Your data rights
Under the General Data Protection Regulation (GDPR) you have the following rights:
Faq Items
Right to be informed
Right of access
Right to rectification
Right to erasure
Right to restrict processing
Right to data portability
Right to object
Right to object to automated decision-making
Rights Requests
The Data Protection Officer (DPO) is responsible for processing all Rights Requests.
If you wish to exercise any of your rights, please contact the DPO by email.
You should describe the information you want as clearly as possible. If your request is too broad or unclear, we will ask you to be more specific.
Please be aware that we cannot process your request until we have received proof of your identity.
All requests will be logged and acknowledged on behalf of the University by the DPO.
Timescales
We will deal with your Rights Request ‘without undue delay’ and, in any event, within one month. In all cases the timescale starts from the point that we have verified your identity.
The timescale is extendable by two further months, if necessary, due to complexity/scale of the request.
A decision to extend the timescale will be made by the DPO who will inform you of any such extension within one month of receipt, together with reasons for the delay.
Fees
A Rights Request can be exercised free of charge.
However, where a Rights Request is deemed to be ‘manifestly unfounded’ or ‘excessive’ (which includes repeat requests), the University may either refuse to act on the request or charge a reasonable fee.
A decision that a Rights Request is manifestly unfounded or excessive will be made by the DPO.
The University is also allowed to charge a reasonable fee for providing copies of the data which has already been provided.
A ‘reasonable fee’ will be calculated based on the actual administrative costs of providing the information.
