Ä¢¹½ÊÓƵ

Primary Privacy Statement

The Ä¢¹½ÊÓƵ (the “University,” “we”, “Ä¢¹½ÊÓƵ”) respects the privacy of individuals who use its websites and online applications. We are committed to ensuring the privacy and security of your sensitive and confidential information provided to the University online.

Please note many units of the University run and maintain their own websites on the una.edu domain. These sites may provide additional notices about the information they collect related to your web browsing experience, which may supplement this Privacy Statement. By visiting una.edu, you are accepting and consenting to the practices described in this notice.

 

What Information We Collect

Our web servers, like all webservers, collect information such as the IP address of your computer, the operating system, browser software used, access times, and pages visited. This data is used statistically and in aggregate to monitor web server performance, network security, and to help manage the site and improve service.

The Ä¢¹½ÊÓƵ does not track individual visitor profiles but reserves the right to use log data to diagnose problems with our server or networks, analyze resource management, or investigate security concerns. Ä¢¹½ÊÓƵ will only use this information for the educational, research, or other purposes in furtherance of the University's mission for which it was provided.

Many pages on the una.edu domain utilize a technology known as Google Analytics that allows us to gather general statistics regarding how our websites are used. For example, if we know what browser software and screen resolution our users are utilizing, we are better able to design web pages that suit our users. Please visit the website for more information.

Some of our webpages may link to external websites not owned or controlled by the University. The University is not responsible for the privacy practices or the content of such websites.

 

Cookies

A cookie is a small file placed onto your device that enables features and functionality. The information contained in a cookie typically includes information collected automatically by the web server and/or information provided voluntarily by the user. Individual users can control how his/her computer stores and uses cookies by adjusting individual browser settings. Google Analytics uses cookies to generate statistics about our site.

 

Information Protection

The University implements reasonable physical, technical, and administrative safeguards designed to prevent unauthorized access to or use of the information we collect online. While we strive to protect your information, we cannot guarantee or warrant the security of such electronic data.

Your information will be retained or disposed of according to the University's records management principles and polices.

 

Other Data Collection

Visitors using online forms or applications on our web pages may choose to supply information voluntarily. Information collected via such web forms will be securely maintained and be used only for the purposes for which it was supplied. Pages collecting such information should be transparent about the information they are collecting as well as the purpose for the data collection.

The University’s policies do not allow the release of personally identifiable information to third parties (other than its agents when required for university business) without the permission of the person identified or as allowed or required by law. We do not sell the information we collect from individual visitors to our websites to third parties.

The Ä¢¹½ÊÓƵ may receive information about you from other sources, including third parties that help us update, expand, and analyze our records, identify new customers, or prevent or detect fraud. Ä¢¹½ÊÓƵ may also receive information about you from social media platforms, including but not limited to, when you access our social media content or interact with us on these platforms. The information we may receive is governed by the privacy settings, policies, and/or procedures of the applicable social media platform; therefore, we encourage you to review them.

 

International Visitors

Ä¢¹½ÊÓƵ is located in the United States (State of Alabama). By providing information to Ä¢¹½ÊÓƵ, you are transferring your personal data to the United States. If you are providing personal information and are not a resident of the United States, your country’s laws governing data collection and use may differ from those in the United States. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the GDPR, and Ä¢¹½ÊÓƵ relies on derogations for specific situations as set forth in Article 49 of the GDPR.

 

Children

The Ä¢¹½ÊÓƵ does not believe our websites are appealing to children, nor are they directed to children under 13. Ä¢¹½ÊÓƵ does not knowingly collect personally identifiable data from persons under the age of 13 and strives to comply with the provisions of COPPA (The Children’s Online Privacy Protection Act). If you are a parent of a child under 13 and you believe that your child has provided us with information about himself or herself, please contact us at infosec@una.edu.

 

Changes to this Statement

This Privacy Notice may be amended from time to time. Any such changes will be posted on this page. Your continued usage of the site indicates your acceptance of such changes. For questions concerning this Privacy Notice, please email us at infosec@una.edu.

Last updated 10/9/2020.

This Privacy Notice outlines the collection, use, and disclosure of Personal Data provided to the Ä¢¹½ÊÓƵ ("Ä¢¹½ÊÓƵ") by prospective undergraduate and graduate students and applicants. Additionally, this document provides notice as required under the European Union's ("EU") General Data Protection Regulation ("GDPR"), which regulates data collection and use of Personal Data of persons located in the EU.

For purposes of this notice, Personal Data includes such information as name, email address, physical address, photos, IP address, as well as other sensitive personal data obtained with prior consent.

 

Lawful Basis for Collecting and Processing Personal Data

Ä¢¹½ÊÓƵ is an institution of higher education involved in education, research, and public service. In order for Ä¢¹½ÊÓƵ to educate its students both in person and electronically, engage in research, and provide public service, it is essential, necessary, and Ä¢¹½ÊÓƵ has lawful bases to collect, process, use, and maintain data of its students, employees, applicants, research subjects, and others involved in its educational, research, and public service programs. The lawful bases include, without limitation, admission, registration, delivery of classroom, on-line, and study abroad education, grades, communications, employment, applied research, development, program analysis for improvements, and records retention.

