Your Personal Data:

The University of Glasgow will be what is known as the ‘Controller’ of the personal data you provide to us as part of the declaration process for Online Reporting system in relation to the University.

Why we need it

We need to collect data on the type of harassment or bullying behaviour you have reported, the options for this are:

  • Bullying
  • Harassment
  • Sexual harassment
  • Sexual violence
  • Discrimination
  • Victimisation
  • Other

We collect this data to ensure we direct you to the appropriate support mechanism in the University.

We then provide you with a free text box to provide details of the report. We would encourage you to inform us of the following:

  • What has happened
  • Whether the report concerns a single incident or a series of incidents
  • Where and when the incident or incidents happened

We then ask you to provide your contact details (Name, email address and telephone number) so a can contact you and provide you with the necessary information so you can choose the appropriate course of action.

You are not required to complete this section, and this would be considered an anonymous report. However, this means the University cannot contact you, investigate the report or take any form of disciplinary action.

Legal basis for processing your data

We must have a legal basis for processing all personal data. In this instance, the University has a legitimate interest relating to the provision of an online reporting system for staff relating to harassment and bullying, and our duty of care to process the data you provide.

The University has conducted a Legitimate Interests Assessment (LIA) and concluded this process is important to ensure we give due regard to the duty of care to our staff by ensuring there is an online system for staff to report this type of behaviour.

What we do with it

All personal data we process is processed by our staff in the United Kingdom, with the exception of data processed on staff and students who are based at the Singapore Institute of Technology. Your data is not shared with any third parties and is only processed for the purpose of administering the online reporting system for staff and ensuring duty of care to the staff and others involved.  

The data may be reported on anonymously for statistical purpose to EDSC/SEC/Senate/Court as deemed appropriate.

How long we keep it

Your report will be kept and deleted in line with the following:

  • Report date, plus one year;

If referred to another process (i.e. Complaints Resolution) in line with their retention schedule.

What are your rights?

If at any point you believe the information we process relating to you is incorrect, you can request to see this information and may have restricted under limited circumstances, corrected. You also have the right to object to the processing. If you wish to exercise any of these rights, please contact

If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Protection Officer who will investigate the matter.

Our Data Protection Officer can be contacted at

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).