Skip to main content

CMU ORA

Privacy notice

Read how public information, authenticated access, connected services and requests are treated across the ORA website.

What this notice covers

This notice covers the public CMU Office of Research Administration website and the connected sign-in journey used by authorised staff.

Some links open services owned by other Chiang Mai University units. Their privacy notices and access rules apply after you leave this website.

Information handled by the service

Public pages display approved institutional content such as funding calls, activities, documents, systems, news, and published professional information.

When an authorised user signs in, the service processes account and session information required to confirm access. The public website does not ask visitors to create a profile or submit sensitive information through an unverified form.

Why information is used

Information is used to publish research administration resources, direct visitors to responsible services, operate authenticated workspaces, protect the service, and respond through the official contact channels chosen by the visitor.

Sources and connected services

Published records come from ORA-managed content, approved migration records, and connected CMU research services. Each external destination remains responsible for its own records and account permissions.

The website avoids presenting migrated or incomplete content as current when its review status cannot be confirmed.

Retention and protection

Records are retained according to their operational purpose and applicable Chiang Mai University rules. Access to non-public functions is limited to authorised accounts.

Specific retention periods depend on the record type and responsible system. Contact ORA for the rule that applies to a particular record or request.

Questions and data rights

You may ask about information associated with you, request correction of inaccurate information, or ask which CMU unit owns a connected record. ORA will route requests to the responsible unit when another service is the data owner.

Ask about a record or request.

Use the verified ORA contact channels and describe the service or record concerned. Avoid sending sensitive information until the responsible unit confirms a suitable channel.