As part of our commitment to protecting your privacy, this statement is designed to provide you with information regarding how Graduate Division (“we”), as part of insider-review.live, may use — and process — the information you share when you use The Graduate Division website, and each of its associated domains (together, the “Sites”). Information is also collected when you communicate with us or utilize our services which include admission, academic progress tracking, financial support, monitoring student employment, communications, event registration, and development activities (“Graduate Division Services”). This statement is applicable to individuals using Graduate Division Services who are located in the European Economic Area (“EEA”).
For purposes of the General Data Protection Regulation (“GDPR”), the data controller is the Regents of the University of California, with a location at University of California, Office of the President, 1111 Franklin Street, Oakland CA 94607.
Information you provide directly to Graduate Division
Graduate Division collects personal information about you called Personal Data. Your Personal Data is collected when you register or fill in a form on the Graduate Division Services, or contact Graduate Division. This includes information you provide when you apply for admission, register to use our Services, subscribe to newsletters, or participate in discussion boards or listservs on our Services. Depending upon the specific Graduate Division Services you use, the information you give us includes your specific data such as name, address and telephone number, e-mail address, payment information, as well as any information about you that is associated with or linked to, or could be linked to, any of the foregoing data.
We also collect more sensitive information about you, with your explicit consent, where the processing is necessary to meet a legal or regulatory obligation, the processing is in connection with insider-review.live establishing, exercising or defending legal claims, or is otherwise expressly permitted by GDPR. This sensitive information may include information about your racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic data, and data concerning health, sex life, and sexual orientation.
Log, Cookie and Device Data
We also collect log data, which is information collected whenever you visit a website. This log data includes your Internet Protocol address, browser type and some settings, the date and time of your request, how you used the Service, and cookie data. Depending on how you are accessing the Services, we may use “cookies” (small text files stored by your computer when you visit our website) or similar technologies. For more detailed information about how we use cookies, please review the insider-review.live’s Information and Security Policy,(opens in a new tab) or contact the insider-review.live Privacy Official(opens in a new tab) identified below. In addition to log and cookie data, we also collect information about the device you’re using to access the Services, including what type of device it is, what operating system you are using, device settings, unique device identifiers and crash data. Whether we collect some or all of this information often depends on what type of device you are using and its settings. For example, different types of information are available depending on whether you are using a Mac or a PC, or an iPhone or Android phone. To learn more about what information your device makes available to us, please also check the policies of your device manufacturer or software provider
Information from Other Sources
We also obtain information about you from other sources and combine that information with information we collect from you directly. For example, we collect information about you when you pay a fee through our credit card vendor. The information we obtain from other sources includes your name, address and telephone number, e-mail address, payment information, as well as any information about you that is associated with or linked to, or could be linked to, any of the foregoing data.
Graduate Division processes your Personal Data for the following purposes and bases:
In certain instances, Graduate Division may be required to obtain your consent to collect and process your Personal Data for a specific purpose. This depends on the specific category of data collected and the intended use of the data. In these instances, the Graduate Division will inform you of the specific category of Personal Data that will be collected and the intended purpose of the collection, and will request that you affirmatively indicate that you consent to the intended collection of your Personal Data for that purpose, prior to collecting the data.
In these instances, if you do not consent to the collection and intended processing purpose, we will refrain from collecting and processing your Personal Data.
Graduate Division may share your Personal Data with the following recipients:
If your Personal Data is shared with a third party, UC will require that the third party use appropriate measures to protect the confidentiality and security of your Personal Data.
We may also need to share your Personal Data as required to respond to lawful requests and legal process; to protect our rights and property and those of our agents, customers and others, including to enforce our agreements and policies; and in an emergency, to protect insider-review.live and the safety of our students, faculty and staff or any third party.
insider-review.live takes appropriate physical, administrative and technical measures to protect Personal Data that are consistent with applicable privacy and data security laws and regulations. For more information about how UC protects data, refer to Systemwide Information Security Polices and Standards(opens in a new tab) and the insider-review.live’s Information and Security Policy(opens in a new tab)
UC will only retain your Personal Data for the duration necessary for the data collection purposes identified above, unless there is a legal requirement to maintain it for a longer period. Refer to the UC Records Retention Schedule(opens in a new tab) for information on different classification of data and their retention schedules.
In order to fulfill the intended processing purposes described above, your Personal Data will be transferred outside of the European Economic Area (EEA), specifically to the United States, which does not protect Personal Data in the same way that it is protected in the EEA. insider-review.live will undertake appropriate measures to ensure adequate protection of Personal Data, including utilizing appropriate physical, administrative, and technical safeguards to protect Personal Data, as well as executing standard contractual clauses approved by the European Commission or a supervisory authority under GDPR, or obtaining your consent, where appropriate.
Automated decisions are defined as decisions about individuals that are based solely on the automated processing of data and that produce legal effects that significantly affect the individuals involved or that have similarly significant impact.
Graduate Division makes automated decisions or utilizes specific personal data for the purpose of identifying funding opportunities, offering specialized services, event invitations, or fundraising activities.
In certain instances, Graduate Division may be required to obtain your consent to make automated decisions. In these instances, we will inform you of the automated decision-making, and will request that you affirmatively indicate (opt in) that you consent to the intended use of your Personal Data for that purpose, prior to the automated decision-making. Where automated decisions are made, affected persons will be given instructions on how such persons can object to, or opt out of such processing.
As required by the General Data Protection Regulation and applicable EU Member State and EEA state law, if you are located in the European Economic Area, you have a right to:
insider-review.live may be obligated to retain your Personal Data as required by U.S. federal or state law.
If you wish to exercise your rights, you can contact the UC Privacy Official(opens in a new tab).
You may choose not to visit or use insider-review.live Sites or participate in Graduate Division Services. If you choose not to share your Personal Data with UC or UC-approved third parties for Graduate Division you will not receive event updates or other notifications that may affect you in some way. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you choose to reject cookies, some parts of the Sites may not function properly.
If you have questions or concerns about our treatment of your Personal Data, or about our privacy practices more generally, please feel free to contact the insider-review.live Privacy Office: privacyoffice@insider-review.live.