Within the University, your data is only shared with those University departments and staff who need access for the processing purpose set out above.
Your details may be shared on a confidential and considered basis with external organisations which assist the University in delivering communications you have subscribed to. These organisations act on our behalf in accordance with our instructions for the purposes outline above and do not process you data for any other purpose over and above what we have asked them to do. We make sure we have appropriate contracts in place with them. Sometimes your data is processed outside the European Economic Area (e.g. because they use a cloud-based system with servers based outside the EEA), and, if so, appropriate safeguards are in place to ensure the confidentiality and security of your personal data.
Except as we have explained above, we will not publish or disclose any personal data about you to other external enquirers or organisations unless you have asked us to do or have consented to it, or unless it is in your vital interests to do so (e.g. in an emergency situation).