Home

CONSENT FOR THE COLLECTION AND PROCESSING OF SPECIAL CATEGORIES OF SENSITIVE PERSONAL DATA FROM THE EUROPEAN UNION

Office of Undergraduate Admission


1) Pursuant to the European Union General Data Protection Regulation (EU GDPR), the Georgia Institute of Technology (“Georgia Tech”), in its capacity as a data controller under the EU GDPR, must obtain your explicit, affirmative consent before it can collect or process any special categories of sensitive personal data for a lawful basis, including, but not limited to, employment, admission and enrollment, study abroad, internship abroad, online education, etc.  For information on how Georgia Tech uses data, please review the Georgia Tech Privacy & Legal Notice.

2) Special categories of sensitive personal data include racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic, biometric data; health data; or data concerning a person’s sex life or sexual orientation.

3) Any special categories of sensitive personal data that is collected from you will be for the sole purpose of recruitment of students and application for admission to Georgia Tech that is sent from the EU and is necessary for that purpose. This may include processing the special categories of sensitive personal data as required to execute contractual obligations in connection with the previously described purpose and compliance with applicable laws, to execute the obligations to you concerning your enrollment as a student at Georgia Tech and recruitment of students. Special categories of sensitive personal data regarding a legal process which may have been provided to Georgia Tech by public authorities will be processed only for the purposes relating to a health or safety emergency and complying with any applicable law. 

4) Special categories of sensitive personal data will be handled and processed only by the persons who are responsible for the necessary activities for the purpose above, and will be transmitted from the EU to the Georgia Tech Atlanta campus.  Georgia Tech is a unit of the Board of Regents of the University System of Georgia (the “BOR”), and data is shared with the BOR and its employees.

5) Refusal of consent may make it impossible for Georgia Tech to carry out its necessary activities for the purpose above, and may preclude Georgia Tech’s ability to provide requested educational services to you. 

6)  You have the right to withdraw your consent to the collection and processing of special categories of sensitive personal data.  If you would like to withdraw consent, please contact the Office of Enterprise Data Management at eugdpr@edm.gatech.edu.

7) Georgia Tech is committed to ensuring the security of your information. We have put in place reasonable physical, technical, and administrative safeguards designed to prevent unauthorized access to your information. 

8) Georgia Tech has an EU GDPR Compliance Policy which includes your individual rights concerning your data. Please see the Georgia Tech Policy Library for the Georgia Tech EU GDPR Compliance Policy.

 
Having read this notice, please indicate your consent for the use of your sensitive personal data, and the transfer of sensitive personal data overseas, for the purpose outlined in this notice:
Date: