Privacy Policy

This policy explains how personal data submitted through this website is collected, used and protected. It applies to all visitors and is compliant with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR 2016/679), and other applicable data protection legislation.

Who we are

The data controller for this website is Bettina Varwig, Professor of Music, Faculty of Music, University of Cambridge. If you have any questions about how your data is used, or wish to exercise your rights, please contact us at musicintheflesh.editor@gmail.com.

What data we collect and why

When you submit the contact form on this website, we collect:

  • Your name and email address — to enable us to respond to your message. The lawful basis for this processing is legitimate interests (responding to correspondence directed to us).
  • Your message — to understand and respond to your enquiry.
  • Whether you wish to receive updates — only if you explicitly tick the opt-in box. The lawful basis for sending updates is consent. You may withdraw consent at any time by contacting us at the address above.

We do not collect any special category data, and we do not use your data for automated decision-making or profiling.

How we use your data

Your data is used solely to:

  • Respond to your enquiry
  • Send you updates about Music in the Flesh events and activities, if you have opted in

Your data will never be sold, rented, or shared with third parties for marketing purposes. It will not be used for any purpose other than those stated above.

How we store your data

Form submissions are stored in a password-protected Google Sheet, accessible only to the data controller. Google LLC acts as a data processor on our behalf under their standard Data Processing Agreement, which incorporates appropriate safeguards for international data transfers (including Standard Contractual Clauses where applicable). Google's data processing practices are compliant with EU and UK GDPR requirements.

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

How long we keep your data

We retain your personal data only for as long as necessary:

  • Contact enquiries: retained until you request deletion, or until we reasonably determine the correspondence is no longer relevant.
  • Mailing list entries: retained until you withdraw consent or request removal.

To request deletion of your data at any time, please contact us at musicintheflesh.editor@gmail.com.

Your rights

Under UK and EU GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectification of inaccurate or incomplete data
  • Erasure ("right to be forgotten") of your personal data
  • Restriction of processing in certain circumstances
  • Object to processing based on legitimate interests
  • Data portability — to receive your data in a structured, machine-readable format
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us at musicintheflesh.editor@gmail.com. We will respond within one calendar month.

Complaints

If you are based in the United Kingdom and are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

If you are based in the European Union, you have the right to lodge a complaint with the supervisory authority in your country of residence.

Changes to this policy

We may update this policy from time to time. The current version will always be available at this address. This policy was last updated in May 2026.