This privacy notice is for visitors to the MORF® website. It sets out the ways in which MORF® gathers, uses, stores and shares your data. It also sets out how long we keep your data and what rights you have in relation to your data under the General Data Protection Regulation (GDPR).
MORF® (morf-db.org) is affiliated with the University of York. The MORF® database and website is hosted on infrastructure owned by the University of York.
For the purposes of this privacy notice, University of York is the Data Controller as defined in the General Data Protection Regulation. We are registered with the Information Commissioner’s Office and our entry can be found here. Our registration number is: Z4855807.
Where do we get your data from?
We get our data from you when you contact us, set up an account or complete one of the forms accessible from our website or at an event.
Our website may also use cookies to enable certain functionality, such as user ID and login status. We do not use third party tracking or advertising cookies.
What data do we have?
We collect and store minimal identifying information about users. Information typically includes:
- Name
- Email address
- Password (encrypted)
- Organisation
What is our legal basis for processing your data?
We collect and retain certain types of data, in various formats, about visitors and users of our website.
Typically, data will be processed:
- because it is necessary for the performance of a task carried out in the public interest (for information on our public task see our function as set out in our charter;
- to allow us to comply with our legal obligations;
- in the case of the mailing list, because you have given us your explicit consent and this can be removed at any time.
How do we use your data?
We use your information when you set up an account with us to provide you with services such as account administration and granting access to protected areas of the website. Information is collected only when a user requests an account by contacting us directly. All information is provided to us on a voluntary basis but some information we need in order to set up the account. We may contact you regarding your account using the information provided. You can request deletion of your account and personal data by contacting us.
The information you provide on a contact form will be kept private and used only for the purpose of replying to your message. If we provide access to other forms from time to time, we will explain their purpose on those occasions.
The mailing list will be used to send occasional emails, for example about new developments on MORF® and special offers.
Who do we share your data with?
- Employees and agents of the University;
- Third parties that process data on behalf of the University to support it in fulfilling its obligations and responsibilities to and relationship with you (e.g. software and system providers);
Additional Privacy Information
For additional information about how the University keeps your information secure and your rights please see, General Privacy Notice.
How do we keep your data secure?
The University takes information security extremely seriously and has implemented appropriate technical and organisational measures to protect personal data and special category data. Access to information is restricted on a need-to-know basis and security arrangements are regularly reviewed to ensure their continued suitability. For more details see our security webpages.