static/About/Data.txt

+<h1>Swansea University Computer Society Data Policy</h1>
+
+<p>Date: May 2018</p>
+
+<p>GDPR (EU regulation 2016/679) replaces the Data Protection Directive 
+(EU directive 95/46/EC) on 25/05/2018. As per articles 12, 13, and 14 here is 
+our policy on data.</p></p>
+
+<p>This is aimed to be the one and only place with regards to data within 
+Swansea University Computer Society, henceforth refereed to as SUCS. 
+This is written in as simple language as possible therefore may include some 
+informal phrasing.</p>
+
+<h1>Clarifications:</h1>
+
+<h3>Interested groups:</h3>
+<ul>
+	<li/>
+<p>Swansea University Computer Society (SUCS). SUCS is <b>not</b>
+	a legal entity. We are a ‘group’ of unpaid volunteers within a
+	larger charity. SUCS does not have a data protection officer and is
+	not registered with the ICO as we fall under the Students Union, and
+	are their problem. However we are able to deal with data related
+	queries directly via the email address <a href="mailto:admin@sucs.org">admin@sucs.org</a></p>
+	<p>In this document we consider “our” stuff to be any computer
+	system or network we manage, even if we do not directly own such
+	system or network.</p>
+	<li/>
+<p>Swansea University Students' Union (Charity number:
+	1149941). Is the organisation we are a part of, legally no
+	difference between us (SUCS) and them. They are not registered with
+	the ICO as of 29/04/2018.</p>
+	<p>As of 29/04/2018 <a href="https://www.swansea-union.co.uk/website/cookies/">https://www.swansea-union.co.uk/website/cookies/</a>
+	says 
+	</p>
+	<p>“Unless otherwise specified on the form, no personal
+	information will be shared with any third party outside of Swansea
+	University Students' Union. In addition all personal information
+	collected and/or processed by Swansea University Students' Union is
+	held in accordance with the provisions of the Data Protection Act
+	1998.</p>
+	<p>If you have any general queries, or need more information about a
+	particular form, please contact <a href="mailto:info@swansea-union.co.uk">info@swansea-union.co.uk</a>”</p>
+	<li/>
+<p>Swansea University (Charity Number: 1138342). They are
+	registered with the ICO, Registration Number: Z6102454.</p>
+	<li/>
+<p>You, the ‘data subject’, just by reading this (it’s
+	only available via our website) we have collected personal data on
+	you.</p>
+</ul>
+<p><br/>
+<br/>
+
+</p>
+<h1></h1>
+<h1>Data:</h1>
+<h3>Non-members:</h3>
+<p>SUCS stores data about your interactions with our systems as per
+Article 6, Paragraph 1, Point F, Recital 49 of GDPR. It is not used
+for purposes other than described in Recital 49.</p>
+<p>Such data is exempt from Right To Be Forgotten (Article 17)
+requests as per Article 17, Paragraph 3, Point E.</p>
+<p>It may be shared with Swansea University ISS Networking Team and
+Law Enforcement upon request.</p>
+<p>No other data is stored.</p>
+<h3>Members:</h3>
+<p>SUCS stores data about all your interactions with our systems as
+per Article 6, Paragraph 1, Point F, Recital 49 of GDPR. It is not
+used for purposes other than described in Recital 49.</p>
+<p>Such data is exempt from Right To Be Forgotten (Article 17)
+requests as per Article 17, Paragraph 3, Point E.</p>
+<p>It may be shared with Swansea University ISS Networking Team and
+Law Enforcement upon request.</p>
+<p>SUCS only starts to store other personal data until a member has
+created a account on our systems.</p>
+<p>Once you have created a account we hold the following personal
+data that you give us:</p>
+<ul>
+	<li/>
+<p>Name</p>
+	<li/>
+<p>Contact Details</p>
+	<ul>
+		<li/>
+<p>Phone number</p>
+		<li/>
+<p>Address</p>
+		<li/>
+<p>Email address</p>
+	</ul>
+	<li/>
+<p>SUCS Username</p>
+	<li/>
+<p>SUCS UID</p>
+	<li/>
+<p>Swansea University ID</p>
+	<li/>
+<p>CCTV images &amp; video</p>
+</ul>
+<p>SUCS username is used to identify and address you.</p>
+<p>SUCS UID is used in reference to GDPR Recital 49.</p>
+<p>Swansea University ID is used to verify membership eligibility and
+linkage when interfacing with Swansea University Students’ Union
+and Swansea University.</p>
+<p>CCTV is used in a non-monitoring fashion, history is only accessed
+by staff when there is reasonable need. CCTV may be shared with
+Swansea University (Estates and Facilities – Security) and law
+enforcement.</p>
+<p>Other stored details are used for contact purposes. They are not
+shared with any third party outside of SUCS. However, they may be
+shared with law enforcement when required.</p>
+<p>We do not share data with third parties, that includes the
+Students’ Union unless otherwise stated.</p>
+<h1>Data Requests:</h1>
+<h3>Non-members:</h3>
+<p>You may send data requests for your data to <a href="mailto:admin@sucs.org">admin@sucs.org</a></p>
+<h3>Members: 
+</h3>
+<p>You may send data requests for your data to <a href="mailto:admin@sucs.org">admin@sucs.org</a></p>
+<h3>Students’ Union Staff:</h3>
+<p>We do not share data directly, if you would like some data please
+speak to us at <a href="mailto:admin@sucs.org">admin@sucs.org</a></p>
+<h3>Swansea University Staff:</h3>
+<p>ISS Networking Team - You may send data requests to <a href="mailto:admin@sucs.org">admin@sucs.org</a></p>
+<p>Estates Security - You may send data requests to <a href="mailto:admin@sucs.org">admin@sucs.org</a></p>
+<p>Other – We do not share data directly.</p>
+<h3>Law Enforcement:</h3>
+<p>You may send data requests to <a href="mailto:admin@sucs.org">admin@sucs.org</a>.
+If you wish to have a specific person to liaise with, please say so
+in the original email.</p>
\ No newline at end of file