1.- WEBSITE MANAGER
This website is the responsibility of CAMBRIDGE UNIVERSITY PRESS (hereinafter CAMBRIDGE), with CIF: W0064249F company domiciled at c/ José Abascal 56, 1º - 28003 Madrid (Madrid), entity entered in the Register of Foundations (registration number 250CUL-EXT). For further information: iberia@cambridge.org.
2.- RATIONALE
CAMBRIDGE respects the privacy rights of its Users and recognizes the importance of protecting the personal data that we collect about our users.
The purpose of this document is to inform Users of the website about the processing of personal data conducted on this website.
3.- PERSONAL DATA PROCESSED BY SIMPLY ACCESSING THE WEBSITE
3.1. What data is processed?
By simply accessing the website, CAMBRIDGE collects the IP address and other data relating to the connection and its origin. The IP address is a code that identifies the User’s internet connection at a specific time. Only the User's Internet access provider can identify the subscriber assigned an IP address at a particular time.
Due to the very nature of the server that supports the website, the User’s IP address is automatically recorded along with the date and time of access.
3.2. What is this data used for?
This data is only used to manage the normal use of the website and to perform statistical analysis on the use of the website.
3.3. Recipients of the data
CAMBRIDGE does not provide this information to any third party unless obliged to do so by law (e.g., an official request in the context of a police investigation).
3.4. Legal processing
The legal basis for legitimate processing of the IP address is the technical requirement to enable the provision of the website.
3.5. Data processing period
IP addresses shall be kept for a period of 7 days.
4. USERS' RIGHTS AND HOW TO EXERCISE THEM
Data protection regulations guarantee Users the following rights:
- Access: allows the User to know what information is available, where it has been obtained, to whom it has been provided and with what uses it has been processed.
- Rectification: allows the User to rectify any erroneous or out-of-date data.
- Suppression: allows the User to stop processing their data.
- Opposition: allows the User to stop using their data for a specific purpose.
- Limitation: allows the User to restrict the processing of their data, but in such a way that they are kept for a later purpose.
- Portability: allows the User to obtain a copy of their data in electronic format and, in certain circumstances, request that they be communicated to another service provider. It is only applicable for computerized processing conducted with the consent of the User or for the fulfilment of a contract.
- Revocation of consent: allows the User to withdraw the consent that, where applicable, they have provided for processing their data.
These rights require the possibility to identify the User requesting them and to link their identity to the data processed by CAMBRIDGE.
However, CAMBRIDGE cannot establish this link with any of the data it processes simply by accessing the website unless the User can provide certain documentation allowing identification (e.g., a certificate from their Internet service provider indicating the IP address the User was assigned at a specific date and time.)
Users are informed that they can exercise the aforementioned rights before CAMBRIDGE and revoke their consent for the processing that had provided it, by post to the above address or by email to arco@cambridge.org.
If Users require further information or consider their right to data protection violated, they may contact the Spanish Data Protection Agency (www.aepd.es).
5. OTHER PROCESSING OF PERSONAL DATA
5.1. Cookies and similar
CAMBRIDGE uses cookies and other similar storage and retrieval mechanisms on terminal equipment (hereinafter, Cookies).
Cookies are files that are downloaded to the User’s browser and can be read later by CAMBRIDGE. In this way, cookies allow various functionalities, such as recognizing a User who has already accessed the website before and being able to analyse the use of the web service to improve it.
However, it is impossible to determine the User’s identity from the cookies used by CAMBRIDGE, unless the User provides additional information by other appropriate means, and these can be linked to the cookies downloaded by the User.
For further information, see the Cookies Policy.
5.2. Website Forms
CAMBRIDGE has several forms on its website through which it collects personal data.
5.2.2. Contact Form
CAMBRIDGE will process the data provided through the contact form to deal with the contact request.
- Legal basis: The legal basis that legitimises the processing is the Users' consent expressed when sending their request for contact.
- Retention period: The data will be processed for the time required to resolve the User’s contact request. Subsequently, they will be blocked and kept for 3 years to deal with any liabilities arising from the processing.
They may withdraw consent at any time, as indicated in the rights of interested parties’ section of this Privacy Policy.
5.2.2. Newsletter Subscription Form
CAMBRIDGE will process the data provided through the newsletter subscription form with the purpose of sending the User commercial communications in the form of a monthly newsletter.
