Number Of Rights.pdf

UWE has a Privacy Compliance Framework and Data Protection & Privacy Strategy, which includes a Statement of Intent regarding Data Subject Rights in line with the General Data Protection Regulation (GDPR). Data subjects, including staff, students, and third parties, have rights such as the right to be informed, access, rectification, data portability, erasure, object, restrict processing, and rights related to automated decision-making.

The right to be informed is fulfilled through Privacy Notices, which provide details on data collection, use, purposes, retention periods, and data sharing. The right to access allows data subjects to confirm data processing, access their data, and receive supplementary information, with requests to be responded to within one month, and a copy of the information provided free of charge.

The right to rectification enables data subjects to have inaccurate personal data rectified, and requests can be made verbally or in writing, with a response to be provided within one month. Other data subject rights, applicable in certain circumstances, include the right to data portability, which allows data subjects to obtain and reuse their personal data, and is responded to within one month and free of charge.

Data subjects can submit queries and requests to [email protected], and UWE may refuse or charge a reasonable fee for manifestly unfounded or excessive requests.