Data Protection and Subject Rights

As a registered controller, when we collect and use personal data about our students, staff, website and campus visitors and other individuals we are subject to UK GDPR and Data Protection Act 2018.

Our privacy notices explain how we use personal data, and our data protection policy sets out how personal data will be managed by the University, and our responsibilities.

Your rights

The UK GDPR/Data Protection Act (2018) gives people a wider range of rights in relation to their personal data. The rights are as follows:

• The right to be informed (meaning the right to be told how your data will be used, for example by means of a privacy notice
• The right of access to your personal data held by an organisation
• The right to have inaccurate data corrected
• The right to erasure (known as 'the right to be forgotten')
• The right to restrict processing of your personal data
• The right to data portability
• The right to object
• Rights in relation to automated decision making and profiling

You can read more about your data protection rights on the Information Commissioner's website, including how to exercise your rights with organisations that process your personal data.

Right of Access

If you would like to make a Subject Access Request (SAR) for the data we hold about you, please complete the right of access form and email dataprotection@hull.ac.uk.

If you would like to exercise any other data protection rights or raise a complaint/concern about how the University have handled your personal data, you can contact the Data Protection Officer on the above email.

Please see our data protection policy and other related documents here.