Privacy Notice


IU Home > Privacy Notice > Make an Information Request

Make an Information Request

Purpose and legal basis for processing

What we Need and Why We Need it

What we do with it

How Long we Keep it

What are your Rights?

Do we Use any Data Processors?

Purpose and Legal Basis For Processing

Our purpose for processing your personal data is so we can fulfil your information request to us.

The legal basis for this is article 6(1)(c) of the GDPR, which relates to processing necessary to comply with a legal obligation to which we are subject.

What we Need and Why We Need it

We need information from you to respond to you and to locate the information you are looking for. This enables us to comply with our legal obligations under the legislation we are subject to:

  • General Data Protection Regulations (2016)
  • Data Protection Act (2018)

What we do with it

We’ll store an email thread in our email system to record your enquiry and all subsequent messages to and from you.

If you are making a request about your personal data, or are acting on behalf of someone making such a request, then we’ll ask for information to satisfy us of your identity. If it’s relevant, we’ll also ask for information to show you have authority to act on someone else’s behalf.

If the request is about information we have received from another organisation – regarding an enquiry, for example – we’ll routinely consult the organisation/s concerned to seek their view on disclosure of the material.

How long we keep it

For information about how long we hold personal data, see here.

What are your Rights?

We are acting in our corporate capacity to respond to your enquiry, so you have the right to object to our processing of your personal data.

For more information on your rights, please see Your Data Protection Rights.

Do we Use any Data Processors?