Name: St Hugh's College
Address: United Kingdom

You can download a PDF of this form here if you would prefer
ABOUT
The General Data Protection Regulations (GDPR) provides you, the data subject, with a right to receive a copy of the data/information we hold about you or to authorise someone to act on your behalf. Please complete this form if you wish to receive your data. You will also need to provide proof of your identity. Your request will be processed within 30 calendar days upon receipt of a fully completed form and proof of identity.
PROOF OF IDENTITY
We require proof of your identity before we can disclose personal data. Proof of your identity should include a copy of two documents such as your birth certificate, passport, driving licence, official letter addressed to you at your address e.g. bank statement, recent utilities bill or council tax bill. The documents should include your name, date of birth and current address. If you have changed your name, please supply relevant documents evidencing the change.
ADMINISTRATION FEE
St Hugh’s College’s policy is not to charge for Subject Access Requests, unless it is manifestly unfounded or excessive, particularly if it is repetitive. You will be informed if this is the case, on receipt of the form.
CONTROLS SURROUNDING THE SAR PROCESS
When this form has been received by St Hugh’s College the information submitted will be recorded in a log and kept for 2 years. When the SAR is verified, other information is required, or if the SAR returns no data then the requestor and/or agent will be informed. Under the GDPR, organisations can withhold personal data if disclosing it would 'adversely affect the rights and freedoms of others; the requestor and/or agent will be informed. If the SAR is verified, the data will be provided in an encrypted file and sent to the subjects address via either recorded mail or placed into an online repository, together with a phone number for the DPO. The subject will be required to call the DPO for the decryption password. St Hugh’s College will delete the file after 30 days of being made available.

SECTION 1
Please fill in your details (the data subject). If you are not the data subject and you are applying on behalf of someone else, please fill in the details of the data subject below and not your own.
Name
Title First Last
Date of birth
Day
Month
Year
Current address
Street Address Address Line 2 Town/city County Post code Country
Previous address
Street Address Address Line 2 Town/city County Post code Country
Day time telephone number
Preferred method of receipt for data:
- Online (details sent via email) please supply an email address below
- To my address
Email
I am enclosing the following copies as proof of identity (you must supply at least two items from this list):*
- Birth certificate
- Driving licence
- Passport
- An official letter to my address
If none of these are available please email dpo@st-hughs.ox.ac.uk for advice
Upload proof of identity*
Max. file size: 5 GB.
Personal Information
If you only want to know what information is held in specific records please indicate in the “Details” box below. Please let us know in what capacity your involvement in the College is/was based, such as student, staff, visitor etc.

Are you completing this form on behalf of someone else?*
- Yes
- No
SECTION 2
Please complete this section of the form with your details if you are acting on behalf of someone else (i.e. the data subject). If you are NOT the data subject, but an agent appointed on their behalf, you will need to provide evidence of your identity as well as that of the data subject and proof of your right to act on their behalf.
Name
Title First Last
Date of birth
Day
Month
Year
Current address
Street Address Address Line 2 Town/city County Post code Country
Previous address
Street Address Address Line 2 Town/city County Post code Country
Day time telephone number
I am enclosing the following copies as proof of identity (you must supply at least two items from this list):*
- Birth certificate
- Driving licence
- Passport
- An official letter to my address
If none of these are available please email dpo@st-hughs.ox.ac.uk for advice
Upload proof of identity*
Max. file size: 5 GB.
What is your relationship to the data subject?
(e.g. parent, carer, legal representative)
I am enclosing the following copy as proof of legal authorisation to act on behalf of the data subject:
- Letter of authority
- Lasting or Enduring Power of Attorney
- Evidence of parental responsibility
If not listed, please specify in 'other'
Other:
Other:
Upload proof of legal authorisation*
Max. file size: 5 GB.

GDPR SAR Form

Step 1 of 4

SECTION 1

SECTION 2