- Legal basis: The legal basis that legitimises the processing is the Users' consent expressed when sending their subscription request.
- Retention period: The data will be stored indefinitely as long as the subscriber doesn’t withdraw their consent. Subsequently, they will be blocked and kept for 3 years to deal with any liabilities arising from the processing.
They may withdraw consent at any time, as indicated in the rights of interested parties’ section of this Privacy Policy.
5.2.3. Event Registration Form
CAMBRIDGE will process the data provided through this form to manage the registration for training events organised by CAMBRIDGE.
- Legal basis: The legal basis that legitimises the processing is the Users' consent expressed when sending their registration request.
- Retention period: The data will be processed for the time required to resolve the User’s registration request. Subsequently, they will be blocked and kept for 3 years to deal with any liabilities arising from the processing.
They may withdraw consent at any time, as indicated in the rights of interested parties’ section of this Privacy Policy.
5.2.4. E-Sample Request Form
CAMBRIDGE will process the data provided through this form to deliver electronic samples of our courses.
- Legal basis: The legal basis that legitimises the processing is the Users' consent expressed when sending their e-sample request.
- Retention period: The data will be processed for the time required to resolve the User’s e-Sample request. Subsequently, they will be blocked and kept for 3 years to deal with any liabilities arising from the processing.
They may withdraw consent at any time, as indicated in the rights of interested parties’ section of this Privacy Policy.
5.2.5. Additional Information Request Form
CAMBRIDGE will process the data provided to meet the User’s request for additional information about the product or course related to the form.
- Legal basis: The legal basis that legitimises the processing is the Users' consent expressed when sending their request.
- Retention period: The data will be processed for the time required to deal with the User’s request for more information. Subsequently, they will be blocked and kept for 3 years to deal with any liabilities arising from the processing.
They may withdraw consent at any time, as indicated in the rights of interested parties’ section of this Privacy Policy.
Data provided by Users through the corresponding forms may be shared by CAMBRIDGE with companies that are part of the same business group, in particular with the parent company located in the United Kingdom, whose legislation does have a personal data protection level equivalent to that of the European Union.
6. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION REQUESTED
The mandatory information on each form will be identified as such on the form itself. Refusal to provide this information will prevent the service requested by the User to be implemented.
7. USER COMMITMENTS
The User declares to be 14 years of age or older. Also, they undertake to inform CAMBRIDGE of any changes to the information provided by e-mail to arco@cambridge.org, identifying themselves as a website User and specifying the information to be modified.
8. THIRD PARTY DATA PROVIDED BY THE USER
In the event that the User provides personal data of third parties for any purpose, they guarantee to have previously informed the affected parties and to have obtained their consent for the communication of their data to CAMBRIDGE. The User guarantees that the persons concerned are over 14 years of age and that the information provided is accurate and truthful.
CAMBRIDGE will check the consent of those concerned by means of a first email with non-commercial content requesting verification of the consent given on their behalf by the User. If any liability arises from a breach of these conditions by the User, the User shall be liable for the consequences of such breach.
9. SENDING COMMERCIAL COMMUNICATIONS
CAMBRIDGE informs the User that the commercial communications requested by the User (or if they have not objected to receiving them by ticking the corresponding boxes on the forms) shall be sent using Hubspot Marketing Hub, managed by Hubspot.com. Hubspot’s servers are located in the USA, a country whose legislation does not offer a level of data protection equivalent to that of Europe. However, adequate guarantees are provided through the signature of standard contractual clauses approved by European Commission Decision 2021/914/EU.
The tool used to send commercial communications by e-mail will include links and minute, transparent images that will be associated with your e-mail address. In this way, when one of these images is downloaded or accesses the links contained in the email, CAMBRIDGE can know for statistical purposes if the email has been opened or if a link has been accessed from that email. They can prevent such use by setting their e-mail manager or software to prevent automated image downloads and by not accessing links in e-mails you receive.
In each communication, the User may object to receiving this type of information through the specific mechanisms for processing the unsubscription and requesting, where appropriate, the right to revoke consent, opposition, or deletion.
10. FURTHER INFORMATION
If the User has any questions about the information collected in our Privacy Policy, they can email us at arco@cambridge.org.