Lawful Basis for Collecting and Processing of Personal Data
- Processing is necessary for the purposes of the legitimate interests pursued by Georgia Tech or third parties in providing critical recruitment, enrollment, and education information for programs provided by Georgia Tech.
- The data subject has given consent to the processing of his or her special categories of sensitive personal data for one or more specific purposes.
Types of Personal Data collected and why
- Contact information including, without limitation, email address, physical address, phone number, and other location data
- Unique personal identifiers and biographical information (e.g. date of birth)
- Photographs of you
- Details of your education and/or employment qualifications
- Information related to visa requirements, copies of passports and other documents to ensure compliance with U.S. laws
- Financial information gathered for the purposes of administering fees and charges, loans, grants, scholarships, etc.
- Information related to the prevention and detection of crime and the safety of employees, students and visitors of Georgia Tech.
- Parent/guardian information, including relationship data, education and/or employment, and contact information.
|Georgia Tech Unit||Purpose|
|Registrar's Office||Completion of enrollment.|
|Parent's Program||Fundraising and communication with parents.|
|Office of Development||Fundraising and communication with parents.|
|Georgia Tech Academic Units||Communication with prospective students and students.|
|Office of Undergraduate Education||To provide academic support through advisement and assign Living Learning Community housing.|
|Strategic Consulting||Student Assessment|
|Georgia Tech Foundation||Fundraising and communication with parents.|
|Georgia Tech Alumni Association||Fundraising and communication with parents.|
|Georgia Tech Athletic Association||Communication with prospective students and students.|
Where Georgia Tech gets Personal and Sensitive Personal Data
Individual Rights of the Data Subject under the EU GDPR
- information about the controller collecting the data
- the data protection officer contact information
- the purposes and legal basis/legitimate interests of the data collection/processing
- recipients of the personal data
- if Georgia Tech intends to transfer personal data to another country or international organization
- the period the personal data will be stored
- the existence of the right to access, rectify incorrect data or erase personal data, restrict or object to processing, and the right to data portability
- the existence of the right to withdraw consent at any time
- the right to lodge a complaint with a supervisory authority (established in the EU)
- why the personal data are required, and possible consequences of the failure to provide the data
- the existence of automated decision-making, including profiling
- if the collected data are going to be further processed for a purpose other than that for which it was collected
Security of Personal Data subject to the EU GDPR
Georgia Open Records Act
As a state university, Georgia Tech is subject to the provisions of the Georgia Open Records Act (ORA). Except for those records that are exempt from disclosure under the ORA, the ORA provides that all citizens are entitled to view the records of state agencies on request and to make copies for a fee. The ORA requires that Georgia Tech produce public documents within three business days. For more information on Georgia Tech’s ORA compliance, please visit the Open Records Act page on the Legal Affairs website.
|Record Type||Record Number|
|Admission Program Records||0472-06-002|
|Athletic Recruiting Records||0472-07-002|
|International Student Records||0472-06-020|
|National Testing Records||0472-06-024|
|Services to Students with Disabilities (SSD) Records||0472-06-030|
|Special Academic Programs Student Records||0472-06-031|
|Special Program Student Records||0472-06-032|
|Student Academic Records||0472-06-033|
|Student Admissions Records||0472-06-035|