Privacy notice

Disability Services Privacy Notice

Updated on 4 May 2020

How the Disability Services process the personal information of staff, students and other stakeholders

On this page

How we use your information

The University’s Disability Services provide a range of disability support to students and staff choosing to register with the service. We also provide a needs assessment service for disabled students at other Universities and Colleges who are referred to us for assessment in connection with their application for the Disabled Students’ Allowance (DSA).

Personal data and Sensitive (special categories) of personal data

The personal data and special categories of personal data processed by Disability Services will vary according to the support required. However, general biographical information such as your name, address, ID. no., date of birth, telephone numbers, address, email address(es), GP details etc will form the basis of your record, as well as diagnostic evidence confirming the nature of your disability.

Special categories of personal data specific to your disability and support needs will also be required.

Data controller

The data controller for personal data used in this support service is normally the University of Dundee.

Data will be processed using the University’s business systems. The University has contracts with providers for their cloud services to safeguard your data.

Your data may be shared with other nominated support providers such as NHS Tayside, your GP or external agencies and individuals providing disability support services contracted by the University. This will be discussed with you on a case by case basis.

Information on adjustments required concerning your individual disability-related needs will normally be provided to University Schools and Services to enable the provision of support. This will be discussed with you on a case by case basis.

Lawful processing

The lawful grounds for processing personal data within this service are normally:

  • the data subject has given consent to the processing of his or her personal data for one or more specific purposes
  • processing is necessary for compliance with a legal obligation to which the controller is subject
  • processing is necessary in order to protect the vital interests of the data subject or of another natural person
  • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

The lawful grounds for processing special categories of personal data within this service are normally:

  • the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject
  • processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject
  • processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent
  • processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject
  • processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3

Your rights

The University respects your rights and preferences in relation to your data. If you wish to update, access, erase, limit or complain about the use of your information, please let us know by emailing dataprotection@dundee.ac.uk. You may also wish to contact the Information Commissioner’s Office.

Enquiries

dataprotection@dundee.ac.uk

dataprotection@dundee.ac.uk
Corporate information category Data protection