Contact Information
This website is run by the Clare College Graduate Society, also known as Clare MCR. Our contact details are as follows:
Clare College Graduate SocietyClare College, Trinity Lane
CB2 1TL Cambridge
United Kingdom
Any queries should be addressed to mcr-computing@clare.cam.ac.uk or mcr-president@clare.cam.ac.uk.
Personal Data
We store personal data about you that we need to identify you and your ability or permission to use our services, as well as any additional data provided by you in the course of using our services. Specifically, we store your name, CRSid, email address, and some information about your affiliation with Clare College (e.g. your role within College, like student, fellow, member of staff etc.). If you are a student we will usually also store the type and duration of your course. We obtain this data either directly from you, from Clare College, or from the University of Cambridge's lookup service available to all University members (https://www.lookup.cam.ac.uk).
Additionally, we will store any data provided by you in the course of using our services, such as information about which events you book onto, what dietary requirements you pick for these events etc.
Finally, to prevent brute-force password attacks, whenever anyone attempts to log in on our website, we will store their IP address and User-Agent string for a short period of time.
The lawful basis we rely on for processing this information is your consent, and our legitimate interests, namely the proper administration of our services. You are free to withdraw your consent at any time by contacting us at the details specified above. Note that we will not be able to provide you with our services if you do so.
We will store your data for as long as you are a member of Clare College or otherwise able to use our services, and for a period of up to 5 years after you cease to do so.
Sharing of Personal Data
We will share data about you with Clare College Cambridge when that is required in order to provide you with the services we manage. We will not share your data with any third parties without your explicit consent, except where required by law, and we will not use your data for any purpose other than providing you with the services we manage, except where required by law.
We do not use any external services for the purpose of analytics, and we do not rely on CDNs to host parts of our website, so no request should be made to any external party when accessing our website. Note that this applies only to the website itself and not to the Raven login service, for which we redirect you to the UIS login portal. We have no control over what happens on these webpages managed by the university, and the university might (and currently does) include external providers like Microsoft or Google in the process of logging you in.
Cookie Policy
We use a session cookie to keep track of your login status, and for no other purpose. This cookie is deleted whenever you log out. We additionally use a CSRF cookie to protect our site against cross-site request forgery attacks, i.e. to make sure another site you are visiting while being logged into our site cannot make you perform actions on our site without your knowledge. This cookie is never used to identify or track you.
Your Rights
Under data protection law, you have rights including:
- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organization, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. If you would like to make a request please contact us at the details specified above.
Complaints
If you have any concerns about our use of your personal information, you can make a complaint to us at the contact details specified above.