Lawful Basis for Collecting and Processing of Personal Data
- Processing is necessary for the purposes of the legitimate interests pursued by Georgia Tech or third parties in providing student financial and the proper administration and management of funds held for student financial support
- Processing is necessary for the performance of a contract for the provision of financial aid to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
- The data subject has given consent to the processing special categories of his or her sensitive personal data for one or more specific purposes.
Types of Personal Data collected and why
- Contact information including, without limitation, email address, physical address, phone number, and other location data
- Unique personal identifiers and biographical information (e.g. date of birth)
- Details of your education and/or employment qualifications
- Information related to visa requirements, copies of passports and other documents to ensure compliance with U.S. laws
- Financial information gathered for the purposes of administering fees and charges, loans, grants, scholarships, etc.
- Information related to the prevention and detection of crime and the safety of employees, students and visitors of Georgia Tech
|Georgia Tech Unit||Purpose|
|Board of Regents of the University System of Georgia||Required for the processing of applications for and the receipt of scholarships and/or financial aid.|
|Office of the Bursar||Required for the processing of applications for and the receipt of scholarships and/or financial aid.|
|Office of Institutional Research||Required for the processing of applications for and the receipt of scholarships and/or financial aid.|
|Office of Student Affairs|
|Third Party Organizations|
|U.S. Department of Education|
|Georgia Student Finance Authority|
|External scholarship, fellowship, and/or providers of educational loans|
If you have specific questions regarding the collection and use of your personal data, please contact the Office of Enterprise Data Management at firstname.lastname@example.org.
Where Georgia Tech gets Personal and Sensitive Personal Data
Individual Rights of the Data Subject under the EU GDPR
- information about the controller collecting the data
- the data protection officer contact information
- the purposes and legal basis/legitimate interests of the data collection/processing
- recipients of the personal data
- if Georgia Tech intends to transfer personal data to another country or international organization
- the period the personal data will be stored
- the existence of the right to access, rectify incorrect data or erase personal data, restrict or object to processing, and the right to data portability
- the existence of the right to withdraw consent at any time
- the right to lodge a complaint with a supervisory authority (established in the EU)
- why the personal data are required, and possible consequences of the failure to provide the data
- the existence of automated decision-making, including profiling
- if the collected data are going to be further processed for a purpose other than that for which it was collected
Security of Personal Data subject to the EU GDPR
Georgia Open Records Act
As a state university, Georgia Tech is subject to the provisions of the Georgia Open Records Act (ORA). Except for those records that are exempt from disclosure under the ORA, the ORA provides that all citizens are entitled to view the records of state agencies on request and to make copies for a fee. The ORA requires that Georgia Tech produce public documents within three business days. For more information on Georgia Tech’s ORA compliance, please visit the Open Records Act page on the Legal Affairs website.
|Record Type||Retention Schedule Link|
|Federal Title IV Student Loan Records, Number 0472-06-015||https://www.usg.edu/records_management/schedules/934|