GDPR合规

UTC PRIVACY STATEMENT REGARDING THE European Union’s General Data Protection Regulation (GDPR)

收集及使用个人资料通知书

The University of Tennessee Chattanooga (“UTC”) may be a data “controller” or “过程or” with regard to certain activities as defined under the European Union’s General Data Protection Regulation (“EU GDPR”).  UTC is committed to protecting the rights of individuals in compliance with the GDPR.  You are notified that by applying for 入学 or other services, 联合技术正在收集您的某些个人数据.  UTC is collecting this personal data in order to review your application for 入学 or other services.

我们收集的个人信息

所收集的个人资料种类及使用方法

UTC collects a variety of personal data to meet one of its lawful bases, as referenced above.  大多数情况下，这些数据被用于学术录取, 招生, 教育项目, 工作招聘, 提供医疗服务, 参与研究, 发展, 公共服务.  数据通常包括名称, address, 成绩单, 工作经历, 工资单信息, 研究课题信息, medical and health information (for student health services, 或旅游), 和捐赠.  If you have specific questions regarding the collection and 使用 of your personal data, please contact the Data Protection Officer identified herein.

If a data subject ref使用s to provide personal data that is required by UTC in connection with one of UT’s lawful bases to collect such personal data, such refusal may make it impossible for UT to provide education, 就业, 研究, 或其他请求的服务.

我们将如何处理您的个人信息

Lawful Basis for Collecting and Processing of Personal Data
 

UTC is an institution of higher education involved in education, 研究, 公共服务.  In order for UTC to educate its students both in class and 在线, 从事研究, 提供公共服务, 这是必要的, 必要的, 联合技术公司有合法的收集依据, 过程, 使用, 并维护学生的数据, 员工, 申请人, 研究对象, 以及其他参与其教育的人, 研究, 公共服务项目.  法律依据包括, 但不限于, 入学, 登记, 教室交付, 在线, 以及留学教育, 成绩, 通信, 就业, 应用研究, 发展, 改进方案分析, 记录保存.  Examples of data that UTC may need to collect in connection with these lawful bases are: name, 电子邮件地址, IP地址, 物理地址或其他位置标识符, 照片, as well as some sensitive personal data obtained with prior consent.

For more information regarding the EU GDPR, please review http://audit.田纳西州.edu/compliance/gdpr.

Most of UTC’s collection and 过程ing of personal data will fall under the following categories:

• Processing which is 必要的 for the purposes of the legitimate interests pursued by UTC or third parties in providing education, 就业, 研究与开发, 公共服务.
• Processing which is 必要的 for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Processing which is 必要的 for compliance with a legal obligation to which UTC is subject.
• Processing for which the data subject has 给n consent for UTC to 使用 his or her personal data for one or more specific purposes. 

There will be some instances where the collection and 过程ing of personal data will be pursuant to other lawful bases.

我们如何收集您的个人信息 

UTC从哪里获得个人数据

UTC从多个来源接收个人数据.  最常, UTC gets this data directly from the data subject or under the direction of the data subject who has provided it to a third party (for example, application for 入学 to UTC through 使用 of the Common App).

您对个人信息的权利

数据主体在GDPR下的权利

如果您是GDPR下的个人数据主体, you may obtain the following information and exercise the following rights:

• the identify and the contact details of the controller and, 在适用情况下, 控制人的代表;
• 联合技术公司数据保护主任的联系方式;
• an explanation of the purposes and legal bases/legitimate interests of the data collection/过程ing;
• 识别个人资料接收者;
• notice if UTC intends to transfer personal data to another country or international organization;
• notice of the time period that the personal data will be stored;
• 查阅个人资料的权利, 改正不正确的个人资料, 删除个人资料, 限制或反对加工, 以及数据可移植性的权利;
• the right to withdraw consent at any time, if 过程ing is based on consent;
• the right to lodge a complaint with a supervisory authority (established in the EU);
• 解释为何需要提供个人资料, and possible consequences of the failure to provide the data;
• notice of the existence of automated decision-making, including profiling; and
• notice if the collected data are going to be further 过程ed for a purpose other than that for which it was collected.

Any data subject who wishes to exercise any of the above-mentioned rights may do so by submitting such request to the Data Protection Officer identified herein.

您的个人信息安全

受欧盟GDPR约束的个人数据安全

UTC is committed to ensuring the security of your information.  我们已经制定了合理的物理措施, 技术, and administrative safeguards designed to prevent unauthorized access to or 使用 of the information collected online.  All personal data collected or 过程ed by UTC under the scope of the GDPR will comply with the security controls and systems and 过程 requirements and standards as set forth in UTC’s Information Technology Policies, 这些都可以在http://university田纳西州上找到.policytech.com/?公共= true&siteid = 1

分享您的个人信息

分享你的信息
UTC will not share your information with third parties except:

• as 必要的 to meet one of UTC’s lawful purposes, including but not limited to:
  • 它的合法利益，
  • 合同合规,
  • 根据您的同意，
  • 法律规定的;
• as 必要的 to protect UTC’s interests; or
• with service providers acting on our behalf who have agreed to protect the confidentiality of the data.

数据保留

数据保留
UTC keeps the data it collects for the time periods specified in UTC’s Records Retention Policy, 网址是http://university田纳西州.policytech.com/dotNet/documents/?docid = 35

赌球app

资料保障主任
如果您对本隐私声明有任何疑问, please contact the Data Protection Officer for your campus or institute at (电子邮件保护):

• 泰勒阿甘, Executive Vice Chancellor for Administration and Finance

隐私声明的变更

本隐私声明的变更
UTC may, in its discretion, periodically update this GDPR Privacy Notice.