User Tools

Site Tools


ict:privacy:start

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
ict:privacy:start [2017/09/21 10:20] – split privacy policy and details jonathanict:privacy:start [2020/02/03 14:02] (current) – societies x.vanbruxvoort
Line 1: Line 1:
 ====== Privacy Policy of Study Association Proto ====== ====== Privacy Policy of Study Association Proto ======
- 
-//This is a draft document and has no official status yet.// 
  
 This is the privacy policy of Study Association Proto (hereafter just "S.A. Proto"). It describes in detail what information S.A. Proto collects and processes, who can access that information and what information it shares with other parties. This document aims to provide users of our website and other ICT services with an understanding of what the association knows about them, and provide easy reference to how that information can be edited/deleted. This is the privacy policy of Study Association Proto (hereafter just "S.A. Proto"). It describes in detail what information S.A. Proto collects and processes, who can access that information and what information it shares with other parties. This document aims to provide users of our website and other ICT services with an understanding of what the association knows about them, and provide easy reference to how that information can be edited/deleted.
  
-This document is supposed to replace the chapter on "Personal information" in the Rules and Regulations of S.A. Proto as per the next General Member Meeting.+This document has replaced the chapter on "Personal information" in the Rules and Regulations of S.A. Proto since the General Member Meeting on October 11, 2017 and is refered to in the current Rules and Regulations of S.A. Proto as 'the privacy policy'.
  
-The privacy policy should be viewed as a dynamic document with transparent revision history. Everybody can see [[https://wiki.proto.utwente.nl/ict/privacy/start?do=revisions|what changes have been made to it and when those changes have been made]]. The privacy policy is made and maintained by the [[https://www.proto.utwente.nl/page/board|board of S.A. Proto]] together with the [[https://www.proto.utwente.nl/committee/819|members of the Have You Tried Turning It Off And On Again committee]]. Changes to the privacy policy can be made for several reasons, including but not limited to: addition of a new service for S.A. Proto, new external partners, suggestions from members and instructions from the General Member Meeting. The latter can make binding decisions as to the content of the privacy policy. Questions regarding the privacy policy can be sent to [[privacy@proto.utwente.nl|privacy@proto.utwente.nl]]. In general, members and owners of user accounts are not notified of changes to this document.+You can also read the privacy policy [[https://wiki.proto.utwente.nl/ict/privacy/start|on-line]].
  
-This document is written on a //best effort// basis and its aim is to provide comprehensive view of the current situationPlease e-mail [[privacy@proto.utwente.nl|privacy@proto.utwente.nl]] if you believe this document contains mistakes or needs clarification.+The privacy policy should be viewed as dynamic document with transparent revision history. Everybody can see [[https://wiki.proto.utwente.nl/ict/privacy/start?do=revisions|what changes have been made to it and when those changes have been made]]. The privacy policy is made and maintained by the [[https://www.proto.utwente.nl/page/board|board of S.A. Proto]] together with the [[https://www.proto.utwente.nl/committee/819|members of the Have You Tried Turning It Off And On Again committee]]. Changes to the privacy policy can be made for several reasons, including but not limited to: addition of new service for S.A. Proto, new external partners, suggestions from members and instructions from the General Member Meeting. The latter can make binding decisions as to the content of the privacy policyQuestions regarding the privacy policy can be sent to [[privacy@proto.utwente.nl|privacy@proto.utwente.nl]]. In general, members and owners of user accounts are not notified of changes to this document to prevent unwanted e-mails. If you want to be notified of changes to this privacy policy, please indicate so in the 'E-mail lists' section on your [[https://www.proto.utwente.nl/user/dashboard|dashboard]].
  
-====== General statements regarding your personal data ====== +====== Collection ======
- +
-These general provisions describe how the association handles privacy and your personal information in general. This section should give you a short overview on how S.A. Proto handles your data in general. This section serves as a replacement to the chapter //Personal information// in the Rules and Regulations of S.A. Proto. +
- +
-This section does not go into exact detail and rather serves as a high-level overview of the intentions of S.A. Proto. If you wish to have a more specific insight in the information S.A. Proto has about you, please see the page on [[ict:privacy:details|specific usage of your personal data]]. +
- +
-===== Collection =====+
  
 In general, your personal data is collected by S.A. Proto in one of the following ways: In general, your personal data is collected by S.A. Proto in one of the following ways:
Line 27: Line 19:
 If data is acquired in any way other than those above, it will be specifically mentioned in this document. If data is acquired in any way other than those above, it will be specifically mentioned in this document.
  
-===== Insight =====+====== Insight ======
  
 Almost all of the information S.A. Proto has accumulated about you can be reviewed by you on the website of S.A. Proto on your dashboard, your profile page or on the relevant part of the S.A. Proto website. It should be explicitly stated that it is always the intent of S.A. Proto to be transparent about the information the association has about you. If you wish to receive an overview of information S.A. Proto has about you that cannot be found on the website, please send an e-mail to [[privacy@proto.utwente.nl|privacy@proto.utwente.nl]] with your request. We aim to reply to your request within one week, but reserve the right to take up to four weeks for our reply. Almost all of the information S.A. Proto has accumulated about you can be reviewed by you on the website of S.A. Proto on your dashboard, your profile page or on the relevant part of the S.A. Proto website. It should be explicitly stated that it is always the intent of S.A. Proto to be transparent about the information the association has about you. If you wish to receive an overview of information S.A. Proto has about you that cannot be found on the website, please send an e-mail to [[privacy@proto.utwente.nl|privacy@proto.utwente.nl]] with your request. We aim to reply to your request within one week, but reserve the right to take up to four weeks for our reply.
 +
 +You will receive an e-mail once a year reminding you that you still haven account at the website and that we thus process your personal information. In this e-mail, we will include the most important data we process of you and ask you to visit the dashboard to review your personal information for correctness. 
  
