GDPR Notice for Student Applicants

The European Union’s General Data Protection Regulation (“GDPR”) and other countries’ privacy laws provide certain rights for data subjects concerning the use of personal information.

This page provides a summary concerning the use of personal information you provide to the University of Massachusetts (“University”) while you are in the European Union (“EU”) in connection with your application for enrollment at the University.

What is ‘personal information’?

‘Personal information’ means any information which relates to or identifies you as an individual.

Who will process my personal information?

The information provided here applies to the use, sharing and disclosure of your personal information by the University as part of the admissions process. 

What personal information will be processed?

The University will use information provided on your admissions application together with any supporting documents requested and additional information that may be provided by your references or following an interview process. 

What is the purpose and legal basis of the processing?

The University will process the personal information provided on your application and the other information referred to above for the purposes of identifying you, processing your application, verifying the information provided, deciding whether to offer you admission to the program you have applied for, and communicating that outcome (together with any feedback).

We may also use or disclose the information provided for the following legal or public interest purposes:

  • To prevent or detect fraud.
  • For equal opportunity monitoring.
  • To help us to make reasonable accommodation for any disability, as requested by you.
  • To allow us to consider any future accommodation requirements.
  • To provide certain disclosures required by applicable law.
  • For research and statistical purposes, but no information which could identify you will be published.

We consider the processing of your personal information for the above purposes to be either necessary for us to take steps in order to create a contractual relationship with you (e.g. to assess your application to study with us), or necessary for compliance with a legal obligation (e.g. equal opportunity monitoring), or necessary for the performance of tasks we carry out in the public interest (e.g. admissions research). We require you to provide us with the information we ask for during the application process in order to assess your application properly, except where providing the information is marked as optional. University admissions decisions are not automated.

Who will my personal information be shared with?

As well as circulating your application and related materials to the appropriate staff at the University, we may share your personal information for the above purposes as relevant and necessary with:

  • Where required, your current high school, college or university, or other educational organization.
  • Your examination boards or awarding bodies.
  • Agencies of the United States Government (e.g. Citizenship and Immigration Services, U. S. Department of Education)
  • Your funders and/or lenders (e.g., as relevant, student loan companies, the funders of any scholarships, awards or prizes).
  • Companies or organizations providing specific services to, or on behalf of, the University.

How is my personal information used if I am accepted?

If you are accepted, we will use your personal information for the purposes described in the GDPR Notice for University Students.

How can I access my personal information?

You have the right to access the personal information that is held about you by the University. You also have the right to ask us to correct any inaccurate personal information we hold about you, to delete personal information (subject to certain exceptions), or otherwise limit our processing, or to object to processing or to receive an electronic copy of the personal information you provided to us.

If you have any questions about how your personal information is used, or wish to exercise any of your rights, please consult the University’s GDPR website.

How long is my information kept?

We store your personal information for as long as necessary to complete the application process. If you are admitted to the University, your information will be kept as part of your student record for the duration of your studies (and it may be used as part of our assessment of any future application you make for further studies at the University). Information about how long different types of information are retained by the University is published in the Massachusetts Statewide Record Schedule Quick Guide.

How do I complain?

If you are not happy with the way your information is being handled, or with a response received from us, please review the European Commission’s redress options.

Are changes made to this webpage?

This webpage was last updated in May 2018. It is reviewed when necessary and at least annually. Any changes will be published here and you will be notified via this webpage and/or by email.