Cambridge Investment Banking Society

Personal information we collect

• Basic information, which may include special categories of data, that you provide through the membership registration process, including your name, gender, ethnicity, college and degree;
• Contact information such as your email address;
• Technical information, such as information from your visits to our website or applications or in relation to materials and communications we send to you electronically, including our mailing list;
• Personal data provided to us by you or generated by us through the provision of services to you such as information from the mentee application form and your curriculum vitae;
• Information that is provided to us by you for the purpose of attending events;
• Information provided to us in the course of recruitment, such as from applications to join committee roles, research group roles, representative roles and the mentorship scheme;
• Any other information that you submit to us through our website, by email or by physical means.

We only collect personal data that is necessary for us to perform our services. Accordingly, if you choose not to provide your personal data, this may prevent us from providing our services to you.

How we use your personal information

We collect and process your personal information for a number of purposes, including:

• Maintaining your personal details (e.g. your name, membership number, and preferred contact details), including ensuring effective communications with you;
• Keeping financial records;
• Maintaining a record of your activities with us;
• Undertaking research into our activities;
• For recruitment purposes;
• Managing complaints made to us;
• Managing society alumni relations and fundraising.

We may use and disclose personal data that does not reveal your identity, nor permit direct association with any specific individual, particularly in the form of aggregated information, for any purpose, except where we are restricted by law. Our normal legal basis for processing your personal information is your consent, which you gave at the point you become a member of the society and which you can withdraw at any time, including by resigning your membership. We only keep your personal information for as long as we need it.

How we share your personal information

Personal information is not normally shared outside of the society and its members, except as outlined in this notice. We may also be subject to a legal requirement (with or without your consent) to share your personal information with the University or a government agency (such as the police or security services or other statutory authorities with investigatory powers) under special circumstances (e.g. relating to tax, crime or health and safety). Where feasible and appropriate, we will notify you of our intention to share such information in advance.

How we protect your personal data

Organisational measures are in place to prevent the unauthorised access, use, disclosure, alteration or destruction of your personal data. We may store your personal data using University IT services and with certain trusted third parties and in locations outside our direct control, including IT service providers such as Google Drive. Google operates independently from us and has its own privacy policy, which we strongly advise that you review. The protection of your privacy and personal data is of the utmost concern to us. However, no method of transmission over the Internet, or method of electronic storage, is completely secure. We cannot ensure or warrant the security of any personal data you transmit to us, and you do so at your own risk. We also cannot guarantee that such personal data may not be accessed, disclosed, altered, or destroyed by breach of any of our safeguards. If you believe your personal data has been compromised, please contact us using the details above for our controller for your personal information.

Your rights

You have the right to access the personal information that we hold about you. You also have the right to ask us to correct any inaccurate personal information we hold about you, to delete personal information, or otherwise restrict our processing, or to object to processing or communications, or to receive an electronic copy of the personal information you provided to us. Please note that all of these rights are qualified in various ways. If you have questions or concerns about how your personal information is used, please contact us using the above details. If you remain unhappy with the way your information is being handled, or with the response received from us, you have the right to lodge a complaint with the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, SK9 5AF (https://ico.org.uk/). Last updated: 11th April 2021