Data privacy policy
We are committed to protecting the privacy and security of your personal information. This notice describes how we collect and use your personal data submitted to us online, by email, on paper or face-to-face, in accordance with the General Data Protection Regulation (GDPR) and associated data protection legislation.
Data Controller
The University of Oxford is the “data controller" for the information that you provide to us. This means that we decide how to use it and are responsible for looking after it in accordance with the GDPR.
Data Protection Officer
The University’s Data Protection Officer can be contacted at data.protection@admin.ox.ac.uk
The University's full Privacy Policy can be found on the University website.
Access to your Data
Access to your personal data within the University will be provided to those staff who need to view it as part of their work.
Where we store or use your data
We may store the data we collect in hard copy or electronically. The data is stored on secure servers and/or in our premises within the UK. We may share your data with third parties or transfer your data outside the EAA under certain circumstances.
Retaining your data
We will only retain your data for as long as we need it to fulfil our purposes, including any relating to legal, accounting, or reporting requirements.
Your Rights
You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). A complaint to the ICO can be made by visiting their website or by calling their helpline on 0303 123 1113