Data Protection Policy

The University of Exeter is a data collector and is registered with the Office of the Information Commissioner as required under the Data Protection Act 1998. We (as the University of Exeter) will only process your personal data in accordance with the current Data Protection legislation. Until 24 May 2018 this is the Data Protection Act 1998 (or DPA for short). From 25 May 2018 we shall process your personal data in accordance with the General Data Protection Regulations (or GDPR for short).

In general terms, we process your personal data in order to be able to administer, provide and manage your accommodation. In order to fulfil these obligations we may need to share your personal data with a third party such as:

o    Nominated accommodation providers who have been contracted by us to provide accommodation to you
o    Service providers who help with the administration or practical day-to-day running of the Residences e.g. cleaning contractors, catering etc
o    Close family and the emergency services where there is an emergency situation
o    Debt recovery agents and law enforcement agencies to help pursue and recover debt

Prior to the implementation of GDPR we are likely to make changes to our full Accommodation Privacy Notice, however we will ensure that you are provided with access to the most up-to-date information before you are issued with an accommodation contract.

You can view the University’s full Data Protection Information for Students on our website.