Busy Walkway towards Chemistry Building Landscape Blue Sky UNI_7846-min

EU General Data Protection Regulations

Data Protection at the University of Hull

Data protection legislation protects the rights of individuals when process their data.

Data Protection law changed under the new EU General Data Protection Regulation (GDPR) which came in to effect from May 25 2018, monetary penalties for misuse will increase, data controllers have new duties and individuals have extended rights regarding their personal data. The UK also enacted the Data Protection Act 2018 to sit alongside the GDPR.

The Data Protection Act 2018 replaces the Data Protection Act 1998 with a new law that provides a comprehensive and modern framework for data protection in the UK. New standards for protecting general data, in accordance with the General Data Protection Regulation, will give people more control over use of their data, provide new rights to move or delete personal data and impose stronger sanctions for malpractice.

More information on how the University collects and uses personal information can be found in the Notification made to the Information Commissioner's Office or in the relevant Privacy Notice.

Everyone who collects and manages personal information at the University of Hull must do so in a way that complies with the University's Policy on Data Protection and with the 6 regulations of the GDPR.

 

Advice and guidance on aspects of data protection is available from the Information Compliance Unit.

Data Subject Rights
Under the General Data Protection Regulation individuals in particular circumstances may have specific rights regarding the processing of their personal data.

 

These are:

Rights to information about how your personal data is processed (Article 13)

  • The right to be informed encompasses the University of Hull’s obligation to provide ‘fair processing information’, typically through a privacy notice.
  • It emphasises the need for transparency over how you use personal data
  • Rights to access your personal data 

Your Right of Access to Personal Information Article

Under Article 15 of the GDPR individuals have a right of access to their own personal data held by the University. A request for all such information is called a Subject Access Request.

Under the GDPR the individual is entitled to:

  • A description of the data
  • The Recipients of the data
  • Information about any automated decisions that have been made
  • A copy of the data on request
  • All the above within one month

Rights to rectification and erasure (Articles 16, 17, and 19)

  • Data subjects have the right to correct inaccurate personal data held by the University about them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed. Once data the University has collected is no longer necessary for the purpose for which it was collected and processed, individuals sometimes have the right to have their data erased. If you believe the University of Hull is processing inaccurate data about you, please contact the University at dataprotection@hull.ac.uk

Rights to restriction of processing (Article 18)

  • Individuals sometimes have the right to restrict the processing of their personal data or object to the processing of that data. If you wish to withdraw consent for the processing of your personal data or otherwise restrict or object to the processing of your personal data please contact the Information Compliance Team. The processing of your data will be restricted while the complaint is resolved. Third parties who may be processing your data will be notified.

Rights to data portability (Article 20)

  • Data subjects have the right to receive the personal data concerning them in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance from the University. If you wish to discuss the portability of your personal data please contact the Information Compliance Team.

Rights to object to processing (Articles 21-22)

Individuals have the right to object to:

  • processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
  • direct marketing (including profiling); and
  • processing for purposes of scientific/historical research and statistics.

Completed forms should be sent to the following address:

Information Compliance Department

University of Hull
Cottingham Road
Hull HU6 7RX

  • The University will not process any request until it has receives proof of identity, such as a photocopy of a drivers licence.
  • We can only release copies of personal data to the data subject (the person who the data is about).  We will not release it to any third parties unless we have the written consent of the data subject.
  • The University of Hull is registered as a data controller with the Information Commissioner’s Office for the purposes of the GDPR and the Data Protection Act 2018 and is committed to ensuring that the personal data of its applicants, students, alumni and staff is handled in accordance with the principles set out in the relative legislation.  
How we handle personal data of current students

Under the Data Protection Act 1998 the University of Hull is a Data Controller and we are therefore legally responsible for the personal data we collect and hold about you. One of our responsibilities is to tell you about the different ways we collect and use your personal data. This statement provides details about these uses. In addition to this statement, you may be given further information about the uses of your personal data when you use certain services offered by the University of Hull.

Personal data is data relating to a living individual who can be identified from that data or from that data and other information in the University’s possession. It includes data such as name, address, id number etc. Sensitive personal data is defined in the Data Protection Act and is data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, sex life, criminal convictions.

Student privacy notice

How we handle personal data of current staff

Under the Data Protection Act 1998 the University of Hull is a Data Controller and we are therefore legally responsible for the personal data we collect and hold about you. One of our responsibilities is to tell you about the different ways we collect and use your personal data. This statement provides details about these uses. In addition to this statement, you may be given further information about the uses of your personal data when you use certain services offered by the University of Hull.

Personal data is data relating to a living individual who can be identified from that data or from that data and other information in the University’s possession. It includes data such as name, address, id number etc. Sensitive personal data is defined in the Data Protection Act and is data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, sex life, criminal convictions.

Staff privacy notice

Alumni records

After you finish your course of study, the University will wish to maintain contact with you through the Development and Alumni Relations Office. If you do not wish your personal details to be used for alumni relations purposes, please contact the office at the time of your graduation or at any time thereafter. Also, please let us know if you do not wish to receive direct marketing communications.

Alumni Relations Office
University of Hull

Cottingham Road
Hull, HU6 7RX
United Kingdom

+44 (0)1482 466645
alumni@hull.ac.uk