Your Rights

Right of subject access

You have the right to be told by the University whether it or someone else on its behalf is processing your personal data and if so, to be given a description of the personal data, the purposes for which they are being processed and the likely recipients and sources of that personal data. You are also entitled to receive a copy of this personal data. All requests for access must be made in writing to the Data Protection Officer. The University will respond promptly to requests within forty days. See making an information request.

Right to prevent processing likely to cause damage or distress

You are entitled to request, in writing, that the University does not process personal data where such processing is likely to cause substantial damage or substantial distress to you or another person. There are a number of provisos to this right, in particular:

the damage or distress must be "unwarranted" or
the processing is not necessary for fulfilling a contract with you
for fulfilling a legal obligation of the University
or for protecting your vital interests.

Right to prevent processing for purposes of direct marketing

You are entitled to request in writing that the University does not process personal data for the purposes of direct marketing.

Rights in relation to automated decision-taking

You are entitled, by writing, to request that the University ensures that no decision that significantly affects you is based solely on the processing of personal data by automatic means. An example of automated decision-taking is where the decision to reject interviewees is made by computer on the basis solely of psychometric testing. Where a decision which significantly affects you is based solely on such automatic processing, the University must notify you that the decision was taken on that basis as soon as reasonably practicable. Note, though, that any human intervention or discretion will mean that the automated decision-taking provisions do not apply.

Right to compensation

If you suffer damage or distress as a result of the University’s breach of any of the requirements of data protection legislation, you may be entitled to compensation.

Rectification, blocking, erasure, destruction

You may request that the University to rectify, block, erase or destroy data relating to you if it is inaccurate. Please contact us if you believe information we hold is incorrect.

Requests for assessment

You may request that the Information Commissioner assesses whether or not it is likely that any processing of personal data has been or is being carried out by the University in non-compliance with the Act.