We are committed to protecting the privacy and security of your personal information. This notice describes how we collect and use your personal data submitted to us online, by email or on paper, in accordance with the General Data Protection Regulation (GDPR) and associated data protection legislation.

DATA CONTROLLER
The University of Oxford is the “data controller” for the information that you provide to us. This means that we decide how to use it and are responsible for looking after it in accordance with the GDPR.

DATA PROTECTION OFFICER
The University’s Data Protection Officer can be contacted at data.protection@admin.ox.ac.uk.

The University’s full Privacy Policy can be found on the University Website.

ACCESS TO YOUR DATA
Access to your personal data within the University will be provided to those staff who need to view it as part of their work.

WHERE WE STORE OR USE YOUR DATA
We may store the data we collect in hard copy or electronically. The data is stored on secure servers and/or in our premises within the UK. We may share your data with third parties or transfer your data outside the EEA under certain circumstances.

RETAINING YOUR DATA
We will only retain your data for as long as we need it to fulfil our purposes, including any relating to legal, accounting, or reporting requirements.

YOUR RIGHTS
Full details on your rights to access and modify your personal data are available here.