College Visitors and Guests - Data Protection Statement
This statement explains how St. Catharine’s College (“the College”, “we” and “our”) handles and uses information we collect about visitors, guests and attendees of the College ("you" and "your"), for events and other reasons. In broad terms, we use your information to manage your visit or the event(s) you are attending, including dinners and accommodation and other needs requested by you, as well as maintain our records of previous, current and future attendees for events management for the College.
The controller for your personal data is St. Catharine's College, Cambridge, CB2 1RL. The Data Protection Officer for the College is the Office of Intercollegiate Services Ltd (OIS Ltd) [12B King's Parade, Cambridge; 01223 768745; firstname.lastname@example.org]. OIS Ltd. should be contacted if you have any concerns about how the College is managing your personal information, or if you require advice on how to exercise your rights as outlined in this statement. The person within the College otherwise responsible for data protection at the time of issue, and the person who is responsible for monitoring compliance with relevant legislation in relation to the protection of personal information, is the Bursar, Simon Summers, email@example.com.
The legal basis for processing your personal information is that it is necessary in order for you to enter into a contract to provide facilities and resources to you. In many cases, you will be providing the personal information to us alongside consent for us to use that information to provide for your needs or otherwise to provide you with an improved service while you are at the College. We will retain your information for the periods stated below unless or until you request us to do otherwise.
We collect and process your personal information for the following purposes:
A. maintaining clear contact information for the booking, provision and payment of services.
We will hold your name, address, email address, phone number and other relevant contact details you provide to us, and will use this information to maintain contact with you to provide your requested services, manage their delivery and bill you for them. We retain relevant information in our events record for 7 years after the most recent visit or event you attend.
B. providing you with necessary and preferred services.
Where relevant, we will also collect data for the provision of services, your reason(s) for attending the event, you nationality and passport details, your car registration, your credit or debit card information and/or any service preferences you request specifically (e.g. room type dietary requirements). This may includes you providing sensitive personal information. We will not retain this information for any longer than necessary for the provision of the specific event or visit, which might require you to provide it on successive occasions.
C. providing you with details of future College events.
While we retain your contact information, we will contact you about future College events we believe may be of interest to you providing you have given us explicit consent to do so. Consent may be withdrawn at any time.
D. fulfilling our legal obligations.
The College is required to keep for 12 months the names and nationalities of all those staying in accommodation. In the case of nationals outside the UK, Republic of Ireland and the Commonwealth, we must also keep a record of your passport details and next destination. The College is also required to keep details relating to any financial transaction for a period of 7 years.
We operate CCTV on our sites, which will capture footage. Further details can be found in our CCTV Policy. If you have any questions regarding the College's CCTV please contact the Head Porter firstname.lastname@example.org.
We also operate wifi across our sites, which can be accessed by members of the College and guests. We retain device information (such as physical MAC address and IP address) and details of the IP address the device connected to. The data is retained for 3 months.
We do not share personal information with third parties. If you have concerns or queries about any of these purposes, or how we communicate, please speak to the relevant College staff in the first instance. If you need further guidance, please contact the Bursar email@example.com.
You have the right: to ask us for access to, rectification or erasure of your information; to restrict processing (pending correction or deletion); to object to communications or direct marketing; and to ask for the transfer of your information electronically to a third party (data portability). Some of these rights are not automatic, and we reserve the right to discuss with you why we might not comply with a request from you to exercise them.