Data Protection
UHI North, West and Hebrides is committed to ensuring that the processing of personal data is only undertaken in the legitimate operation of the College’s business.
UHI North, West and Hebrides and The University of the Highlands and Islands UHI has educational and business requirements to maintain certain personal data about living individuals including employees, students and graduates and others as part of its legitimate activities as a college/university.
The College and the University recognise that the correct and lawful treatment of personal data maintains confidence in the organisation and provides for successful operations. The College and the University are committed to a policy of protecting the rights and freedoms of individuals with respect to the processing of their personal data.
The College is registered with the Information Commissioners Office. Our registration number is Z5164870.
You can contact the Data Protection Officer at any time by emailing dpo.nwh@uhi.ac.uk
For information regarding how we use your information, please access our Privacy Notices.
Principles of the UK GDPR
Principles of the UK GDPR
The College collects and uses information (personal data) about its staff, students and other individuals and bodies that it has contact with and aims to follow the 6 principles outlined in the UK GDPR. We will not sell your data to any 3rd party for marketing purposes.
Personal information must:
- be fairly and lawfully processed
- be processed for limited purposes
- be adequate, relevant and not excessive
- be accurate and up to date
- not be kept for longer than is necessary
- be held in an appropriate and secure manner
UHI NWH must also document any measures it takes to comply with the law, as part of its accountability obligations.
Subject Access Requests
Subject Access Requests
Individuals have a right under the Act to make a request in writing for a copy of the information that an organisation holds about them on computer or in some manual filing systems. This is called a 'subject access request'.
If you wish to make a subject access request, we will need some information from you to confirm your identity. You must specify which personal data you would like to access and any relevant timeframes. Please note if your request is not specific enough, we may contact you to clarify the scope of your request.
For details of how we will treat personal data collected as part your subject access request, please read our Enquiries and Complaints Privacy Notice.
Although requests can be received in any format through any of our contact points, we encourage you to put your request in writing and addressed to:
Data Protection Officer
UHI North, West and Hebrides
Ormilie Road
Thurso
Caithness
Or to discuss your request please call 01847 889000.