Most of Ä¢¹½ÊÓƵ's collection and processing of Personal Data will fall under the following categories:

• Processing that is necessary for the purposes of the legitimate interests pursued by Ä¢¹½ÊÓƵ or third parties in providing education, employment, research and development, and public service.
• Processing that is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Processing that is necessary for compliance with a legal obligation to which Ä¢¹½ÊÓƵ is subject.
• Processing for which the data subject has given consent for Ä¢¹½ÊÓƵ to use his or her personal data for one or more specific purposes.

There will be some instances where the collection and processing of personal data will be pursuant to other lawful bases.

 

Types of Personal Data Collected/Processed and Purpose

Enrollment Management and Graduate & Online Education collect the following categories of Personal Data in order to recruit and admit undergraduate and graduate students:

• Name
• Contact information including, without limitation, email address, physical address, phone number, and other location data
• Unique personal identifiers and biographical information (e.g. date of birth)
• Details of your educational qualifications
• Information related to visa requirements, copies of passports and other documents to ensure compliance with U.S. laws
• Financial information gathered for the purposes of verifying eligibility for study in the United States
• Information related to the prevention and detection of crime and the safety of employees, students and visitors of Ä¢¹½ÊÓƵ

The Personal Data that Enrollment Management and Graduate & Online Education collect may be shared internally with academic units, Alumni Affairs and other school officials with a legitimate educational interest.

If you have specific questions regarding the collection and use of your Personal Data by Enrollment Management, please contact the Asst VP for Enrollment Management at 256-765-4608. For questions regarding the collection and use of your Personal Data by the Graduate & Online Education, please contact the Asst Dean at 256-765-4957.

If you refuse to provide Personal Data that Ä¢¹½ÊÓƵ required in connection with one of Ä¢¹½ÊÓƵ's lawful bases for collecting such Personal Data, such refusal may make it impossible for Ä¢¹½ÊÓƵ to provide you education, employment, research or other requested services.

 

Where Ä¢¹½ÊÓƵ gets Personal and Sensitive Personal Data

Ä¢¹½ÊÓƵ receives Personal Data from multiple sources. Most often, Ä¢¹½ÊÓƵ gets this data directly from the Data Subject or under the direction of the Data Subject who has provided it to a third party. In addition to data collected from the Data Subject, Enrollment Management and Graduate & Online Education may collect data from ACT, College Board, Cappex, ETS, and the State of Alabama Statewide Transfer & Articulation Reporting System (STARS) and other entities in accordance with the Family Education Rights and Privacy Act (FERPA).

 

Individual Rights of the Data Subject under the GDPR

In addition to the right to receive the information provided in this Privacy Notice, if you are an individual data subject covered by GDPR (i.e. located in the EU/EEA) you have the right to:

• Request from Ä¢¹½ÊÓƵ access to and rectification or erasure of Personal Data or restriction of processing Personal Data concerning the Data Subject, the right to object to processing and the right to portability of Personal Data;
• Where processing is based upon consent, to withdraw consent at any time, without affecting Ä¢¹½ÊÓƵ's right to process Personal Data based upon consent before its withdrawal;
• The right to file a complaint with a supervisory authority appointed by an EU member state for the purpose of receiving complaints;
• Additional notice of the existence of automated decision-making, including profiling;
• If the Personal Data is going to be further processed for a purpose other than that for which it was collected, then notice of the purpose and basis or bases for the further processing;
• If Personal Data is collected for Ä¢¹½ÊÓƵ's legitimate interests or for a task carried out in the public interest, then the Data Subject has the right to object, on the grounds of his or her particular situation, to the processing of Personal Data concerning him or her (including profiling);
• Where Personal Data are processed for direct marketing purposes, the right to object at any time to processing Personal Data concerning him or her for such marketing; and
• Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her; provided, however, that this right does not apply if the decision is (a) necessary for entering into, or performance of, a contract between the Data Subject and Ä¢¹½ÊÓƵ; or (b) is based upon the Data Subject's consent.

Note: Exercising these rights guarantees access to a process but does not guarantee any particular outcome.

Any Data Subject who wishes to exercise any of the above-mentioned rights may do so by filing such request with the designated Data Protection Officer:
Information Technology Services

Ä¢¹½ÊÓƵ Box 5061

Florence, AL 35632

256-765-4865

infosec@una.edu

 

Cookies

Cookies are files that many websites transfer to users' web browsers to enable the site to deliver personalized services or to provide persistent authentication. The information contained in a cookie typically includes information collected automatically by the web server and/or information provided voluntarily by the user. Ä¢¹½ÊÓƵ's websites use persistent cookies in conjunction with a third party technology partner to analyze search engine usage and web traffic patterns. This information is used in the aggregate to monitor and enhance our web pages. It is not used to track the usage patterns of individual users. For more information see our main website Privacy Statement.

 

Security of Personal Data

Ä¢¹½ÊÓƵ will not share your Personal Data with third parties except:

• as necessary to meet one of its lawful purposes, including but not limited to, its legitimate interest, contract compliance, pursuant to consent provided by the Data Subject, or as required or authorized by law;
• as necessary to protect Ä¢¹½ÊÓƵ's interests;
• with service providers acting on Ä¢¹½ÊÓƵ's behalf who have agreed to protect the confidentiality of the Personal Data.

 

Ä¢¹½ÊÓƵ maintains records for the time periods specified in the .

The University email is a service maintained for use by the faculty and staff. The intended use of email is to encourage the efficient and cost effective flow of communication as is inherent in American higher education. Other than for legal purposes, the University does not attempt to control, monitor, or otherwise regulate this medium of communication.

Presented as Information to the Board of Trustees on May 31, 1996.