Data Protection Statement – theGIST (Glasgow Insight into Science and Technology)
This statement explains how theGIST (“we”, “us” and “our”) handles and uses the personal information we collect about our members for processes relating to our operations and activities.
When changes are made to this statement, we will publish the updated version on our website and email you.
The controller for your personal information is theGIST. The person responsible for data protection within our society is the Editor-in-Chief who can be contacted at editor@the-GIST.org.
How we use your personal information
We collect and process your personal information for a number of purposes, including:
- Maintaining your personal details (e.g. name, contact information, social media username, information relating to your student status, and activity preferences), including ensuring effective communications with you.
- Managing society bureaucracy (e.g. affiliation where member student IDs are required)
- Maintaining a formal record of your activities with us.
- Managing complaints made to us.
- Managing society alumni relations.
Our normal legal basis for processing your personal information is your consent, which you gave at the point you become a member of the society and which you can withdraw at any time, including by resigning your membership.
How we share your personal information
- Personal information is not normally shared outside of the society and its members.
- We share some of your personal information with the Students’ Representative Council and/or University, only where there is a specific need to, including for affiliation purposes.
- We share some of your personal information (e.g. name and social media username) when posting your work online.
- We may share your personal information with other organisations if it is required to carry out activities on behalf of the society e.g. when providing media coverage for local events. In such cases, we will ask for your explicit consent prior to transmitting this information.
We may also be subject to a legal requirement (with or without your consent) to share your personal information with the University or a government agency (such as the police or security services or other statutory authorities with investigatory powers) under special circumstances (e.g. relating to tax, crime or health and safety). Where feasible and appropriate, we will notify you of our intention to share such information in advance.
Your rights
You have the right to access the personal information that we hold about you. You also have the right to ask us to correct any inaccurate personal information we hold about you, to delete personal information, or otherwise restrict our processing, or to object to processing or communications, or to receive an electronic copy of the personal information you provided to us. Please note that all of these rights are qualified in various ways.
If you have questions or concerns about how your personal information is used, please contact us using the above details.
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO) https://ico.org.uk/.
