GDPR for International Students (version 11/2018)

Grand Valley State University

International Student Information

GDPR Privacy Notice and Request for Consent

THE EUROPEAN UNION GENERAL DATA PROTECTION REGULATION (GDPR)

The European Union General Data Protection Regulation, or GDPR (EU 2016/679), is a regulation concerning the collection, protection and processing of personal data provided by an individual ("data subject") while in a European Union Member State, regardless of citizenship or residency.  Therefore, the terms and conditions contained in the Regulation and detailed in this Notice only apply while an individual is physically present in one of the EU Member States.  Complete information is available on the European Commission website.

PRIVACY NOTICE

Grand Valley State University continues to be committed to conducting the collection and processing of personal data with integrity and in compliance with applicable data protection laws.  This Privacy Notice, required under the GDPR, presents information about how the University collects, uses and protects personal data you provide as an International Student

A.        Data Controller Contact Information

Grand Valley State University serves as the Data Controller and determines the purposes and means of processing your personal data.  The individual below serves as the primary contact for GDPR compliance related to international student information and is responsible for responding to questions about this Notice and requests to exercise a data subject's rights.

            NAME: Kate Stoetzner

            DEPARTMENT: Padnos International Center

            TITLE: Director of International Student and Scholar Services

            GVSU ADDRESS: 130 Lake Ontario Hall, 1 Campus Drive, Allendale, MI 49401

            EMAIL: [email protected]

            TELEPHONE: 616331 3898

B.        Purposes for Collecting and Using Data

 Your information is collected and used to report your information and status to USCIS, Social Security Administration, Relation Health Insurance, other GVSU departments.        

C.        Sharing and Transferring Data 

Your information is collected and used to report your information and status to USCIS, Social Security Administration, Relation Health Insurance, other GVSU departments.

D.        Data Retention

Data is retained in accordance with University policy and as required under applicable U.S. laws and regulations.

E.        Sensitive Data 

Your personal identifying information, such as passport, birth date, country of birth, names of family members are collected in order to provide services required by federal law or in order to provide assistance to you in case of an emergency.

F.         Rights of the Data Subject 

While in the EU you will be able to exercise your rights as a data subject described in Article 15-22 of the GDPR:  right of access to your personal data, right to correct that data, right to have the data erased, right to restrict processing, right to data portability, right to object to processing, right to withdraw consent, the right not to be subject to automated decision-making, and the right to lodge a GDPR-related complaint with an EU Supervisory Authority. Please note that the University is subject to federal and state laws, including but not limited to the Family Educational Rights and Privacy Act, that may require that we request, process  and retain and report on certain types of data.  These legal obligations may also affect actions we would be permitted to take in response to a request to exercise your GDPR data rights, especially the right to have your data erased. 

G.        Importance of Data 

Failure to report the data will likely result in non-compliance of the Department of Homeland Security regulations.

H.        Data Protection 

The University has put in place reasonable physical, technical and administrative safeguards designed to prevent unauthorized access to or use of information collected online. 

Request for Consent Please read the above Notice and agree to the conditions, in order to be permitted to be enrolled at Grand Valley State University. 

* denotes a required field

I consent to Grand Valley State University’s use of my personal data (including sensitive data) for the purposes outlined in this Notice, as well as for the transfer of my personal data between the European Union and Grand Valley State University and its representatives, pursuant to the conditions and limits specified in the EU GDPR. I also hereby waive any right to privacy and confidentiality regarding the University's reporting to the appropriate authorities if I am seriously ill; suffer an injury; or am the victim or perpetrator of harassment, whether on- or off- campus.





Page last modified December 4, 2019