Each time you access a site that works in this way for the first time you will be told what information may be released and asked to approve this release. You can always withhold you approval but this may prevent you from accessing the site. If you wish to withhold you approval but access to the site is necessary for your employment or studies you should seek advice, perhaps from your manager, supervisor, lecturer, tutor or director of studies.
For web sites operated by organisations other than the University (for example other Universities, commercial database providers, etc.) Raven will normally release your identity (in the form of an 'eduPerson Principle Name'), your status within the University ('member', 'staff', 'student', etc.) and an 'Anonymous Identifier' which is unique to you and the particular site you are visiting. Raven may release additional information, but only when doing so is necessary to enable the access to which you are entitled.
For sites that are operated by the University, additional information derived from lookup may be released if those sites could obtain the same information directly, but only subject to your choice of suppression.
You should be aware that any site, operated by the University or otherwise, may be located outside the European Economic Area where laws protecting personal data may be weak or non-existent.
Whatever information is released, Raven maintains logs from which your real-world identity can be established. This information may be used to investigate misuse of Raven or services accessed through it, or for fault finding. Your identity, when established in this way, will not be divulged to third parties except as required by law.
Some sites may themselves invite or require you to provide additional information about yourself, over and above that provided by Raven. Such requests, and the site's subsequent use of this information, are outside the University's control and you must use your own judgement about how to respond. The site should inform you at the time of collection of the purposes for which the data is required.
This service may be used to grant you access to resources provided to the University by third parties. You must familiarise yourself with the terms and conditions under which such resources are available and abide by them. In extreme cases, misuse of resources controlled by Raven may result in the suspension of your Raven account.
You will be asked to confirm your understanding of this document and the process that it describes annually and whenever this document changes. The current version of this document can be consulted at any time at 'The Raven/Shibboleth service: terms and conditions'.
General questions about this service should be emailed to firstname.lastname@example.org. The processing of personal data by this service is subject to the UK Data Protection Act 1998. The 'Data Controller' for the processing of such data is the University of Cambridge (contact The University Data Protection Officer, The Old Schools, Trinity Lane, Cambridge CB2 1TN; Email: email@example.com).