Our website uses cookies to distinguish you from other users of our site. This helps us to continually improve your experience when using our website. We also use external analytics software which may set additional cookies to perform their analysis. These cookies (and any others in use) are detailed in our site Privacy and Cookie Policies. You can delete or disable these cookies in your web browser at any time but doing so may impact website functionality and user experience.

Under data protection legislation an individual has the right, subject to certain exemptions, to access information from organisations that process their personal data. The process for obtaining this information is known as a subject access request.

Subject access requests are different to requests submitted under Freedom of Information legislation, which relate to information about the organisation itself.

Making a Subject Access Request

If you wish to make a subject access request to Cambridge Enterprise, your request must be made in writing (this may be in electronic form).

Before we can act on your request, we must be sure of your identity.

You are entitled:

  • to be informed whether your personal data is being processed by Cambridge Enterprise;
  • to have the information constituting the personal data communicated to you in a permanent form. If your subject access request is made electronically, the information will be provided in a commonly used electronic format, unless you agree to receive it in some other way;
  • to be given the purposes of the processing and the categories of personal data concerned;
  • to be given details of the recipients to whom the data has been or will be disclosed, including recipients in countries outside the European Economic Area and the appropriate safeguards relating to such data transfers;
  • to be informed about the length of time the data will be stored, or how that period is determined;
  • to be informed about any third-party sources of the data, and where this information is available; and
  • to request the rectification or erasure of data, the restriction of processing and to object to processing.

You may apply to access your data in writing in any way you choose. An online Subject Access Request Form is made available for your convenience.

Submit a Subject Access Request online

If you prefer to submit your form by post, downloadable versions of the form are available below. Each form sets out where you should send your request.

SUBJECT ACCESS REQUEST FORM (WORD)   SUBJECT ACCESS REQUEST FORM (PDF)

Under data protection legislation, the time limit for responding to a subject access request is one month from the date of receipt. However, if a request is complex, we have the right to extend the time period for response by a further two months.

If you have any reason to believe that Cambridge Enterprise has not dealt correctly with your request, please contact us via the button below.

email us

If you are still not satisfied, you should contact the Information Commissioner’s Office (ICO) at Wycliffe House, Water Lane, Wilmslow, SK9 5AF.

Making a Subject Access Request (job applicants only)

Cambridge Enterprise uses Teamtailor, a third party service, to deliver recruitment processes.

Job applicants who have provided information via the Teamtailor service at  https://careers.enterprise.cam.ac.uk/ who wish to make a Subject Access Request or request to remove their data can do so directly via https://careers.enterprise.cam.ac.uk/data-privacy. Please be aware that any requests made via this link will relate only to data submitted via the Careers page powered by Teamtailor and will not include data held elsewhere within Cambridge Enterprise. If you wish to make a request regarding all data held by Cambridge Enterprise, please follow the general process for making a Subject Access Request as detailed above.

Exercising other data protection rights

Under data protection legislation an individual has various other rights. These rights requests may be submitted in whatever format you wish, but we recommend that you contact us via the button below to ensure a timely response to your request.

email us

Please try to be as specific as possible about what personal data you are asking to be rectified, erased, restricted or ported, or the nature of your objection. As with subject access requests, it helps to attach a picture/scan of one form of photo ID to enable us to verify your identity swiftly.

How we use your personal information to handle your GDPR rights request

We will use your personal information to log, consider and answer your data protection rights request to Cambridge Enterprise, as well as to verify your identity. We will liaise with colleagues internally (including those with access to or otherwise responsible for the personal data in question) as well as, where applicable and necessary, third party individuals whose personal data may be intermingled with your own. From time to time we analyse requests to look for trends or collate statistics. If you pursue a complaint to the ICO and/or the courts, we will share your information as necessary in answering regulatory enquiries and making submissions.

These uses of your personal information are necessary to fulfil our legal obligations and public interest tasks in handling such requests.

How we use your personal informationDATA PROTECTION RIGHTS