historical research and statistics.
The University is registered as a data controller with the Information Commissioner’s Office for the purposes of the GDPR and the Data Protection Act 2018. We are committed to ensuring that the personal data of its applicants, students, alumni and staff is handled in accordance with the principles set out in the relative legislation.
Under the Data Protection Act 2018 the University is a Data Controller and we are therefore legally responsible for the personal data we collect and hold about you. One of our responsibilities is to tell you about the different ways we collect and use your personal data. This statement provides details about these uses. In addition to this, you may be given further information about the uses of your personal data when you use certain services offered by the University.
Personal data is data relating to a living individual, who could be identified from the data, and other information in the University’s possession. It includes information such as name, address, id number etc. Sensitive personal data is defined in the Data Protection Act and is data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, sex life, criminal convictions.
For further information please click on our Student Privacy Notice below.
Student privacy notice
Under the Data Protection Act 2018 the University is a Data Controller and we are therefore legally responsible for the personal data we collect and hold about you. One of our responsibilities is to tell you about the different ways we collect and use your personal data. This statement provides details about these uses. In addition to this, you may be given further information about the uses of your personal data when you use certain services offered by the University.
Personal data is data relating to a living individual who can be identified from that data and other information in the University’s possession. It includes information such as name, address, id number etc. Sensitive personal data is defined in the Data Protection Act and is data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, sex life, criminal convictions.
For further information please click on our Staff Privacy Notice below.
Staff privacy notice
The below notice is for those who are participating in, or have been invited to participate in, an academic research project being undertaken by the University. You should read this notice alongside the participant information sheet provided to you. Please select the tab below to open the Privacy Notice.
Research Participant privacy notice
This notice is for people who are participating in, or have been invited to participate in, the QS World University Ranking Reputation Survey. You should read this notice alongside the participant information provided to you.
Research Participant privacy notice
This notice is for people attending events run or hosted by the University of Hull. You should read this along with an information provided at registration of the event.
Conference and events privacy notice
After you finish your course of study, the University will wish to maintain contact with you through the Development and Alumni Relations Office. If you do not wish your personal details to be used for alumni relations purposes, please contact the office at the time of your graduation or at any time thereafter. Also, please let us know if you do not wish to receive direct marketing communications.
Alumni Relations Office
University of Hull
Cottingham Road
Hull, HU6 7RX
United Kingdom
+44 (0)1482 466645
alumni@hull.ac.uk