Facebook pixel European Union General Data Protection Regulation (GDPR) Privacy Policy

European Union General Data Protection Regulation (GDPR) Privacy Policy

Purpose and Applicability of this Policy

St. Louis Community College (the “College”) is committed to protecting the security and privacy of personal and sensitive information collected from individuals in the European Union (EU). The General Data Protection Regulation (EU 2016/679) (GDPR) is legislation of the EU that is intended to protect the privacy of individuals in the EU by establishing how data controllers and data processors must address the collection and processing of personal information about those individuals. This policy is applicable to the processing of personal data received from individuals who are physically in the EU at the time data is initially collected in connection with the offering of goods or services by the College. This policy is in addition to and does not replace other College policies and procedures, such as policies regarding the protection of student information, employee information, health record information or other data.

Personal Information

Personal data means any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference:

  • to an identifier such as a name, an identification number, location data, an online identifier or
  • to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person (EU 2018/1725) (GDPR).

Types of Personal Information the College Processes

We process your personal information, including, but not limited to, contact information, demographic information, educational history and records, entrance exams scores, medical information, behavior information, financial information, military service and/or status, employment history, professional and personal references, criminal background checks and other additional information necessary to process your application, and general administrative requirements related to your relationship with the College.

Data Privacy Principles:

  • The College will only process your personal information for lawful purposes and only for the specific purpose identified.
  • We will not process additional personal information that is not needed.
  • We will ensure that all personal information we maintain is kept accurate.
  • We will not retain your personal information for longer than necessary.
  • We will always process your personal data securely.
  • We will not sell or trade your personal information to other colleges, universities, non-profit organizations, or businesses, unless we have your consent to share the information, and if ordered to do so by legal processes, subpoenas, or court orders.

Entities That Process Your Personal Information:

  • College staff, faculty, and Board of Trustees
  • Third Parties
  • College related organizations

The College may share your personal information with other individuals or entities as indicated in the St. Louis Community College’s Privacy Policy.

Responsible Use of Information

The College protects personal information related to the data subject as specified in the Board Policy: Responsible Use of Information and Technology.

Legal Basis for Processing Your Personal Information

The College will process your personal information only when necessary for one or more of the following lawful purposes:

  • Contract – The College needs to process your personal information to provide your education services.
  • Legal Obligation – Personal information as necessary for compliance with a legal obligation.
  • Legitimate Interests – The College has determined that processing your personal information is necessary to perform the services or conduct the business for which the data is collected.
  • Vital Interests – We must process your personal information to protect an interest important to you or someone else.
  • Public Task or Public Interest – The College processes personal information related to providing educational services or process information related to race or ethnicity.
  • When you have given consent – If consent is the basis for processing data, you may withdraw consent at any time.

Purposes for Processing Your Personal Information

In addition to the above lawful purposes for processing your data, the College may process your data without specific consent for the following uses:

  • The College requires the data to carry out specific obligations or rights of the College, or the data subject in relation to business transactions with the College, education services performed by the College, obligations related to employment or to process payments to comply with a contract.
  • For compliance with a legal obligation, we record and report donations.
  • You grant us permission to provide health services, to process payments, or to process admissions and student education information.
  • The College has a legitimate interest when we evaluate your academic performance and determine financial aid eligibility.
  • We provide health care for various public health related reasons and to respond to and inform you of emergency situations.
  • The College reports information relating to public health and safety.

Data Protection Rights

You have certain rights regarding your personal information. Additional details can be found in the Official Journal of the European Union, Chapter 3, Rights of the Data Subject. 

The Right to Access

You have the right to request copies of your personal information.

The Right to Correct

You have the right to request that the College correct any information you believe is inaccurate, and complete information that you believe is incomplete.

The Right to Erasure (known as the “right to be forgotten”)

You have the right to request that we erase your personal information. However, information that is necessary to be retained for legal compliance will be securely retained by the College.

The Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information.

The Right to be Notified

You have the right to request that you are notified when your personal information is corrected, erased or when we restrict the processing of your information.

The Right to Data Portability

You have the right to request we transfer your personal information that we collected to another organization or directly to you.

The Right to Object

You have the right to object to our processing of your personal information. If you object to our processing of personal information, it may impact the services or functions we can engage in with you.

Automated Individual Decision-Making System

You have the right not to be subject to automated decision-based processing, such as profiling.

File a Complaint

For information regarding filing a complaint with an appropriate European Union supervisory authority, visit: https://ec.europa.eu/info/about-european-commission/contact/problems-and-complaints_en

Contact Information

For general information regarding data privacy concerns, contact:

Data Privacy Officer St. Louis Community College 3221 McKelvey Road, Bridgeton, Missouri, 63044 privacy@stlcc.edu 314-539-5113

Changes to This GDPR Privacy Policy

Any changes to this policy will be highlighted on the top of this page for one month before going into effect. The highlights will remain on the top of the page for three months to keep you informed of the changes.

 

Last Updated: June 9, 2021

Back to top