/prod01/prodbucket01/media/durham-university/departments-/geography/alumni/historical-department/aerial-shots/2018-aerial-view-of-campus.JPG)
Privacy Notices
Privacy Notices inform data subjects about how the University processes their personal data.
Privacy Notices for the following categories of data subjects have been published:
- Alumni and Supporters
- Customers of Retail Office
- Day Nursery
- Employees
- Individuals captured by CCTV
- Job Applicants/Potential Applicant
- Researchers
- Student Applicants/Potential Applicants
- Students
- Suppliers
- Visitors
- 含羞草社区 Assessment Centre Clients
- University Secretary's Office: Council & Sub-Committee Members
- General Privacy Notice
- Privacy Notice for Data in the National Pupil Database
- Privacy Notice for Library and Collections
Individual rights regarding personal data
Informed
Individuals have the right to be made aware of how their personal data is being used.
Timescale: This should be documented and communicated in a Privacy Notice available at the point of data collection.
Access
Individuals have the right to access their personal data so that they are aware of and can verify the lawfulness of the data processing, as well as correcting any inaccuracies in that data. There are some circumstances under which the University will consider a request for access to personal data on behalf of another individual, or a request for access to personal data of another individual without their consent. For more information please refer to the Subject Access Request page.
Timescale: Respond without undue delay and information provided within one calendar month. This may be extended by a further two months where necessary, considering the complexity of the request.
Rectification
Individuals have the right to have personal data rectified where it is inaccurate or incomplete which could include but is not limited to:
- Having incomplete personal data completed, including by means of providing a supplementary statement
- Having incorrect information rectified.
Timescale: Respond without undue delay and no later than one calendar month. This may be extended by a further two months where necessary, considering the complexity of the request.
Erasure
Individuals have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing. This is often called the 'right to be forgotten'. This right is not absolute and only applies in specific circumstances:
- The reason for processing has ceased
- Consent has been withdrawn (if consent was the basis for processing)
- The data subject has objected to processing and there is no legal basis for continuing
- The data has be