Data Subject Access Request
The Data Protection Act 2018 ("the Act") entitles any individual who's data is processed by the University ("we," "our", "us") to request a copy of that data; this is known as a data subject access request ("DSAR"). Your right under the Act is to be told by us whether we or someone else on our behalf is processing your personal data and if so, to be given a description of the personal data, the purposes for which they are being processed and the likely recipients and sources of that personal data. You are also entitled to receive a copy of this personal data.
The information below explains the process for obtaining your personal data.
Requesting a copy of your information
All DSARS should be made in writing to the Data Protection Office by emailing informationoffice@falmouth.ac.uk. The request form below can be used and will help to ensure that we have all the information required to deal with your request. Once your request is received it may be necessary for the Information Governance Officer dealing with your case to confirm your identity to ensure the security of your personal data. The University will provide a copy of your personal data as held at the time of the request, subject to any exemptions. To ensure the University is able to locate the correct information within our control, we may need to ask you to provide more information about the data you require.
The information we provide in response to your request will be that which we hold, subject to any exemptions, at the time we received your request. Any changes made between the date of your request and the date your data is sent to you are not provided for within the Act.
This means that in practice the information provided to you may differ from that which was held at the time your request was received as a result of any ongoing processing as described in our privacy notices
Where third parties are mentioned within your data request we may need to contact them in order to obtain consent to disclose the information. Where consent cannot be obtained or is denied we will consider the reasons and the University's duty of care to both parties as specified within the Act so as to decide whether or not to disclose the information.
Requests will be dealt with within 30 calendar days, however in some circumstances we may need to extend the duration of the process up to 90 days. If we do need to extend the time frame to deal with your request we will communicate this to you in writing.