How we use your personal information
-- Users of the College’s website
This statement explains how Fitzwilliam College (“we” and “our”) handles and uses information we collect about users (“you and “your”) of the College website – www.fitz.cam.ac.uk Where you engage with the College for another purpose (e.g. as a prospective or current student, as a previous student, as a member of the College or as a visitor to the College), there are other data protection statements to explain our management of your personal information – see our Data Protection page. Where you enter your personal information into an online form for any specified purpose, you will be told about the use we will make of that information (e.g. to send you newsletters or to enable your attendance at an event).
When changes are made to this statement, we will publish the updated version on our website at https://www.fitz.cam.ac.uk/about/official-information/data-protection and notify you by other communications channels as we deem appropriate or necessary.
The controller for your personal data is Fitzwilliam College, Storey’s Way, Cambridge, CB3 0DG. The person responsible for data protection within the College at the time of issue, and the person who is responsible for monitoring compliance with relevant legislation in relation to the protection of personal information, is the College Data Protection Officer, who is the Bursar, email@example.com. The statutory Data Protection Officer for the College is the Office of Intercollegiate Services Ltd (OIS Ltd) [12B King’s Parade, Cambridge; 01223 768745; firstname.lastname@example.org]. The Bursar should be contacted if you have any concerns about how the College is managing your personal data, or if you require advice on how to exercise your rights as outlined in this statement. If you are still dissatisfied after the College’s response, you should contact the statutory Data Protection Officer.
The legal basis for processing your personal data is that it is necessary for the purposes of our legitimate interests, where we have concluded that our interests do not impact inappropriately on your fundamental rights and freedoms. You may ask us to explain our rationale at any time.
We collect and process your personal information for operating and improving our webpages, analysing their use and ensuring the security of our website.
We use a third party service, Google Analytics, to collect standard internet log information and details of your visitor behaviour patterns. We do this to find out, for example, the number of visitors to each page of our website. For information about how Google Analytics uses your personal information, please see http://www.google.com/intl/en/policies/privacy/
Some of our restricted pages require Raven authentication. Raven is a service used by some web sites to identify people from the University of Cambridge so that access decisions can be made based on user identity and related information. The cookies expire when you close your browser. For information about how the Raven web authentication server uses your personal information, please see https://raven.cam.ac.uk/privacy.html
We also collect the request made by your browser to the server hosting the website, which includes the IP address, the date and time of connection and the page you ask for. We use this information to ensure the security of our websites and to generate usage statistics, and we archive it after a month. We may use and disclose it as necessary in the event of a security concern or incident. For more technical details please see https://www.uis.cam.ac.uk/privacy-policies-for-uis-services.
We use a database system called Raiser’s Edge, supplied by Blackbaud, to run our booking system for Alumni events. Blackbaud’s US parent company and Blackbaud’s US affiliates are certified under the EU-U.S. Privacy Shield framework and the U.S.-Swiss Safe Harbor framework. For more information about Blackbaud’s Privacy Shield and other privacy-related matters, please see: https://www.blackbaud.co.uk/privacy-policy.aspx
Some of our pages contain embedded YouTube and Vimeo videos. Cookies set by these third parties serve a number of purposes, including tracking information about how these services are being used, and for ad targeting. We have no control over nor access to this information. For more information about how YouTube and Vimeo use your personal information, please refer to their individual privacy policies, which can be found here and here, respectively.
We do not share personal information with third parties, except those detailed above.
If you have concerns or queries about any of the above, please contact the College Data Protection Officer at the address given above.
You have the right: to ask us for access to, rectification or erasure of your data; to restrict processing (pending correction or deletion); to object to communications or direct marketing; and to ask for the transfer of your data electronically to a third party (data portability). Some of these rights are not automatic, and we reserve the right to discuss with you why we might not comply with a request from you to exercise them.
You retain the right at all times to lodge a complaint about our management of your personal data with the Information Commissioner’s Office at https://ico.org.uk/concerns/.
Last updated: May 2018