Data Protection and Subject Rights
Information on how the University manages personal data under UK GDPR, your data protection rights, and how to make a Subject Access Request.
As a registered controller, when we collect and use personal data about our students, staff, website and campus visitors and other individuals we are subject to UK GDPR and Data Protection Act 2018.
Our privacy notices explain how we use personal data, and our data protection policy sets out how personal data will be managed by the University, and our responsibilities.
Your rights
The UK GDPR/Data Protection Act (2018) gives people a wider range of rights in relation to their personal data. The rights are as follows:
The right to be informed (meaning the right to be told how your data will be used, for example by means of a privacy notice
The right of access to your personal data held by an organisation
The right to have inaccurate data corrected
The right to erasure (known as 'the right to be forgotten')
The right to restrict processing of your personal data
The right to data portability
The right to object
Rights in relation to automated decision making and profiling
You can read more about your data protection rights on the Information Commissioner's website, including how to exercise your rights with organisations that process your personal data.
Right of Access
If you would like to make a Subject Access Request (SAR) for the data we hold about you, please complete the right of access form and email dataprotection@hull.ac.uk.
If you would like to exercise any other data protection rights or raise a complaint/concern about how the University have handled your personal data, you can contact the Data Protection Officer on the above email.
Please see our data protection policy and other related documents here.