Privacy Policy for MSA Pakistan (Medical Students' Association of Pakistan)
This Privacy Policy pertains to our website (msapakistan.org), mailing lists, and surveys/data collection done through our msapakistan.org domain. Policies regarding data collection for our programs and activities may be found in separate documents (here).
1. Who We Are
The Medical Students' Association of Pakistan (MSA Pakistan) is a student-led organization representing medical, dental, physiotherapy, nursing, and allied health students across Pakistan. Established on May 1, 2023, we aim to unite medical students and empower them through educational opportunities, leadership development, and advocacy for global health.
MSA Pakistan envisions a future where all medical students unite to make a positive impact on local and global health. We foster growth through training, collaboration, and capacity-building initiatives, ensuring that our members are well-equipped for leadership roles in healthcare.
2. Purpose
This privacy policy explains when, why, and how we collect personal information about our members within and outside this site and our mailing lists. It includes how we use, store, and disclose your data and how we ensure its security.
MSA Pakistan qualifies as a “data controller” under the General Data Protection Regulation (GDPR). This means that we are responsible for determining the purpose and means of processing personal data and are required to inform you about the information contained in this privacy policy.
3. Our Commitment
In line with the core principles of the GDPR, MSA Pakistan is committed to the following in regard to our use of personal data:
- Lawful, Fair, and Transparent Data Collection: We ensure that your data is collected and stored fairly and transparently.
- Purpose Limitation: We collect data only for purposes clearly communicated to you.
- Data Minimization: We collect only the necessary data for our purposes.
- Truth and Accuracy: We ensure that your data is kept accurate and up-to-date.
- Storage Limitation: We will retain your data only as long as necessary for the specified purpose.
- Integrity and Confidentiality: We take appropriate security measures to protect your data.
We will strive to ensure that you understand the purpose of each data collection process, how we process your data, and how you can correct or remove it if needed.
4. How Do We Collect Personal Information
MSA Pakistan collects personal information through several means:
- Email and Written Correspondence
- Application Forms / Enrollment Forms
- Direct contact at events and elsewhere
- Social Media
- Surveys and Research Forms
In nearly all instances, it will be clear when we are collecting your data.
5. What Personal Information Do We Collect
We collect personal information when you engage with us in the following activities:
- Participation in MSA Pakistan programs and initiatives
- Enrollment in MSA Pakistan events or conferences
- Volunteering or working with MSA Pakistan
- Surveys and research activities within the MSA Pakistan network
The information we may collect includes:
- Name, Date of Birth, Place of Birth, and Country of Origin
- Contact Information: Email Address, Phone Number, Postal Address
- Physical Data: Gender, Health Requirements (for service provision)
- Curriculum Vitae: Employment, education, and experience related to the purpose of the data collection
- Any additional information required on a case-by-case basis
6. How Is Your Information Used
The personal data we collect may be used for the following purposes:
- Selection of participants for MSA Pakistan activities and programs
- Communication about MSA Pakistan events, opportunities, and initiatives
- Impact assessment of MSA Pakistan programs
- Providing services or information about MSA Pakistan activities
MSA Pakistan does not engage in targeted advertising and does not share data for marketing purposes.
7. What Is the Lawful Basis of MSA Pakistan Data Collection
Based on the GDPR, MSA Pakistan ensures that at least one of the following lawful bases applies when processing personal data:
- Consent: The individual has given clear consent for processing personal data.
- Contract: The data processing is necessary for a contract or for taking specific steps before entering into a contract.
- Legal Obligation: The data processing is necessary to comply with the law.
- Vital Interests: The data processing is necessary to protect an individual’s life.
- Public Task: The data processing is necessary for the organization’s official functions.
- Legitimate Interests: The data processing is necessary for the legitimate interests of MSA Pakistan or a third party.
8. Instances of Data Sharing with a Third Party
MSA Pakistan will not sell, rent, or share your personal data for marketing or advertising purposes. We may share data with third parties for the following reasons:
- Event Organizers: For providing adequate services to event participants.
- Research Institutions: For data collection or research purposes, ensuring compliance with our policies.
- Technical Providers: For managing digital processes and services.
- MSA Pakistan Local Councils: For selection processes or conveying relevant information.
- Law Enforcement or Regulatory Bodies: To comply with legal obligations or protect rights.
9. How Long Do We Retain Personal Information
We retain personal information only as long as necessary for the purpose of collection, and as required by law or for legal purposes. The retention period will be communicated during the data collection process.
10. Where Do We Store Personal Information
We store personal data within our secure hosting platform and Google Suite. Third-party providers ensure compliance with data protection regulations.
11. Security Precautions to Protect Your Information
We take appropriate security measures to protect your personal data from misuse, loss, or alteration. We limit access to personal data to those who require it to fulfill specific purposes.
12. Other Websites
Our website may contain links to external websites that are not operated by MSA Pakistan. We are not responsible for the content or privacy practices of these sites and encourage you to review their privacy policies before engaging with them.
13. Your Rights Regarding Your Information
As per the GDPR, you have the following rights regarding your personal data:
- Access: Request a copy of your personal information.
- Correction: Request rectification of inaccurate or incomplete information.
- Deletion: Request the deletion of your personal data under certain conditions.
- Objection: Object to our use of your data for specific purposes.
- Withdraw Consent: You can withdraw consent for data usage at any time.
For more details, you may contact us at privacy@msapakistan.org.
14. Contact Information
For any questions regarding our privacy policies or to exercise your rights, please contact us at privacy@msapakistan.org.