The JCR This statement explains how St Catharine’s College JCR (“we” and “our”) handles and uses data it collects about its members for processes relating to the operation and activities of the society. When changes are made to this statement, we will publish the updated version to our website. The controller for your personal information is the St Catharine’s College JCR. The person responsible for data protection at the time of issue, and the person who is responsible for monitoring compliance with relevant legislation in relation to the protection of personal information, is the JCR President, Jack Stebbing. The normal legal basis for processing your personal information is that we believe it is in our legitimate interests to do so, in order for the JCR to run effectively and efficiently. Where we process your personal information outside of the purposes listed in this statement, we will seek your explicit consent to do so in advance. You may ask us for further information on these matters at any time if you have specific concerns. How your data is used by the society We collect and process your personal information, as specified below, for a number of purposes, including: maintaining your personal details (i.e. your name, CRSid, cohort, course, nationality and room details), including ensuring effective communications with you; maintaining a formal record of your activities within the society. maintaining data enables the JCR to undertake research into its own activities and/or to manage complaints made to us for example Name to provide a record of contributions at JCR meetings in the minutes CRSid to contact you and add you to the JCR mailing list Cohort to add you to the appropriate mailing list and put you into the appropriate accommodation ballot Course to inform you of subject specific opportunities Nationality to allow the International Officer, Sara Atanasiu, to do their duty Room details to allow the Accommodation Officer, Alice Yau, to run the ballot If you have concerns or queries about any of these purposes, please contact us. How we share your personal data Personal data is not normally shared outside of the society and its members. We share your CRSid with CUSU, only where there is a specific need to, such as JCR elections. We use College IT facilities and the JCR Google Drive to store electronic copies of personal information. We may also be subject to a legal requirement (with or without your consent) to share your personal information with the College or a government agency (such as the police or security services or other statutory authorities with investigatory powers ) under special circumstances (e.g. relating to tax, crime or health and safety). Where possible, we will notify you of our intention to share such information in advance. Your rights You have the right: to ask us for access to, rectification or erasure of your personal information; to restrict processing (pending correction or deletion); to object to communications; and to ask for the transfer of your personal information electronically to a third party (data portability). Some of these rights are not automatic, and we reserve the right to discuss with you why we might not comply with a request from you to exercise them. If you have questions or concerns about your personal information, or how it used, please speak to an officer of the society. If you remain unhappy with the way your information is being handled, or with the response received from us, you have the right to lodge a complaint with the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, SK9 5AF.