European Union General Data Protection Regulation (GDPR)
General Data Protection Regulation Notice for University of Kentucky Students or Employees Studying or Working in the European Union
Pursuant to Article 13 of the European Union General Data Protection Regulation (“GDPR”), the University of Kentucky provides the following notice:
While you are abroad, any personal data that is collected in relation to your coursework, experiential learning, or University employment may be transferred to University of Kentucky. Such personal data will then be electronically stored and otherwise processed by University of Kentucky for the following purposes:
- To maintain your student or personnel record;
- To track academic progress;
- To facilitate payments and communications related to any services that University of Kentucky or a host institution provides to you, or any services that you provide to University of Kentucky or its students;
- To analyze and improve the University’s international education travel experiences and other University programs;
- To assist the University in the investigation and litigation of any violations of applicable University student codes or policies in which you may be involved while in the EU; and
- To facilitate regulatory reporting, auditing, maintenance of accreditation, and other related University processes and functions
The personal data that you provide, and any contact or location data that you provide to University while abroad, will also be processed for certain legitimate business purposes, which include some or all of the following:
- To contact and/or assist you in the event of an emergency;
- To comply and demonstrate compliance with any applicable laws;
- To promote the health and safety of University community members;
- To facilitate any other services that University is providing you;
- To confirm any services University’s employees provide abroad;
- To conduct statistical reporting and analysis; and
- To enable University to enhance, modify, personalize or otherwise improve University’s services or communications for the benefit of University’s members and/or the general public.
Any personal data that is collected in relation to your coursework, experiential learning, or employment while you are abroad will retained in accordance with record retention schedules required or permitted by U.S. or state law.
To the extent you are a citizen of the European Union and personal data about you is created in the European Union, you may have the following rights provided by the GDPR:
- The right to request from the University of Kentucky access to, a copy of, rectification, restriction in the use of, or erasure of your information in accordance with all applicable laws, though erasure of information will be subject to any retention periods required or permitted by applicable U.S. and state laws; and
- The right to lodge a complaint with a supervisory authority as defined in the GDPR.
Updated August 2019