Within the University, your data is shared with only those University staff who need access for the purpose of managing the activities of the Network and delivery of its key objectives.
Your personal data is shared with a range of external organisations as is necessary for the purposes set out above and as permitted or required by law, including the following:
• the Medical Research Council (project funder), Biotechnology and Biological Sciences Research Council (BBSRC) and the Department of Health and Social Care (DHSC) as part of annual reporting process
• the BactiVac Network Management Oversight and Advisory Boards
Your personal data is shared as is necessary, on a considered and confidential basis, with external organisations which act on our behalf in accordance with our instructions for the purposes outlined above and do not process your data for any purpose over and above what we have asked them to do. We make sure we have appropriate contracts in place with them. Sometimes your personal data is processed by these organisations outside the European Economic Area (for example, because they use a cloud-based system with servers based outside the EEA), and if so, appropriate safeguards are in place to ensure the confidentiality and security of your personal data.