Data Protection Principles
I will abide by the principles stated below: Data will be processed as follows:
It is processed lawfully, fairly, and transparently with respect to individual users. It is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes. It is adequate, relevant, and limited to what is necessary regarding the purposes of processing. It is accurate and, where necessary, kept up to date; every reasonable step will be taken to ensure that personal data is correct regarding the purposes for which it is processed, erased, or rectified without delay. It is kept in a form that permits identification of data subjects/individual users for no longer than is necessary for the purposes for which personal data is processed; personal data may be stored for longer periods solely for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, subject to the implementation of appropriate technical and organisational measures required by the GDPR to safeguard the rights and freedoms of individuals. It is processed to ensure the appropriate security of personal data, including protection against unauthorised or unlawful processing, as well as accidental loss, destruction, or damage, through the use of appropriate technical or organisational measures.
I will be responsible for and able to demonstrate compliance with the above principles.
The Rights of Individual Users
The GDPR provides the following rights for individuals:
The right to be informed.
People have the right to be informed about the collection and use of their data. This will be clearly stated in our Privacy Notices.
The right of access.
People have the right to access any personal data concerning them that Oxford Language Nest holds on them. Any individual wishing to exercise this right should contact Oxford Language Nest by email below.
Individuals have the right to obtain the following:
Confirmation that Oxford Language Nest is processing their data.
A copy of their personal data.
Other supplementary information – this largely corresponds to the information that is provided in our Privacy Notice.
The right to rectification.
Under Article 16 of the GDPR, individual users have the right to have inaccurate personal data rectified. If someone feels their data is incorrect, they should submit a ‘request for rectification’ to me via the email below.
The right to erasure.
Under Article 17 of the GDPR, individuals have the right to request the erasure of their personal data. This is also known as the ‘right to be forgotten’. This right is not absolute and applies only in certain circumstances. People have the right to have their personal data erased if:
– Personal data is no longer necessary for collection or processing purposes.
– Data was collected relying on the consent of individual users, and the user has withdrawn that consent.
– The data was collected or processed based on a ‘legitimate interest’, and a person objects to the processing. There is no overriding legitimate interest in continuing this process.
In such cases, I agree to erase the data, allowing the person the ‘right to be forgotten’. If a person wishes to have their data erased, they should submit a ‘request to be forgotten’ to me at the email address below.
The right to restrict processing
Under GDPR, individuals have the right to restrict the processing of their personal data in certain circumstances. While the data can still be stored, the methods of processing and sharing it may be limited. This might occur, for instance, if a student chooses to take a break from online English language tuition with Oxford Language Nest UK. Individuals may prefer their data to remain in our database but request that we refrain from contacting them for future programmes, tuition, or related initiatives. In such cases, Oxford Language Nest agrees to restrict the use and processing of an individual’s data previously held by Oxford Language Nest. If a person wishes to limit the processing of their data, they should submit a ‘data processing restriction request’ to Oxford Language Nest via the email provided below. They should clarify the restrictions they wish to impose, the data this corresponds to, and the period during which they want the conditions to be in place.
The right to data portability
People can receive personal data from Oxford Language Nest in a structured, commonly used format. This data can be issued to that person and, if requested by the person, transferred to another.
The right to object
Article 21 of the GDPR grants individuals the right to object to the processing of their personal data. This effectively allows individuals to request that Oxford Language Nest cease processing their information. On behalf of Oxford Language Nest, I will agree to halt the use or processing of their data in such cases. If someone wishes for me to stop processing their data, they should clearly communicate this by emailing me at the address below.
