The Faculty does not collect personally identifying information about individuals, except when specifically and knowingly provided by such individuals.
When you visit the Site, you may provide us with two types of information:
(i) Personal information you knowingly choose to disclose that is collected on an individual basis; and
(ii) Website use information collected on an aggregate basis as you browse our Site.
The Site automatically logs certain information about every request made of it (see below for more details). This information is used for system administration, bug tracking, and for producing usage statistics. The logged information is deleted each calendar month (or not later than 31 days).
Relevant subsets of this data may be passed to computer security teams as part of investigations of computer misuse involving this site or other computing equipment in the University. Data may be passed to the administrators of other computer systems to enable investigation of problems accessing this site or of system misconfigurations. Data may incidentally be included in information passed to contractors and computer maintenance organisations working for the University, in which case it will be covered by appropriate non-disclosure agreements. Otherwise the logged information is not passed to any third party except if required by law. Summary statistics are extracted from this data and some of these may be made publicly available, but those that are do not include information from which individuals could be identified.
The following data may automatically logged for each request:
(i) The name or network address of the computer making the request. Note that under some (but not all) circumstances it may be possible to infer from this the identity of the person making the request. Note also that the data recorded may be that of a web proxy rather than that of the originating client;
(ii) The date and time of connection;
(iii) The HTTP request, which contains the identification of the document requested;
(iv) The status code of the request (success or failure etc.);
(v) The number of data bytes sent in response;
(vi) The contents of the HTTP Referrer header supplied by the browser; and
(vii) The content of the HTTP User-Agent header supplied by the browser.
Logging of additional data may be enabled temporarily from time to time for specific purposes. In addition, the computers on which the Site is hosted keep records of attempts (authorised and unauthorised) to use them for purposes other than access to the web server. This data typically includes the date and time of the attempt, the service to which access was attempted, the name or network address of the computer making the connection, and may include details of what was done or was attempted to be done.
Access to personal data
For the purpose of the UK Data Protection Act 1998, the 'Data Controller' for the processing of data collected by this site is the University of Cambridge, and the point of contact for subject access requests is the University Data Protection Officer (The Old Schools, Trinity Lane, Cambridge CB2 1TN, tel. 01223 332320, fax 01223 332332 E-mail: firstname.lastname@example.org).
The University is also Data Controller in respect of any personal data served as content by this site.