How we use your personal information – website users

This policy explains what personal information we gather about you when you visit our website and details how that information is used.

Please take a moment to read and understand this policy. This policy supplements our other privacy policies and notices and is not intended to override them.

We (Cambridge Enterprise Limited) are a wholly owned subsidiary of the University of Cambridge (the University). Reference to the University includes its spin-out and proto-companies and any reference to academics, researchers, staff, students and alumni are to those of the University.

Cambridge Enterprise Limited (Cambridge Enterprise) is a company registered in England and Wales with registered company number 01069886.

Cambridge University Technical Services Limited, a company registered in England and Wales with registered company number 05749230, is a wholly owned subsidiary of Cambridge Enterprise Limited. Cambridge University Technical Services Limited has no employees and uses the same infrastructure as Cambridge Enterprise Limited to deliver consultancy services on behalf of Cambridge Enterprise Limited. Reference to Cambridge Enterprise includes Cambridge Enterprise Limited and Cambridge University Technical Services Limited.

Cambridge Enterprise is the data controller responsible for the personal information that you agree to share with either Cambridge Enterprise Limited or Cambridge University Technical Services Limited.

The named person responsibility for data protection compliance for Cambridge Enterprise Limited and Cambridge University Technical Services Limited is our Deputy Director. If you have any questions about how your personal information is being used, or wish to exercise any of your rights, please contact:

Cambridge Enterprise Limited, University of Cambridge

Hauser Forum, 3 Charles Babbage Road, Cambridge CB3 0GT

Email us

What is ‘personal information’?

How does this web page relate to other information about data protection?

Who will process my personal information?

What personal information will be processed?

General personal information collected on our website

As a wholly owned subsidiary of the University of Cambridge, the Cambridge Enterprise website is hosted on the Managed Web Service with the University Information Service (UIS). For more information about the privacy policy that the UIS adheres to please refer to http://www.cam.ac.uk/about-this-site/privacy-policy.

When you visit the Cambridge Enterprise website domain we hold certain information about you for service and security reasons. We use a third party service, Matomo, to collect standard internet log information and details of visitor behaviour patterns. For information about how Matomo uses your personal information, please see https://matomo.org/faq/general/faq_146/.

We also collect the request made by your browser to the server hosting the website which includes the IP address, the date and time of connection and the page you ask for. We use this information to ensure the security of our websites and we delete it after a maximum of 3 months. We may use and disclose it as necessary in the event of a security concern or incident.

For information about how we use cookies on our website, please see our Cookie Policy.

Specific personal information collected on our website

Our website also collects some specific personal information and we use it in ways that are compatible with your individual rights and freedoms. Where you enter your personal information into an online form on our website for any specified purpose, you will be told about the use we will make of that information (e.g. to send you newsletters or to enable your attendance at an event).

The www.enterprise.cam.ac.uk website asks you to provide information about yourself in a number of places:

Application Form for Jobs	Cambridge Enterprise collects and processes personal data relating to job applicants in order to process your job application. Please see How we use your personal information – Job applicants for further information. We use Teamtailor for handle recruitment. Teamtailor is a third-party service that is not owned or managed by Cambridge Enterprise. Please refer to the privacy policy on our careers site that refers specifically to Teamtailor privacy policy for further information.
Getting in touch/ scheduling a meeting/ contact form	We offer ways of you getting in touch with us to explore whether we can collaborate with you. We use this personal information with your consent which you can withdraw at any time by contacting us on our contact page, with the subject header ‘Data Protection’.
Disclosure Forms (Consultancy, idea, invention, reagent, software & copyright)	In order to provide the service of advising you on a commercialisation prospect, we collect personal data. At this stage we use this personal information with your consent which you can withdraw at any time by contacting us on our contact page, with the subject header ‘Data Protection’. If your relationship with us progresses and we need to use your data in a different way we will inform you at that stage. A privacy statement with further information can be found here.
Confidentiality Agreements (CDAs)	When working with us to commercialise your research you will share confidential information and wish to put a confidentiality agreement in place. We have an online version of this agreement which includes personal data, and you can find out more in a privacy statement here .
Available technologies enquiry	We welcome contact from companies who are interested in licensing available technologies from the University of Cambridge. We offer ways for companies to get in touch with us to explore licensing opportunities. We use this personal information with your consent which you can withdraw at any time by contacting us on our contact page, with the subject header ‘Data Protection’.
Subscription Preferences	We collect information about you when you opt-in to receive communications from us in connection with topics you have selected, such as news and/or events. The information you provide will be used to send you these communications. Your subscription preferences can be managed at any time. All marketing email communications will incorporate a link enabling you to unsubscribe from receiving further communications. You can also contact us directly to request that you are removed from our mailing list. Please see How we use your personal information - Subscribers to digital newsletters and updates for further information.
Cambridge Enterprise Venture Partners	We collect information from you when you make an enquiry, submit an application form or register to attend an event. The information you provide will be used to process and manage your application or event booking. We may also contact you to undertake post-event evaluation. Please see How we use your personal information – Cambridge Enterprise Venture Partners for further information. Where online transactions are required in connection with membership registrations or event bookings, these may be undertaken via the University of Cambridge e-sales system. For further guidance please refer to https://www.information-compliance.admin.cam.ac.uk
Event Booking	We collect information from you when you register to attend an event. The information you provide will be used to process and manage your event booking. We may also contact you to undertake post-event evaluation. Please see How we use your personal information – events participants for further information. We use Eventbrite for online registration. Eventbrite is a third-party service that is not owned or managed by Cambridge Enterprise. Please refer to Eventbrite’s terms of service and privacy policy as we do not accept any responsibility or liability for their policies. Where online transactions are required in connection with event bookings, these may be undertaken via the University of Cambridge e-sales system. For further guidance please refer to https://www.information-compliance.admin.cam.ac.uk

Cambridge Enterprise will keep a record of the details you provided and additional details provided by you.

