Privacy Notice - Event Organisers

How we use your personal information

This statement explains how Magdalene College (“the College”, “we” and “our”) handles and uses information we collect about event organisers that use College facilities (“you” and “your”). In broad terms, we use your information to manage the event(s) we either host for you or otherwise provide facilities, as well as maintain our records of previous, current and future clients for events business for the College.

The controller for your personal information is the Magdalene College, Cambridge CB3 0AG. The Data Protection Officer for the College is the Office of Intercollegiate Services Ltd [12B King’s Parade, Cambridge; 01223 768745; college.dpo@ois.cam.ac.uk]: OIS Ltd. should be contacted if you have any concerns about how the College is managing your personal information, or if you require advice on how to exercise your rights as outlined in this statement. The person within the College otherwise responsible for data protection at the time of issue, and the person who is responsible for monitoring compliance with relevant legislation in relation to the protection of personal information, is the Assistant Bursar assistant.bursar@magd.cam.ac.uk.

The legal basis for processing your personal information is that it is necessary in order for you to enter into a contract to provide events facilities and resources to you. We will retain your information for the periods stated below unless or until you request us to do otherwise.

We collect and process your personal information for the following purposes:

1. maintaining clear contact information for the booking, provision and payment of events.
   
   We will hold your name, address, email address, phone number and other relevant contact details you provide to us, and will use this information to maintain contact with you to provide your requested services, manage their delivery and bill you for them. We retain paper copies of this information in our events records for four years after the most recent event we host for you, and for seven years in our financial records (due to statutory requirements). Information stored within our electronic database is held in accordance with our IT retention and data cleansing policy. Where we have not hosted an event for you, we will retain the details relating to your initial enquiries of services for no more than two years.
2. providing you with details about future event provision services. 
   
   While we retain your contact information, we will contact you about our services. You may unsubscribe from such communications at any time. 
   
   We share relevant personal information with certain third parties in pursuit of providing requested services. Information is not shared with other third parties without your written consent. If you have concerns or queries about any of these purposes, or how we communicate with you, please contact us at the address given above.

Personal information of delegates of your event

The provision or management of your event by us might require you to provide us with personal information relating to your event delegates (such as name, dietary requirements, accommodation requirements). This may include the provision of sensitive personal information. We will not retain this information for any longer than necessary for the provision of the specific event, which might require you to provide it on successive occasions. We will assume that you have obtained the consent from your delegates for us to hold their personal information for that purpose.

We also operate CCTV, which will capture footage. Our CCTV Code of Practice can be viewed at CCTV Code of Practice.

You have the right: to ask us for access to, rectification or erasure of your information; to restrict processing (pending correction or deletion); to object to communications or direct marketing; and to ask for the transfer of your information electronically to a third party (data portability). Some of these rights are not automatic, and we reserve the right to discuss with you why we might not comply with a request from you to exercise them.

You retain the right at all times to lodge a complaint about our management of your personal information with the Information Commissioner’s Office.