This notice is to tell you what we do with information about you.
Oxford Brookes University as Data controller is committed to protecting your privacy and security of personal data or information. Personal data is information that could identify you.
The University will make the decisions on how your data is used, for what reasons as well as how long it is kept for.
The purpose of this privacy notice is to:
- be clear about the information the University collects and stores about you and its use
- let you know what your rights are and whom you can contact about data use
- comply with obligations under UK data protection and privacy law
Other notices may also apply to you so please read this privacy notice in conjunction with other applicable privacy notices found on the University website.
Why do we need your information?
- We store temporary session data on users machines to enable us to tell the number of unique visitors to the website.
- We store the names of authors of articles and the work they submit, in order to attribute the work to the correct author
- We store the names of businesses seeking to employ students for opportunities advertised on our website, as well as the job description and contact details for each employer in order to direct students to the correct email or website address to apply.
We have to make sure that the way that any information is used is lawful.
Oxford Brookes University’s legal basis for processing the personal information about you is:
- You consent to providing it to us –
- We use the information to support the contract that you have or are going to enter into with the University
- there is a legal obligation to use the information –
- it is in your legitimate interests or those of another party for the information to be used
- it is to support a task carried out in the public interest or it is carried out in accordance with authority held by the University
The legal basis will depend on the reason that your information is being used.
Using Special Category information
Sometimes the University will use sensitive or Special Category Information.
Special Category data (as defined in law) is a data relating to: racial or ethnic origin, political
opinions, religious or philosophical beliefs, trade-union membership, data concerning health or
sexual life, genetic/biometric data or criminal record. Your Special Category data can only be used where there is an exemption in the law which allows for it. The reasons that the University may be able to use this information may include
- You agree or consent to share this information with Oxford Brookes University
- This information is already publicly known (lawfully)
- Oxford Brookes needs to use this data for legal purposes
- Oxford Brookes needs to use this data for statistical scientific or research purposes
The right that the University relies on to collect and use this information will depend on the
circumstances that we ask for it.
Will your data be shared, transferred or stored outside the UK?
(Due to the our Content Delivery Network, some data may be stored outside the of the UK).
What rights can you have regarding your personal data which Oxford Brookes holds?
- You have the right to be informed about how your information is used and stored
- You have the right of access to your data (to make a data protection subject access request)
- You have the right to correct data if it is wrong
- You have the right to ask for your data to be deleted
- You have the right to restrict use of the data we hold
- You have the right to data portability
- the right to object to Oxford Brookes using your data
- You have rights in relation to using your data automated decision making and profiling.
Your rights will depend on the legal ground used to process your data.
What was the source of your data?
All data submitted to the website is primary data, direct from the the user.
Are there any consequences if you do not want us to use your information in this way?
If you do not wish for your information to be stored on the website, we will not be able to attribute articles to you, or display employment opportunities on your behalf.
Will there be any automated decision making using my data?
There will be no automated decision making using your data.
How long will Oxford Brookes keep your information for?
Oxford Brookes will keep your data for as long as is necessary, or in line with the University procedures. There is a retention schedule.
Whom can you contact if you have concerns about how this information is used?
You can contact:
- the Information Security Management Team via info.sec@brookes.ac.uk if you have a concern about Data Protection matters or if you want to exercise your rights under Data Protection or Freedom of Information law
- Oxford Brookes‘ Data Protection Officer via BrookesDPO@brookes.ac.uk who ensures that Data Protection provisions are applied lawfully in Oxford Brookes if you are concerned about the use of your data
- the information Commissioner via the website ICO.org.uk. who is the national regulator for Data Protection or Freedom of Information matters