How we use your personal information
-- users of the Murray Edwards College website
This statement explains how Murray Edwards College (“we” and “our”) handles and uses information we collect when you visit the College website – www.murrayedwards.cam.ac.uk. Where you engage with the College for another purpose (e.g. as a prospective or current student, as a previous student, as a member of the College or as a visitor to the College), there are other data protection statements to explain our management of your personal information – see https://www.murrayedwards.cam.ac.uk/about/policies-and-procedures/college-policies-and-procedures/gdpr. Where you enter your personal information into an online form for any specified purpose, you will be told about the use we will make of that information (e.g. to send you newsletters or to enable your attendance at an event).
The controller for your personal information is Murray Edwards College, New Hall, Huntingdon Road, CB3 0DF. The person responsible for data protection at the time of issue, and the person who is responsible for monitoring compliance with relevant legislation in relation to the protection of personal information, is the Bursar, Rob Hopwood, email@example.com.
The legal basis for processing your personal data is that it is necessary for the purposes of our legitimate interests, where we have concluded that our interests do not impact inappropriately on your fundamental rights and freedoms. You may ask us to explain our rationale at any time.
We collect and process your personal information for operating and improving our webpages, analysing their use and ensuring the security of our website.
We use a third party service, Google Analytics, to collect standard internet log information and details of your visitor behaviour patterns. We do this to find out, for example, the number of visitors to each page of our website.
We have a shop on our website, which requires personal information for the purpose of billing and delivering purchases only. The shop is powered through a Drupal Commerce plugin for iATS.
There are a number of webforms on our site which require you to provide personal information. This information is used only to fulfil the purpose of the form – for example, to update your details in our alumnae database or to book your place at graduation.
We also collect the request made by your browser to the server hosting the website which includes the IP address, the date and time of connection and the page you ask for. We use this information to ensure the security of our websites and we store it for 7 days. We may use and disclose it as necessary in the event of a security concern or incident.
If you have concerns or queries about any of the above, please contact us at the address given above.
You have the right: to ask us for access to, rectification or erasure of your information; to restrict processing (pending correction or deletion); to object to communications or direct marketing; and to ask for the transfer of your information electronically to a third party (data portability). Some of these rights are not automatic, and we reserve the right to discuss with you why we might not comply with a request from you to exercise them.
You retain the right at all times to lodge a complaint about our management of your personal information with the Information Commissioner’s Office at https://ico.org.uk/concerns/
Last updated: 9th May 2018
Clare Stroud, Head of Communications