Privacy Statement for Oxford Brookes University

Oxford Brookes University (OBU) will be the Data Controller of any personal data that you supply. This means that they will make the decisions on how your data is used and for what reasons. You can contact OBU’s Information Management Team on 01865 485420 or email

Why do we need your data?
For administrating bus travel.
Use of CCTV for the investigation of incidents on Brookes Buses.

OBUs legal basis for collecting this data is:
• You consent to providing it to us

What types of personal data we will use (Oxford Brookes University)?
Name, Address, DOB, Email Address, Photograph, Staff/Student Number, Gender, CCTV footage

Who will OBU share your data with?
Oxford Bus Company

How long will OBU retain my data?
Click here to see details of OBU's data retention policy.

Will OBU transfer my data outside of the UK?

What rights do I have regarding my personal data that OBU holds?
• You have the right to be informed
• You have the right of access to your data
• You have the right to correct data if it is wrong
• You have the right to ask for your data to be deleted
• You have the right to restrict use of the data we hold
• You have the right to data portability
• the right to object to OBU using your data
• You have rights in relation to using your data automated decision making and profiling.

Where did OBU source my data from?
Oxford Bus Company

Are there any consequences of not providing the requested data?
May affect the ability to travel on Brookes Buses

Will there be any automated decision making using my data?

Who can I contact if I have concerns?
You can contact the Information Management team.
Postal Address: GDPR Queries, Information Management Team, IT Services, Room 2.12, Gibbs Building, Headington Campus, Gipsy Lane, Oxford, OX3 0BP
Tel: 01865 485420