S.A. Proto Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Privacy Policy of Study Association Proto ======

This is the privacy policy of Study Association Proto (hereafter just "S.A. Proto"). It describes in detail what information S.A. Proto collects and processes, who can access that information and what information it shares with other parties. This document aims to provide users of our website and other ICT services with an understanding of what the association knows about them, and provide easy reference to how that information can be edited/deleted.

This document has replaced the chapter on "Personal information" in the Rules and Regulations of S.A. Proto since the General Member Meeting on October 11, 2017 and is refered to in the current Rules and Regulations of S.A. Proto as 'the privacy policy'.

You can also read the privacy policy [[https://wiki.proto.utwente.nl/ict/privacy/start|on-line]].

The privacy policy should be viewed as a dynamic document with transparent revision history. Everybody can see [[https://wiki.proto.utwente.nl/ict/privacy/start?do=revisions|what changes have been made to it and when those changes have been made]]. The privacy policy is made and maintained by the [[https://www.proto.utwente.nl/page/board|board of S.A. Proto]] together with the [[https://www.proto.utwente.nl/committee/819|members of the Have You Tried Turning It Off And On Again committee]]. Changes to the privacy policy can be made for several reasons, including but not limited to: addition of a new service for S.A. Proto, new external partners, suggestions from members and instructions from the General Member Meeting. The latter can make binding decisions as to the content of the privacy policy. Questions regarding the privacy policy can be sent to [[privacy@proto.utwente.nl|privacy@proto.utwente.nl]]. In general, members and owners of user accounts are not notified of changes to this document to prevent unwanted e-mails. If you want to be notified of changes to this privacy policy, please indicate so in the 'E-mail lists' section on your [[https://www.proto.utwente.nl/user/dashboard|dashboard]].

====== Collection ======

In general, your personal data is collected by S.A. Proto in one of the following ways:

  * Provided by you, for example by submitting the data into the website
  * Generated by you in the course of using services offered by S.A. Proto, for example by purchasing something or choosing to become part of a committee
  * Provided by the university, as explained later in this document

If data is acquired in any way other than those above, it will be specifically mentioned in this document.

====== Insight ======

Almost all of the information S.A. Proto has accumulated about you can be reviewed by you on the website of S.A. Proto on your dashboard, your profile page or on the relevant part of the S.A. Proto website. It should be explicitly stated that it is always the intent of S.A. Proto to be transparent about the information the association has about you. If you wish to receive an overview of information S.A. Proto has about you that cannot be found on the website, please send an e-mail to [[privacy@proto.utwente.nl|privacy@proto.utwente.nl]] with your request. We aim to reply to your request within one week, but reserve the right to take up to four weeks for our reply.

You will receive an e-mail once a year reminding you that you still haven account at the website and that we thus process your personal information. In this e-mail, we will include the most important data we process of you and ask you to visit the dashboard to review your personal information for correctness. 

In general, only the board of the association, the IT administrators and specific committees can see (part) of the data S.A. Proto has about you. The latter concerns committees that need access to some of your information in order to provide you or the association services. Examples of this are to predict what stock to buy for the OmNomCom, or to prepare activities.

**Any personal data supplied to S.A. Proto is never shared with or sold to third parties to achieve economic gain on either side,** with only one exception. Proto shares some basic information like your name and e-mail address with the University of Twente [[ict:privacy:details#determining_membership_fees_and_ut_grands|to establish to height of the financial grand the association receives from the faculty.]]

====== Usage ======

How exactly S.A. Proto uses your data is explained further on in this document. In general, your data may be used to:

  * Facilitate services you request (including attending activities and purchasing consumables from the OmNomCom)
  * Facilitate services to support your study or Creative Technology or Interaction Technology in general
  * Provide information to the university in order to fix grants and other financial support
  * Generate statistics or knowledge that help committees or societies, the board or the General Member Meeting to make well informed decisions
  * Facilitate a digital list of members, an almanac or related services
  * Calculate and collect contributions that you owe the association, including the membership fee
  * Provide other services that achieve the statuary goals or improve the good spirit of S.A. Proto

S.A. Proto may also send you:

  * Invitations for the General Member Meeting
  * Information important to your membership
  * Information in the name of external parties (external parties will never receive your contact details)
  * Information to which you subscribed
  * Invitations to activities and other events
  * General information about what is happening in the association

S.A. Proto will primarily contact you via e-mail. Only in exceptional occasions will you be contacted by regular mail.

====== Objection ======

You can object to S.A. Proto sending you information, except for:

  * Invitations for the General Member Meeting
  * Information important to your membership

If you wish to object to S.A. Proto sending you information, you may do so via the website, or by contacting the association board.

For information on how to object to usage of other personal data, please refer to the page on [[ict:privacy:details|specific usage of your personal data]].

====== Third parties ======

If S.A. Proto wishes to outsource processing of personal information of members of S.A. Proto to a third party, an agreement needs to be established with this third party that establishes what data it will process, how it may process that data and what should happen with the data if the outsourcing is terminated. This agreement should ensure that the third party processed the data in a secure way and only for the intended purposes.

Outsourcing may only happen for services that S.A. Proto needs but cannot or should not provide itself, the most notable example being banking and payment services.

Third parties may receive economic gain from the outsourcing only to the extent that Proto may provide fair compensation for the services provided by the third party.

Any forms of outsourcing processing of your personal data is mentioned on the page describing [[ict:privacy:details|specific usage of your personal data]].

====== Specific usage ======

This document does not go into exact detail and rather serves as a high-level overview of the intentions of S.A. Proto. If you wish to have a more specific insight in the information S.A. Proto has about you, please see the page on [[ict:privacy:details|specific usage of your personal data]].

Please note that stated in here is that by joining an activity you are surrendering your portrait right for any photos taking during that activity. You may always request a photo to be taken off-line after publishing. To do that, please contact the association board.

====== Responsible disclosure ======

Please find our responsible disclosure policy [[ict:responsible-disclosure|here]].