Privacy Notice

The University of Sheffield is a registered data controller with the Information Commissioner’s Office.

The registered address is:
Sheffield University
Western Bank
Sheffield
S10 2TN

The University of Sheffield’s Data Protection Officer can be contacted at dataprotection@sheffield.ac.uk

The information that you provide will be held in accordance with the Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

What data we collect

Your personal data will be collected and processed if you submit an enquiry through the enquiry form in order for University staff to answer questions submitted in enquiries and for reporting purposes. Enquiries will be deleted from this website after a maximum of 90 days.

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration. This allows us to ensure that content from our site is presented in the most effective manner for you and for your computer. We will not use this data for other purposes.


If you register for events advertised on this website using Career Connect, Eventbrite or any other external website, any data you submit will be held in accordance with their privacy policy. Similarly, if you apply for vacancies advertised on this website on behalf of external organisations any data you submit will be held in accordance with their privacy policy.

Who has access to this data

The University will not disclose your personal data to any external third party, other than as set out above and/or where you have given us permission to do so, unless we are required to do so by law.

We may share your personal data with other internal departments including relevant academic departments.

The personal data that you provide the University of Sheffield will be held in compliance with our Retention Schedule, which can be found at: https://www.sheffield.ac.uk/polopoly_fs/1.821413!/file/2019_UoS-
retention-schedule_rewrite_v2_issued_20190729.pdf

Legal Basis

Under the General Data Protection Regulation, the University must establish a legal basis for processing your personal data and communicate this to you. Your personal data is processed in accordance with Article 6(f):
processing is necessary for the purposes of the legitimate interests.

Your right of access to your personal data

You have a right to request a copy of the information that we hold about you. If you would like to request a copy of some or all of your personal data, please contact the University Secretary’s Office. We want to make sure that your personal data is accurate and up to date. You may ask us to correct or remove information that you think is inaccurate.

Your other rights as a data subject

The GDPR provides you, as a data subject, with a number of rights in relation to your personal data. You have the right to withdraw your consent where that is the legal basis of our processing, have inaccuracies in the personal data that we hold about you rectified, a right to erasure, to request that the processing of your personal data be restricted, to object to certain processing activities and to complain to the Information Commissioner’s Office about the way we process your personal data.

Who do I contact if I want to know more?

For further information about your right to access information we hold about you, to make a complaint about the way in which we are handling your personal information, or to request to be removed from our systems,
please contact the Data Protection Officer at dataprotection@sheffield.ac.uk

If you are not satisfied with our response or wish to raise a complaint with our supervisory body, you may complain to the Information Commissioner’s Office.