Student_writing

Data Protection

Data Protection

Buckinghamshire New University processes personal information to enable it to provide education and support services to its students. For this reason the University holds and processes personal data about its students, staff and other data subjects for academic, administrative and commercial purposes. It also holds personal data to fulfil regulatory and statutory obligations to the government and other associated bodies.

The University is committed to processing personal information safely and securely in line with the requirements of the UK data protection legislation, namely the Data Protection Act 2018 and the UK GDPR.

Data Protection Policy

This policy outlines how BNU will meet its obligations as a data controller. It sets forth the expected behaviours of staff and third parties in relation to the collection, use, retention, transfer, disclosure and destruction of any personal data

Privacy Notices

The university has published a number of privacy notices to provide more details about how we use your personal data in different situations.  These privacy notices are available here:

Higher Education Statistics Agency (HESA) and Data Protection

It is a statutory requirement for the University to send some of the information we hold about you to HESA. HESA is the official source of data about .

Information Requests under Data Protection Legislation

Under data protection legislation, individuals have the right to access the information that an organization holds about them. This process is known as making a Subject Access Request (SAR).

If you wish to access personal data that relates to you, you should submit a Subject Access Request. This will allow you to find out whether BNU processes your data, receive a copy of your data, and verify that we are processing it lawfully.

To submit a Subject Access Request, the easiest method is to complete our . In your request, please include:

  • A scanned copy of one of the following proof of ID: BNU student card, staff card, passport, driving licence, or UK birth certificate.
  • If someone is applying on your behalf, please provide (in addition to your proof of identity) a signed statement authorizing us to release the requested data to them. This can also be scanned.

Using the form helps us verify your identity and respond to your request promptly and accurately. There is no charge for making a Subject Access Request. Alternatively, you can submit a request by emailing our Data Protection Team at dpofficer@bnu.ac.uk.

Upon receipt of your request and appropriate proof of identity, we will inform you of the statutory deadline by which we will reply. BNU has one calendar month from the date of receipt to respond with the information that meets your request. However, it may take longer depending on the complexity and number of requests. If we need more time to process your request, we will inform you as soon as possible.

If, upon receiving our response, you believe that the University has not handled your request correctly, please email dpofficer@bnu.ac.uk to review your concerns. If you are still not satisfied, you may contact the .

Under data protection legislation an individual has the right to exercise various other rights related to  

a) Information access. 

b)  Objection to Processing. 

c)  Objection to automated decision-making and profiling. 

d)  Restriction of Processing. 

e)  Data portability. 

f)  Data rectification. 

g)  Data erasure.

You can exercise these rights by submitting a Data Subject Request. To do so, please email our Data Protection Team at dpofficer@bnu.ac.uk.

When submitting your request, please be as specific as possible about the personal data you wish to have rectified, erased, restricted, or ported, or the nature of your objection. As with Subject Access Requests, attaching a picture or scan of one form of photo ID will help us swiftly verify your identity.

For the purposes of preventing or detecting crime, or apprehending or prosecuting offenders, the police and other agencies may request personal data about students, staff, or other individuals whose information is held by the University. Such requests may also come from other government agencies, including Immigration (UKVI), the Department for Work and Pensions, HM Customs and Revenue, and UK Visas.

Police requests for information must be submitted using the Official Police Request for Disclosure of Personal Information Form, also known as the DP1 form, which is held by the police.

If you represent a police force or another government agency and wish to submit a request, please email the Data Protection Team at dpofficer@bnu.ac.uk

Further Information

If you have any concerns with regards to the way your personal data is being processed you can contact the Data Protection Officer directly by e-mail dpofficer@bnu.ac.uk or by post. 

Our general postal address is: Buckinghamshire New University, Queen Alexandra Road, High Wycombe, Buckinghamshire HP11 2JZ. Our telephone number is: +44 (0)1494 522141.

If you require further information about data protection you can also contact the Information Commissioner’s Office (ICO). Post: Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK95AF. Tel: 0303 123 1113.    

Freedom of Information

If you wish to make a request under the Freedom of Information Act 2000 you can do so by completing the or by emailing FOIofficer@bnu.ac.uk.