Under the General Data Protection Regulation (Effective May 2018), individuals in particular circumstances may have specific rights regarding the processing of their personal data.
Rights to information about how your personal data is processed (Article 13)
- The right to be informed encompasses the University of Hull’s obligation to provide ‘fair processing information’, typically through a privacy notice.
- It emphasises the need for transparency over how you use personal data
- Rights to access your personal data
Your Right of Access to Personal Information
Under Article 15 of the GDPR individuals have a right of access to their own personal data held by the University. A request for all such information is called a Subject Access Request.
Under the GDPR the individual is entitled to:
- A description of the data
- The Recipients of the data
- Information about any automated decisions that have been made
- A copy of the data on request
- All the above within one month
Rights to rectification and erasure (Articles 16, 17, and 19)
- Data subjects have the right to correct inaccurate personal data held by the University about them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed. Once data the University has collected is no longer necessary for the purpose for which it was collected and processed, individuals sometimes have the right to have their data erased. If you believe the University of Hull is processing inaccurate data about you, please contact the University at firstname.lastname@example.org
Rights to restriction of processing (Article 18)
- Individuals sometimes have the right to restrict the processing of their personal data or object to the processing of that data. If you wish to withdraw consent for the processing of your personal data or otherwise restrict or object to the processing of your personal data please contact the Information Compliance Team. The processing of your data will be restricted while the complaint is resolved. Third parties who may be processing your data will be notified.
Rights to data portability (Article 20)
- Data subjects have the right to receive the personal data concerning them in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance from the University. If you wish to discuss the portability of your personal data please contact the Information Compliance Team.
Rights to object to processing (Articles 21-22)
Individuals have the right to object to:
- processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
- direct marketing (including profiling); and
- processing for purposes of scientific/historical research and statistics.
Completed forms should be sent to the following address:
Information Compliance Department
University of Hull
Hull HU6 7RX
The University will not process any request until it has received a cheque for £10 and proof of identity, such as a photocopy of a drivers licence.
We can only release copies of personal data to the data subject (the person who the data is about). We will not release it to any third parties unless we have the written consent of the data subject.
The University of Hull is registered as a data controller with the Information Commissioner’s Office for the purposes of the Data Protection Act 1998 and is committed to ensuring that the personal data of its applicants, students, alumni and staff is handled in accordance with the principles set out in the Act.