How we use your personal information
We use personal information in order to promote and provide OUP products and services, to ensure the security of our websites, and to run our business. We have set out on this page more information on the categories of personal information that we collect, the specific ways in which that personal information is processed by us, the legal bases which permit us to do this, and the types of partners with whom we share your personal information.
In some cases where we ask for your personal information, we do so in order to fulfil your request (e.g. needing your address to send you your order). If you do not provide that personal information, we will not be able to process your request or order.
No matter how we use your personal information, we have measures in place to ensure its’ confidentiality, integrity, and availability. This includes achievement of ISO 27001, and the implementation of a host of technical and organisational security practices to defend against data being lost, stolen, or used in an unauthorised way. For more details about OUP’s security protections, you can contact [email protected].
Giving and withdrawing your consent and updating your personal information
Where your consent is required for us to process your personal information, we will ask for your consent at the point at which you provide your data. You have the right to withdraw that consent at any time. You can also update your personal information at any time. If you wish to do either, you can complete our Personal Data Request Form or contact us at [email protected].
We do not sell your personal information to third parties.
Storing, transferring, and retaining your personal information
Your personal information may be stored and processed outside of the country where it is collected, including outside of the European Economic Area (“EEA”). When transferring information to others, within the EEA or otherwise, we ensure that appropriate and suitable safeguards and technical measures are in place to protect your personal information. To do this, we will only transfer data to countries that have been identified as providing adequate protection for UK-originated personal information, or to a third party where we have approved transfer mechanisms in place to protect your personal data. For transfers of personal information from the EEA, we make use of standard contractual clauses that have been approved by the European Commission, we use Binding Corporate Rules put in place by our suppliers, or we implement other similar measures required by laws around the world. A copy of the relevant mechanism can be provided for your review on request by sending an email to our Data Protection Officer at [email protected].
We will only keep records of your personal information for as long as is reasonably necessary for the purposes for which we have collected it, and in order to comply with any statutory or regulatory obligations in relation to retention of records. We respect requests to stop processing your personal data for marketing purposes. This includes keeping a record of your request indefinitely so that we can respect your request in the future.
You have the right to request access to and rectification or erasure of your personal information, the right to restrict processing of your personal information, and the right to object to processing of your personal information. You have the right to object to your personal information being processed on the grounds of OUP’s legitimate interests. You have the right to object to us sending you direct marketing and profiling you for the purposes of direct marketing.
The data controller for our websites, products, and services is The Chancellor, Masters and Scholars of the University of Oxford, trading as Oxford University Press, of Great Clarendon Street, Oxford OX2 6DP, United Kingdom, unless otherwise indicated on the website, product, service, or form through which you have provided your personal data to us. For example, if you provided your personal data through the website www.oupe.es, the data controller is Oxford University Press España S.A. If you are unsure who your data controller is, or have other queries relating to this policy, OUP’s Data Protection Officer can be reached at the same address or by email at [email protected].