Data Privacy Statement

Al Muhibbah Open University (AOU)

Privacy Statement

Al Muhibbah Open University (AOU) is committed to protecting the privacy and security of your personal data. This privacy statement provides detailed information on how we collect, use, store, share, and protect your personal information in compliance with Nigeria's Data Protection Act of 2023 and international best practices.

Introduction

AOU values your privacy and is dedicated to ensuring that your personal data is handled with the utmost care and security. This privacy statement outlines our data protection practices and your rights regarding your personal data.

Data Collection
Purpose and Lawful Basis for Data Collection:
  1. Purpose Specification: AOU collects personal data to provide educational services, manage university operations, and comply with legal obligations. Specific purposes include admission processes, academic administration, communication, research, and alumni relations.
  2. Lawful Basis: We collect and process your personal data based on several lawful bases, including your consent, performance of a contract, compliance with legal obligations, protection of vital interests, performance of a task in the public interest, and legitimate interests.
Types of Data Collected:
  1. Personal Identification Information: Name, date of birth, gender, nationality, and contact details (address, email, phone number).
  2. Academic Information: Educational background, academic records, transcripts, and certificates.
  3. Financial Information: Payment details, tuition fees, and financial aid information.
  4. Sensitive Personal Data: Health information, disabilities, and any other information required to provide support and accommodations.
Data Usage
Specific Use Cases:
  1. Managing student records, course enrollments, grades, and academic progress.
  2. Sending important updates, announcements, and information related to university events and activities.
  3. Conducting research and statistical analysis to improve educational services and outcomes.
  4. Fulfilling legal and regulatory requirements, including reporting to government authorities and regulatory bodies.
Data Minimization:

We ensure that only the necessary personal data is collected and processed for the specified purposes. Irrelevant or excessive data is not collected.

Data Storage and Security
Secure Storage:
  1. Personal data is encrypted both in transit and at rest to protect it from unauthorized access.
  2. Access Controls: Access to personal data is restricted to authorized personnel only, based on their job responsibilities.
  3. Personal data is stored on secure servers with regular security updates and monitoring.
Data Retention Periods:

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods are determined based on legal and regulatory requirements, as well as business needs.

Data Sharing and Disclosure
  1. Third-Party Processors: We may share your personal data with third-party processors who provide services on our behalf. These processors are required to adhere to strict data protection standards and use your data only for the specified purposes.
  2. Legal and Regulatory Requirements: Personal data may be disclosed to third parties when required by law or regulation, such as to government authorities, regulatory bodies, and law enforcement agencies.
  3. Consent-Based Sharing: Where data sharing is based on your consent, we will clearly inform you about the scope and purpose of the sharing and your right to withdraw consent at any time.
Data Subject Rights
Your Rights:
  1. You have the right to access your personal data and obtain information about how it is being processed.
  2. You have the right to have inaccurate personal data corrected or completed if it is incomplete.
  3. You have the right to request the deletion or removal of your personal data under certain conditions.
  4. You have the right to request the restriction or suppression of your personal data under certain conditions.
  5. You have the right to obtain and reuse your personal data for your own purposes across different services.
  6. You have the right to object to the processing of your personal data under certain conditions.
  7. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Data Protection Officer

For any questions, concerns, or requests regarding your personal data, please contact our Data Protection Officer (DPO):

Data Protection Officer
Email: dpo@aou.edu.ng
Phone:.................................
AOU Website: www.aou.edu.ng

Changes to this Privacy Statement

AOU reserves the right to update this privacy statement to reflect changes in our data processing practices or legal requirements. We will notify you of any significant changes and update the "Last Updated" date at the top of this document.


.............................................
Prof. Ahmed Salisu Garba
Ag.VC, AOU, Abuja