In connection with enabling you to support our research activities or for us to contact you with news and information about our research and forthcoming events we will collect, store, and use the following categories of personal data about you:

(a)          Your name and title

(b)          Your contact details including address, email address, phone number and mobile phone number.

(c)           Your job, professional activities and company type.

(d)          Records of contact we have had with you.

(e)          Attendance at events.

We will only process your Data where we have your consent to contact you with news and information about our research and forthcoming events our or where we need to process it to comply with our legal obligations.  We will use your data to provide communications on our research outputs and upcoming events.

We may also process your Data for our legitimate interests, which includes storing your data in a customer relationship management software platform which we use to monitor and progress opportunities for research collaborations.

This Data is processed to enable you to:

• keep abreast of our latest research findings, news and upcoming events,
• Take part in our events and activities.

It also enables us to:

• disseminate our research findings, news and upcoming events, and establish potential collaborations,
• contact you with respect to potential or active research collaboration, but only when we have already established contact or where we believe there would be a benefit to you of entering a research collaboration,
• to keep a record of your participation in our events and activities.

Where you have given your consent to us processing your data, you have a right to withdraw that consent at any time by emailing us at: orclight@soton.ac.uk.

We will obtain your data directly from you as a result of opting in, or direct communication in a business to business context, including:

• Direct contact at trade shows and exhibitions
• Business meetings

We will only process your data for the specific purpose or purposes that we tell you about, or if specifically permitted by the UK Data Protection Act 2018, and will only process your data to the extent necessary for that specific purpose or purposes.

We will keep the data we store about you accurate and up to date as relevant to the purpose or purposes for which we process it. Data that is inaccurate or out of date will be destroyed. Please notify us if your personal details change or if data we hold about you is inaccurate.

We create and hold your data both electronically and on paper. The data we process electronically is held on Zoho, which is a customer relationship management database. We use Mailchimp for direct marketing purposes.We will retain your personal data for as long as is necessary for us to maintain our business relationship with you or earlier if you request us to remove your details from our database. After this period or on receipt of your request we will securely destroy your personal data in accordance with our data retention schedule.

You can obtain full details from our Record Retention Schedule.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so. In addition, we limit access to your personal data to those employees of the University who have a business need-to-know.

Your information will be shared internally within the University for the purpose of providing you with communications on our research outputs and upcoming events.

We will only share your data with third parties with your consent. All third-party data recipients are required to take appropriate security measures to protect your personal data in line with our policies. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

Exceptionally, we may disclose your data with a third party if required to do so: to protect or defend the University’s rights, interests, or property, or those of third parties; act in urgent circumstances to protect the personal safety of University constituents, or the public; or protect against legal liability

You have a number of rights. You can:

• access and obtain a copy of your data on request;
• require us to change incorrect or incomplete data;
• require us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
• object to the processing of your data where we are relying on our legitimate interests as the legal ground for processing; and
• ask us to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override the organisation's legitimate grounds for processing data.

If you would like to exercise these rights please use our online form or write to:

The Data Protection Officer

Legal Services

University of Southampton, Highfield

Southampton, SO171BJ

Email: data.protection@soton.ac.uk

We will, from time to time, contact you by email, post and telephone. If at any stage you are concerned about the content of these communications e.g. unwanted marketing information or wish to change how we communicate with you please contact us at: orclight@soton.ac.uk to unsubscribe.

We also have additional policies and guidelines concerning particular activities. If you would like further information please see our Publication Scheme.

If you are unhappy with the way that we have handled your data you can contact us at: orclight@soton.ac.uk or contact the Information Commissioner’s Office. See their website at: https://ico.org.uk/.