Purpose and Applicability of this Policy
St. Louis Community College (the “College”) is committed to protecting the security
and privacy of
personal and sensitive information collected from individuals in the European Union (EU). The General
Data Protection Regulation (EU 2016/679) (GDPR) is legislation of the EU that is intended to protect the
privacy of individuals in the EU by establishing how data controllers and data processors must address
the collection and processing of personal information about those individuals. This policy is applicable to
the processing of personal data received from individuals who are physically in the EU at the time data is
initially collected in connection with the offering of goods or services by the College. This policy is in
addition to and does not replace other College policies and procedures, such as policies regarding the
protection of student information, employee information, health record information or other data.
Personal data means any information relating to an identified or identifiable natural
subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular
- to an identifier such as a name, an identification number, location data, an online identifier or
- to one or more factors specific to the physical, physiological, genetic, mental, economic,
cultural, or social identity of that natural person (EU 2018/1725) (GDPR).
Types of Personal Information the College Processes
We process your personal information, including, but not limited to, contact information,
information, educational history and records, entrance exams scores, medical information, behavior
information, financial information, military service and/or status, employment history, professional and
personal references, criminal background checks and other additional information necessary to process
your application, and general administrative requirements related to your relationship with the College.
Data Privacy Principles:
- The College will only process your personal information for lawful purposes and only
specific purpose identified.
- We will not process additional personal information that is not needed.
- We will ensure that all personal information we maintain is kept accurate.
- We will not retain your personal information for longer than necessary.
- We will always process your personal data securely.
- We will not sell or trade your personal information to other colleges, universities,
organizations, or businesses, unless we have your consent to share the information, and if
ordered to do so by legal processes, subpoenas, or court orders.
Entities That Process Your Personal Information:
- College staff, faculty, and Board of Trustees
- Third Parties
- College related organizations
Responsible Use of Information
The College protects personal information related to the data subject as specified
in the Board Policy:
Responsible Use of Information and Technology.
Legal Basis for Processing Your Personal Information
The College will process your personal information only when necessary for one or
more of the
following lawful purposes:
- Contract – The College needs to process your personal information to provide your
- Legal Obligation – Personal information as necessary for compliance with a legal obligation.
- Legitimate Interests – The College has determined that processing your personal information
necessary to perform the services or conduct the business for which the data is collected.
- Vital Interests – We must process your personal information to protect an interest
you or someone else.
- Public Task or Public Interest – The College processes personal information related
educational services or process information related to race or ethnicity.
- When you have given consent – If consent is the basis for processing data, you may
consent at any time.
Purposes for Processing Your Personal Information
In addition to the above lawful purposes for processing your data, the College may
process your data
without specific consent for the following uses:
- The College requires the data to carry out specific obligations or rights of the College,
data subject in relation to business transactions with the College, education services performed
by the College, obligations related to employment or to process payments to comply with a
- For compliance with a legal obligation, we record and report donations.
- You grant us permission to provide health services, to process payments or to process
admissions and student education information.
- The College has a legitimate interest when we evaluate your academic performance and
determine financial aid eligibility.
- We provide health care for various public health related reasons and to respond to
you of emergency situations.
- The College reports information relating to public health and safety.
Data Protection Rights
You have certain rights regarding your personal information. Additional details can
be found in the
Official Journal of the European Union, Chapter 3, Rights of the Data Subject.
The Right to Access
You have the right to request copies of your personal information.
The Right to Correct
You have the right to request that the College correct any information you believe
is inaccurate, and
complete information that you believe is incomplete.
The Right to Erasure (known as the “right to be forgotten”)
You have the right to request that we erase your personal information. However, information
necessary to be retained for legal compliance will be securely retained by the College.
The Right to Restrict Processing
You have the right to request that we restrict the processing of your personal information.
The Right to be Notified
You have the right to request that you are notified when your personal information
is corrected, erased
or when we restrict the processing of your information.
The Right to Data Portability
You have the right to request we transfer your personal information that we collected
organization or directly to you.
The Right to Object
You have the right to object to our processing of your personal information. If you
object to our
processing of personal information, it may impact the services or functions we can engage in with you.
Automated Individual Decision-Making System
You have the right not to be subject to automated decision-based processing, such as profiling.
File a Complaint
For information regarding filing a complaint with an appropriate European Union supervisory
For general information regarding data privacy concerns, contact:
Any changes to this policy will be highlighted on the top of this page for one month
before going into
effect. The highlights will remain on the top of the page for three months to keep you informed of the
Last Updated: June 9, 2021