This document describes how Tekniska Högskolans Studentkår, registration number 802005-9153, having its registered address at Drottning Kristinas Väg 15-19, 114 28 Stockholm (“THS”, “we” or “us”) collects, uses and processes Personal Data (“Privacy Policy”) when you use THS’s App (the “App”).
When you use the App you may be directed to websites or services provided by third parties where your personal data is processed by such third parties and governed by their respective privacy policies.
All definitions in this Privacy Policy shall be interpreted in accordance with applicable data protection laws which refers to the General Data Protection Regulation (Regulation no. 2016/679), as well as the national implementations and related national legislation.
Which Personal Data do we PROCESS?
By signing in to the App, the following membership data and student union card data will be integrated to the App:
(a) KTHID
(b) First and last name
(c) Personal identity number
(d) Payment of student union membership fee
(e) Other membership related information such as student union division
We process the abovementioned data in the App, for the following purposes: i) to sign you in to the App and identify you as a current or previous student at Kungliga Tekniska Högskolan; ii) to enable and provide the App to you, including connecting and integrating the App to services provided by third parties; and iii) to improve and develop the App, new services to analyse your use of the Services, and iv) to ensure the technical functioning of the App and to prevent use of the App in breach of the terms of service.
By agreeing to the Terms of Service in order to use the App, you enter into an agreement with us under which we shall provide the App to you. The processing of this personal data for the purposes set out in i)-ii) above, are based on our fulfilment of this agreement (Article 6.1(b)). You will not be able to use the App, or certain functions in the App, if you do not provide us with this personal data. The processing of personal data for the purposes set out in iii)-iv) above are based on our legitimate interest to be able to ensure the functionalities in the App and improve our service (Article 6.1(f)).
How do we collect your personal data?
Your membership data ((a)-(e) above) are integrated in to the App via our service provider who manages our memberships, and our service provider for the student union card.
How do we share your personal data?
We share your KTHID to above-mentioned service providers in order to integrate your membership data into the App. No other personal data is shared to these service providers.
We may also share your personal data to the following categories of receivers:
–To third-party service providers: We may also disclose personal data to companies that process personal data on our behalf, such as our cloud service provider, or providers of authentication services.
–To third parties where required by law: We may also disclose your personal data to a competent law enforcement body, regulatory or government agency, court, or other third party if we believe disclosure is necessary to: (i) comply with applicable legal requirements or regulation; (ii) to exercise, establish or defend the our legal rights; (iii) to detect, prevent or report fraud and other security or technical problems; or (iv) to protect your vital interests or those of any other person.
Your personal data will not be transferred to countries outside of the EU/EES by the use of the App.
For how long do we store your personal data in the App?
You have the right to terminate your use of the App by logging out, and the information will then no longer be processed in the App. However, this does not affect your membership in THS. As such, we will still process such data for as long as it is needed for the purpose of maintaining and administer the student union membership.
What are your rights and how to exercise them?
You can request to access, rectify or erase your personal data. You may also object to the processing of your personal data, or request that it be restricted. In addition, you can ask for the communication of your personal data in a structured, commonly used and machine-readable format. If the processing of personal data has been made on the basis of your consent, you have the right to withdraw your consent at any time. In such case, please note that such withdrawal does not affect the validity of the processing up until the point of withdrawal.
You also have the right to lodge a complaint before a data protection authority or the competent court of law. The supervisory authority in Sweden is Integritetsskyddsmyndigheten (IMY) and you can read more above your rights here. If you are not based in Sweden, you may contact the supervisory authority that is relevant to you, you can find a list of the relevant authority in your country here.
To exercise your rights, or if you have any questions regarding our processing of your personal data, please contact us by using the contact details listed in section 1 above, or by sending an e-mail to vordf@ths.kth.se.
If we make changes to this Privacy Policy, we will notify you by sending you an email. If your consent is required due to the changes, we will provide you additional prominent notice as appropriate under the circumstances and, ask for your consent in accordance with applicable law.