 In general, only the board of the association, the IT administrators and specific committees can see (part) of the data S.A. Proto has about you. The latter concerns committees that need access to some of your information in order to provide you or the association services. Examples of this are to predict what stock to buy for the OmNomCom, or to prepare activities. In general, only the board of the association, the IT administrators and specific committees can see (part) of the data S.A. Proto has about you. The latter concerns committees that need access to some of your information in order to provide you or the association services. Examples of this are to predict what stock to buy for the OmNomCom, or to prepare activities.
  
-**Any personal data supplied to S.A. Proto is never shared with third parties,** except in special cases involving the University of Twente. Those are outlined below.+**Any personal data supplied to S.A. Proto is never shared with or sold to third parties to achieve economic gain on either side,** with only one exception. Proto shares some basic information like your name and e-mail address with the University of Twente [[ict:privacy:details#determining_membership_fees_and_ut_grands|to establish to height of the financial grand the association receives from the faculty.]]
  
-===== Usage =====+====== Usage ======
  
 How exactly S.A. Proto uses your data is explained further on in this document. In general, your data may be used to: How exactly S.A. Proto uses your data is explained further on in this document. In general, your data may be used to:
  
   * Facilitate services you request (including attending activities and purchasing consumables from the OmNomCom)   * Facilitate services you request (including attending activities and purchasing consumables from the OmNomCom)
-  * Facilitate services to support your study or Creative Technology in general+  * Facilitate services to support your study or Creative Technology or Interaction Technology in general
   * Provide information to the university in order to fix grants and other financial support   * Provide information to the university in order to fix grants and other financial support
-  * Generate statistics or knowledge that help committees, the board or the General Member Meeting to make well informed decisions+  * Generate statistics or knowledge that help committees or societies, the board or the General Member Meeting to make well informed decisions
   * Facilitate a digital list of members, an almanac or related services   * Facilitate a digital list of members, an almanac or related services
   * Calculate and collect contributions that you owe the association, including the membership fee   * Calculate and collect contributions that you owe the association, including the membership fee
Line 51: Line 45:
   * Invitations for the General Member Meeting   * Invitations for the General Member Meeting
   * Information important to your membership   * Information important to your membership
-  * Information in the name of external parties+  * Information in the name of external parties (external parties will never receive your contact details)
   * Information to which you subscribed   * Information to which you subscribed
   * Invitations to activities and other events   * Invitations to activities and other events
Line 58: Line 52:
 S.A. Proto will primarily contact you via e-mail. Only in exceptional occasions will you be contacted by regular mail. S.A. Proto will primarily contact you via e-mail. Only in exceptional occasions will you be contacted by regular mail.
  
-===== Objection =====+====== Objection ======
  
 You can object to S.A. Proto sending you information, except for: You can object to S.A. Proto sending you information, except for:
Line 67: Line 61:
 If you wish to object to S.A. Proto sending you information, you may do so via the website, or by contacting the association board. If you wish to object to S.A. Proto sending you information, you may do so via the website, or by contacting the association board.
  
-For information on how to object to usage of other personal data, please refer to the second part of this document.+For information on how to object to usage of other personal data, please refer to the page on [[ict:privacy:details|specific usage of your personal data]]. 
 + 
 +====== Third parties ====== 
 + 
 +If S.A. Proto wishes to outsource processing of personal information of members of S.A. Proto to a third party, an agreement needs to be established with this third party that establishes what data it will process, how it may process that data and what should happen with the data if the outsourcing is terminated. This agreement should ensure that the third party processed the data in a secure way and only for the intended purposes. 
 + 
 +Outsourcing may only happen for services that S.A. Proto needs but cannot or should not provide itself, the most notable example being banking and payment services. 
 + 
 +Third parties may receive economic gain from the outsourcing only to the extent that Proto may provide fair compensation for the services provided by the third party. 
 + 
 +Any forms of outsourcing processing of your personal data is mentioned on the page describing [[ict:privacy:details|specific usage of your personal data]]. 
 + 
 +====== Specific usage ======
  
-===== Third parties =====+This document does not go into exact detail and rather serves as a high-level overview of the intentions of S.A. Proto. If you wish to have a more specific insight in the information S.A. Proto has about you, please see the page on [[ict:privacy:details|specific usage of your personal data]].
  
-If S.A. Proto wishes to outsource processing of personal information of members of S.A. Proto to third party, an agreement needs to be established with this third party that guarantees that the information is processed securein the right way and for the right purposes.+Please note that stated in here is that by joining an activity you are surrendering your portrait right for any photos taking during that activityYou may always request photo to be taken off-line after publishing. To do that, please contact the association board.
  
 +====== Responsible disclosure ======
  
 +Please find our responsible disclosure policy [[ict:responsible-disclosure|here]].
ict/privacy/start.1505982023.txt.gz · Last modified: 2018/04/14 17:36 (external edit)