Cambridge University Law Society Online Data Protection Policy

Overview and Contact Details

The policy describes Cambridge University Law Society (CULS)’s processing of personal data routinely collected through our App, Website and other online presence (e.g. Facebook, Twitter etc.). It seeks to meet our legal obligations under the General Data Protection Regulation (GDPR) 2016/679 and specifically articles 12 to 14 thereof.

Our contact details in relation to these are other matters are as follows:

Address:            Cambridge University Law Society (CULS)
Faculty of Law
David Williams Building
10 West Road
Cambridge CB3 9DZ

Email:                   [email protected]
Telephone:         +44 (0)1223 330033

 

What data is involved?
Our App only collects basic contact information, as well as details of whether you have agreed to notifications being sent to your phone.

Registration on our website involves the collection of your name, contact details, college, matriculation and expected graduation years, subject, payment information and password details.

Our website sets a number of third party cookies that collect tracking information linked to online identifies.  Further information on our website cookies is provided below.  We have an online presence on Twitter and Facebook and these companies also set cookies which track users through online identifiers.  However, this activity is governed by Facebook and Twitter’s own privacy policies which can be consulted at https://www.facebook.com/policy.php and https://twitter.com/en/privacy

Other than information deliberately disclosed by the user (e.g. through publishing a post or sending an electronic message) we do not routinely collect any other information from users.

 

Purposes and Legal Basis of Processing

Our general purpose for collecting the above information is to administer, improve and sustain the services provided by the Society.  This includes one of our website cookies from Cloudflare (_cfduid) which helps ensure the security of our website by identifying individual clients behind a shared IP address and apply security settings on a per-client basis.

Our legal basis for the above processing is furtherance of the legitimate interests of the Society (GDPR, art. 6(1)(f)) as set down in our Constitution.

Our website also sets a number of Google Analytic cookies whose purpose is to provide us with analytic data about use of our website and one Doubleclick cookie (IDE) which is for the purpose of providing you with targeted ads based on your attributes and interests.

Our legal basis for the above processing is your consent (GDPR, art. 6(1)(a)). You have a right to withdraw consent at any time, which you may exercise by deleting these cookies and blocking further storage of them on your device.  This does affect the legality of processing prior to such withdrawal.

 

Period of Storage
Personal data collected online is stored for as long as it is needed to administer or provide services linked to you.

Unless you take action to clear or delete these from your device, specific time limits apply to our website cookies:

  • Cloudflare _cfduid – 5 years
  • Google Analytic cookies – up to 2 years
  • Doubleclick IDE – 1.5 years

 

Further Rights

The GDPR grants you a number of rights including to object to processing or to request from us access to, rectification or erasure of data or to the restriction of processing.  In many cases, these rights can be exercised through our services (e.g. by changing your contact details within your website account).  However, should you could consider this insufficient, you may contact us at the address in order to exercise these rights.  Your may also raise any issue or complaint with us related with this policy through the same method.  You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) (details at https://ico.org.uk/make-a-complaint/).