Privacy notice for photography and video - Centre for Health Economics

If you're attending an event and do not wish to be photographed or recorded, you can let us know and we'll make best efforts not to capture or retain any images or footage of you.

If you can, let us know in advance by emailing che-enquiries@york.ac.uk stating what event you will be attending and when. For large events, such as CHE hosted conferences/public seminars, we will provide you with a coloured lanyard, which will discreetly identify you as having opted out.

If you've not been able to let us know in advance or have any questions or concerns at an event, please direct these to the photographer or videographer on site, who will be identifiable via a coloured lanyard.

When capturing photography and video, we do so under the legal basis of legitimate interests. This means that the University benefits from being able to record events to provide information about and promote the University’s courses, research and other activities, and that we are able to use photographs or videos of you to do this, as long as it does not unfairly impact you.

Your image may be used in printed media produced by the Centre for Health Economics, University of York, such as prospectuses, guides, and training products, and/or in non-University materials, such as magazines and newspapers. It may also be used on websites or social media channels managed by the University of York or associated organisations. Images may also be used around the University campus, for example on information screens or hoardings.

Published photos and videos are available to anyone who has access to the website or printed materials in which the photo or video features. 

The original photographs and videos will only be accessible to employees and agents of the University, or third parties that process data on behalf of the University (e.g., printing providers). 

The University will only keep your data as long as necessary to meet legal requirements or satisfy a defined business need. Specific retention timeframes are set out in the University’s Records Retention Schedule.

In certain cases, your personal data will be transferred outside the UK. For these transfers, the University will always comply with UK GDPR obligations and use necessary safeguards to protect your data.

The University will retain your data in line with legal requirements or where there is a business need. Retention timeframes will be determined in line with the University’s Records Retention Schedule.

Under the UK GDPR, you have a right of access to your data, a right to rectification, erasure (in certain circumstances), restriction of processing, objection or portability (in certain circumstances). You also have a right to withdraw consent, and rights relating to automated decision making. For more information see Individuals’ Rights.

If you have any queries about this privacy notice or about how your data is being processed, please contact the University’s Information Governance Team at dataprotection@york.ac.uk.

If you wish to make a data protection complaint, please contact the University’s Data Protection Officer at dataprotection@york.ac.uk.

If you are unhappy with the way in which the University has handled your personal data, you also have a right to complain to the Information Commissioner’s Office (ICO).

We keep our privacy notices under regular review. This privacy notice was last updated on 16 June 2026.