We will collect:

Your name, address and contact details, including email address and telephone number

For further information on the specific types of data we collect for the areas listed above, please refer to How we use your personal information.

We maintain:

A record of your enquiry form and supporting documents
A record of your electronic communications with us, including feedback, questions for and information provided by Cambridge Enterprise
A record of any communications (including electronic) with and feedback from your mentoring interactions with the academics, researchers, staff, students and alumni facilitated by us
A record of your preferences to receive marketing communications with us for any opportunities that we offer

We do not collect your communications with third parties. We record, store and securely transmit your personal information in paper and electronic formats, in email and voice recording. We limit access to your personal information to your personal information to our employees and those at the University who have a need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

We may combine the information you submit with other information we have collected from you, whether online or offline, and on your usage of our website.

We may collect certain information automatically as you navigate around our website.

Please see our Cookie Policy and How we use your personal information for further details.

What is the purpose of the processing?

We will process your personal information for a range of contractual, statutory or public interest purposes, including to:

Verify your credentials
Process and manage your use of our website
Respond to your messages submitted through our website or via any other communication
Manage your account for marketing, including customising the type of communication we send to you according to your preferences
Protect our legitimate interests and your interests and fundamental rights do not override those interests

We are committed to respecting the information you trust us with and to making sure that we keep it safe. Our websites collect very little personal information and we use it in ways that are compatible with your individual rights and freedoms.

The use of your personal information in the ways described above is necessary for the legitimate interests of Cambridge Enterprise in operating and improving its websites, analysing their use and ensuring their security, or is carried out with your consent when you accept certain cookies.

Where we do need to collect any additional personal data not listed above via our website, you will be told at that time about the use we will make of that information. For example, you may need to complete an online form in order for us to send you newsletters or to book to attend an event.

What is the legal basis for processing?

We set out in the table below, details of the lawful basis for which we process your personal information.

If we require your consent for any specific use of your personal information, we will collect it at the appropriate time and you can withdraw this at any time. We will not use your personal information to carry out any wholly automated decision-making that affects you.

Purpose	Legal basis for processing including basis of legitimate interests
To manage our relationship with you from when you visit our website	a) Performance of our agreement with you b) Necessary to comply with a legal obligation c) Necessary for our legitimate interests (to keep our records updated and to study how academics, researchers, staff, students and alumni use our services)
To measure or understand the effectiveness of the information on and engagement with our website	Necessary for our legitimate interests (to study how academics, researchers, staff, students and alumni use our services, to develop them, to commercialise intellectual property, and to inform our marketing strategy)
To interact with our business teams	Necessary for our legitimate interests or to perform our obligations under our agreement with you (to ensure that opportunities are addressed in an efficient and effective way)
To protect the vital interests of academics, researchers, staff, students and alumni using our services	Necessary for our legitimate interests (in order to protect the vital interests of academics, researchers, staff, students and alumni)
To protect our vital interests	Necessary for our legitimate interests (in order to better serve academics, researchers, staff, students and alumni)
To collect and share any necessary feedback submitted via or relating to our website	Necessary for our legitimate interests (in order to better serve academics, researchers, staff, students, alumni and website users)
To comply with our legal obligations concerning the services we provide	Necessary for compliance with a legal obligation (in order to disclose your personal information to legal or regulatory authorities, with whom we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to comply with any legal obligation, or to protect the rights, property, or safety of us, academics, researchers, staff, students and alumni and third parties)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data)	(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with a legal obligation

Who will my personal information be shared with?

Your personal information is shared as permitted or required by law, on a considered and confidential basis, with the University.

Transferring your information outside the United Kingdom or European Economic Area (EEA)

We may need to transfer your personal information outside of the UK or EEA in order to provide you with the services and products you require or as necessary for our legitimate interests. This will most likely occur when our third-party providers are based outside the EEA. Any such transfers are carried out with appropriate safeguards in place to ensure the confidentiality and security of your personal information.

Other than as set out above, we will not normally publish or disclose any personal information about you to other external enquirers or organisations unless you have requested or consented to it, or unless it is in your vital interests to do so (for example, in an emergency situation).

Links to other websites

Our website may include links to third party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control those third-party websites and not responsible for their privacy policies or statements.

This Privacy Policy does not apply to any website operated by a third party. If you visit a third party website, please read its Privacy Notice or privacy statement to find out how it uses your personal data.

Your rights

You have the right to access the personal information that is held about you by the Cambridge Enterprise. Further details can be found at Making a Subject Access Request.

You also have the right to ask us to correct any inaccurate personal information we hold about you, to delete personal information, or otherwise restrict our processing, or to object to processing or to receive an electronic copy of the personal information you provided to us.

If you are not happy with the way your information is being handled, or with the response received from us, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at Wycliffe House, Water Lane, Wilmslow, SK9 5AF. We would however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.