
Data Protection
Data Protection
Buckinghamshire New University processes personal information to enable it to provide education and support services to its students. For this reason the University holds and processes personal data about its students, staff and other data subjects for academic, administrative and commercial purposes. It also holds personal data to fulfil regulatory and statutory obligations to the government and other associated bodies.
The University is committed to processing personal information safely and securely in line with the requirements of the UK data protection legislation, namely the Data Protection Act 2018 and the UK GDPR.
Data Protection Policy
This policy outlines how BNU will meet its obligations as a data controller. It sets forth the expected behaviours of staff and third parties in relation to the collection, use, retention, transfer, disclosure and destruction of any personal data
Privacy Notices
The university has published a number of privacy notices to provide more details about how we use your personal data in different situations. These privacy notices are available here:
- Privacy notice for Accommodation
- Privacy notice for BNU Website
- Privacy notice for Captured Content
- Privacy notice for CCTV
- Privacy notice for Counselling and Student Wellbeing
- Privacy notice for Enquiries and Contacts
- Privacy notice for External Stakeholders
- Privacy notice for Finance Payment & Suppliers
- Privacy notice for Graduation
- Privacy notice for Human Performance, Exercise and Wellbeing
- Privacy notice for Health & Safety
- Privacy notice for Library Users
- Privacy notice for Marketing and Publicity
- Privacy notice for Sports and Fitness Memberships
- Privacy notice for Students
- Privacy notice for Student Application and Enrolment
- Privacy notice for Staff
- Privacy notice for Staff Recruitment
- Privacy notice for Student Images, Video and Voice
- Privacy notice for Visitors, Correspondents and Customers
Higher Education Statistics Agency (HESA) and Data Protection
It is a statutory requirement for the University to send some of the information we hold about you to HESA. HESA is the official source of data about .
Under data protection legislation, individuals have the right to access the information that an organization holds about them. This process is known as making a Subject Access Request (SAR).
If you wish to access personal data that relates to you, you should submit a Subject Access Request. This will allow you to find out whether BNU processes your data, receive a copy of your data, and verify that we are processing it lawfully.
To submit a Subject Access Request, the easiest method is to complete our . In your request, please include:
- A scanned copy of one of the following proof of ID: BNU student card, staff card, passport, driving licence, or UK birth certificate.
- If someone is applying on your behalf, please provide (in addition to your proof of identity) a signed statement authorizing us to release the requested data to them. This can also be scanned.
Using the form helps us verify your identity and respond to your request promptly and accurately. There is no charge for making a Subject Access Request. Alternatively, you can submit a request by emailing our Data Protection Team at dpofficer@bnu.ac.uk.
Upon receipt of your request and appropriate proof of identity, we will inform you of the statutory deadline by which we will reply. BNU has one calendar month from the date of receipt to respond with the information that meets your request. However, it may take longer depending on the complexity and number of requests. If we need more time to process your request, we will inform you as soon as possible.
If, upon receiving our response, you believe that the University has not handled your request correctly, please email dpofficer@bnu.ac.uk to review your concerns. If you are still not satisfied, you may contact the .
Under data protection legislation an individual has the right to exercise various other rights related to
a) Information access.
b) Objection to Processing.
c) Objection to automated decision-making and profiling.
d) Restriction of Processing.
e) Data portability.
f) Data rectification.
g) Data erasure.
You can exercise these rights by submitting a Data Subject Request. To do so, please email our Data Protection Team at dpofficer@bnu.ac.uk.
When submitting your request, please be as specific as possible about the personal data you wish to have rectified, erased, restricted, or ported, or the nature of your objection. As with Subject Access Requests, attaching a picture or scan of one form of photo ID will help us swiftly verify your identity.
For the purposes of preventing or detecting crime, or apprehending or prosecuting offenders, the police and other agencies may request personal data about students, staff, or other individuals whose information is held by the University. Such requests may also come from other government agencies, including Immigration (UKVI), the Department for Work and Pensions, HM Customs and Revenue, and UK Visas.
Police requests for information must be submitted using the Official Police Request for Disclosure of Personal Information Form, also known as the DP1 form, which is held by the police.
If you represent a police force or another government agency and wish to submit a request, please email the Data Protection Team at dpofficer@bnu.ac.uk.
Further Information
If you have any concerns with regards to the way your personal data is being processed you can contact the Data Protection Officer directly by e-mail dpofficer@bnu.ac.uk or by post.
Our general postal address is: Buckinghamshire New University, Queen Alexandra Road, High Wycombe, Buckinghamshire HP11 2JZ. Our telephone number is: +44 (0)1494 522141.
If you require further information about data protection you can also contact the Information Commissioner’s Office (ICO). Post: Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK95AF. Tel: 0303 123 1113.
Freedom of Information
If you wish to make a request under the Freedom of Information Act 2000 you can do so by completing the or by emailing FOIofficer@bnu.ac.uk.