Throughout your time as a University student we will need to collect and process personal data which relates to you. Examples of the types of personal data that we may collect and process prior to, during and after your time as a University student include:
We provide students, on enrolment, with a fair processing statement, which will provide you with specific information regarding the purposes for which your personal data will be processed, the legal basis for that processing, and any disclosures that will be made of your personal data. In addition you can view our fair processing notices for students and prospective students and applicants via these PDF documents:
Fair Processing Notice for Students
Fair Processing Notice for Prospective Students and Applicants.
Some of the information that we hold on your student records is classified as sensitive personal data (or special categories of personal data under the GDPR). This may include information about your physical or mental health, or your nationality. Where we hold sensitive personal data about you, we are subject to even stricter obligations to ensure that this data is kept confidential and used only for specific purposes.
The processing of student personal data is necessary for the performance of our agreements with you. Personal data may also be processed where this is necessary for the compliance with a public task, legal obligation (for example, reporting incidents of crime to the police), vital interest or where it is in our legitimate interests to do so.
Where we are required to report statistics about our students, including for example in relation to equality and diversity monitoring, the required information will be anonymised to ensure that no student can be personally identified. If, however, the numbers reported are of a number which could result in the identification of an individual student, the figures will not be made available publically.
Where your personal details change, for example if you move house, it is your responsibility to inform us so that we can correct your student record. You are also responsible for ensuring that your student ID, access card, and any passwords that we issue to you are kept confidential and not given to anybody else.
Where you access personal data in the course of your studies
If, in the course of your studies you need to process personal data about third parties, for example in conducting research, you should in the first instance consult and comply with all restrictions contained within and terms of our data protection guidelines for student projects. If you are in any doubt as to whether the intended processing is fair, lawful and transparent in accordance with the GDPR you should contact the Information Protection Unit prior to collecting or processing any personal data.