Oxford Brookes University (OBU) will be the Data Controller of any personal data that you supply. This means that they will make the decisions on how your data is used and for what reasons. You can contact OBU’s Information Management Team on 01865 485420 or email firstname.lastname@example.org.
Why do we need your data?
- To provide an overall university vaccine status to Oxfordshire and Wiltshire County Council Public Health teams providing assurance to the wider community.
- To provide an overall university vaccine status to the Office for Students and the UK Health Security Agency in the event and management of outbreak control.
- To inform the university major incident team of high level vaccine uptake position.
- To inform the NHS in forward planning of of pop up vaccination clinics detailing the style of vaccine required for second doses and when.
- To inform the Oxford Brookes Test and Trace team when they are managing close contacts to a positive case and carrying out campus investigations to correctly identify and ask those to isolate.
- To comply with NHS requirements of informing placement providers of student vaccination status.
What is OBU's legal basis for collecting this data?
The legal basis for processing personal data is performance of a public task by the data controller. The legal basis for processing special category personal data is that processing is in the substantial public interest.
How does OBU use this data?
If OBU asks you for sensitive data such as; student or staff name, ID, contact details, course or functional team, academic advisor or line manager, vaccination status, dates, type of vaccine, any further details deemed important, OBU will use these data because:
- You have given Oxford Brookes University explicit consent to do so
- The University needs to use this data to support you or others from the impact of coronavirus
- The University needs to use this data for reporting and support purposes.
What types of personal data will Oxford Brookes University use?
Where the reporting individual has disclosed their identity, we will use their name, email address and date of birth.
We will use records of interactions following the submission of a report where the reporting individual has disclosed their identity.
Who will OBU share your data with?
Your data will be shared, only where required, to comply with NHS care settings requirements and placement providers. A summary of the data will be shared with the Office for Students, Oxfordshire County Council Public Health team, Wiltshire Public Health team, UK Health Security Agency, NHS, OBU Test and Trace team and Major Incident lead.
Will OBU transfer my data outside of the EEA?
What rights do I have regarding my personal data that OBU holds?
You have the right to be informed – via privacy notices such as these and other communications relating to data protection.
You have the right of access to your data - if you would like copies of the personal data Oxford Brookes stores please contact the IT Services Information Management team (contact details below).
You have the right to correct data if it is wrong - please contact the Information Management team if you believe your personal data is incorrect or out of date.
You have the right to ask for your data to be deleted - please contact the Information Management team if you believe you have a reason related to your personal situation for us to delete personal data we hold.
You have the right to restrict use of the data we hold - in certain circumstances you can request that processing of your personal data is restricted pending review.
You have the right to data portability - where possible Oxford Brookes will facilitate the digital transfer of data between compatible systems.
You have the right to object to Oxford Brookes University using your data. Please contact the Information Management team if you believe your personal data is being used unlawfully or you have a reason particular to your personal situation why we should not be processing it.
Your data will not be used to undertake any automated decision making or profiling using your personal data that falls within the scope of UK law.
Where did OBU source my data from?
Data is sourced directly from students, staff and other users of the reporting tools.
Are there any consequences of not providing the requested data?
If the requested data is not provided, we will not be able to use it to effectively test and trace the correct individuals to self isolate which will lead to further and wider disruption to teaching sessions. We will not be able to effectively support those self isolating and as having a confirmed case of coronavirus within Oxford Brookes’ community.
If contact details are not disclosed, Oxfordshire and Wiltshire County Council Public Health teams, UK Health Security Agency, NHS, OBU Test and Trace team and Major Incident lead will not be able to accurately assess any mitigation measures needed to manage an outbreak of Covid-19 positive cases.
Will there be any automated decision making using my data?
There will be no automated decision making using your data.
How long will OBU keep your data?
When you complete a report, your details will be held for students, for the duration of their study at Oxford Brookes. Thereafter, your report will be anonymised in order that you will not be identifiable. Anonymised data will be retained for statistical purposes.
Who can I contact if I have concerns?
You can contact the Information Management Team.
Postal Address: GDPR Queries, Information Management Team, IT Services, Room 2.12, Gibbs Building, Headington Campus, Gipsy Lane, Oxford, OX3 0BP
Tel: 01865 485420