This statement explains how the Cambridge Investment Banking Society (“we”, “us”, and “our”) handles and uses the personal information we collect about our members for processes relating to our operations and activities. When changes are made to this statement, we will publish the updated version on our website. The controller for your personal information is the Cambridge Investment Banking Society. The person responsible for data protection within our society is the Treasurer who can be contacted at dipen@cibsoc.co.uk.
We only collect personal data that is necessary for us to perform our services. Accordingly, if you choose not to provide your personal data, this may prevent us from providing our services to you.
We collect and process your personal information for a number of purposes, including:
We may use and disclose personal data that does not reveal your identity, nor permit direct association with any specific individual, particularly in the form of aggregated information, for any purpose, except where we are restricted by law. Our normal legal basis for processing your personal information is your consent, which you gave at the point you become a member of the society and which you can withdraw at any time, including by resigning your membership. We only keep your personal information for as long as we need it.
Personal information is not normally shared outside of the society and its members, except as outlined in this notice. We may also be subject to a legal requirement (with or without your consent) to share your personal information with the University or a government agency (such as the police or security services or other statutory authorities with investigatory powers) under special circumstances (e.g. relating to tax, crime or health and safety). Where feasible and appropriate, we will notify you of our intention to share such information in advance.
Organisational measures are in place to prevent the unauthorised access, use, disclosure, alteration or destruction of your personal data. We may store your personal data using University IT services and with certain trusted third parties and in locations outside our direct control, including IT service providers such as Google Drive. Google operates independently from us and has its own privacy policy, which we strongly advise that you review. The protection of your privacy and personal data is of the utmost concern to us. However, no method of transmission over the Internet, or method of electronic storage, is completely secure. We cannot ensure or warrant the security of any personal data you transmit to us, and you do so at your own risk. We also cannot guarantee that such personal data may not be accessed, disclosed, altered, or destroyed by breach of any of our safeguards. If you believe your personal data has been compromised, please contact us using the details above for our controller for your personal information.
You have the right to access the personal information that we hold about you. You also have the right to ask us to correct any inaccurate personal information we hold about you, to delete personal information, or otherwise restrict our processing, or to object to processing or communications, or to receive an electronic copy of the personal information you provided to us. Please note that all of these rights are qualified in various ways. If you have questions or concerns about how your personal information is used, please contact us using the above details. If you remain unhappy with the way your information is being handled, or with the response received from us, you have the right to lodge a complaint with the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, SK9 5AF (https://ico.org.uk/). Last updated: 10th August 2020
Copyright © 2020 Cambridge Investment Banking Society. All rights reserved.