Data Protection

The University is registered with the Information Commissioner’s Office. Registration Number: Z5607918. 

Contact Details 

Data Protection Officer 
Robert Gordon University 
Garthdee 
Aberdeen 
AB10 7QB 

Email: dp@rgu.ac.uk 
Phone: +44 (0)1224 262076 

Prospective students, employees and other stakeholders have to trust that their personal details will be safe at the University. We, at RGU, are expected to safeguard personal information of staff, applicants, students and members of the public properly and not to abuse it. For this reason, we have developed a robust Information Governance Policy that would meet these needs. 

Data Subject Rights 

UK GDPR gives data subjects individual rights that organisations processing personal data must adhere to.

The right to be informed 

The University collects and processes personal data for a variety of purposes, our Privacy Notices detail this information: 

The right of access 

Individuals have a right to know what data is held about them at RGU and a right to access that data. The university provides a Subject Access Request Form in order to assist in making a request; however you may also submit a request in a letter, email or verbally. Please see our Accessing Your Personal Data - Guidance Note for further information on how to make a request. Please note the university may request evidence of your identity (a copy of passport and/or driver’s license). Once the request has been validated and verified the university will respond within the statutory time period. Please note that you can only request your own personal data under a subject access request, unless you are proven to be authorised to act on behalf of the data subject.

The right to rectification, erasure, restrict processing, data portability, object and rights related to automated decision making 

To enable any of the above rights, or to find out more information, then please contact dp@rgu.ac.uk with as much information as possible to allow the Data Protection Officer to provide timely guidance.

CCTV 

Organisations, whose premises have CCTV (close circuit television) systems in operation, must inform the UK Information Commissioner that they are gathering personal information about the people they are recording. They must also put up signs to warn the public that this recording is taking place. RGU is registered with the Information Commissioner for the use of CCTV. 

Contact dp@rgu.ac.uk for further information. 

Breaches 

A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data. This includes incidents that compromise the confidentiality, integrity or availability of personal data. If you believe that a data breach of University data has occurred, then please complete the reporting form and send it to dp@rgu.ac.uk.

Complaints 

If you have any questions or concerns about the way in which the University handles your personal data, please get in contact with the University Data Protection Officer.

If you remain dissatisfied with the response or you wish to make a complaint about the University’s handling of personal data then please contact dp@rgu.ac.uk, for the attention of the University Secretary. The University Secretary will then appoint a senior member of staff of the University to investigate. Acknowledgement of your complaint will be sent in the 30 day statutory time frame and a response will be provided without undue delay. You will be kept updated on the progress of your complaint at regular intervals.

If you remain dissatisfied after the conclusion of your complaint with the University, you have the right to lodge a complaint with the Information Commissioner’s Office.