Run a Win11 debloat script. It will remove a lot of privacy-invading windows components. Apart from that, install a browser that isn't Chrome, and use an ad blocker. Don't install any garbage that gives the Uni IT department any control over the device.