General Data Protection Regulation Policy
In its capacity as a data controller in Europe, please be aware that ACM-IAU collects and processes personal information in connection with the application process and educational programs of ACM-IAU.
In compliance with articles 13 and 14 of the General Data Protection Regulation 2016/679 of the European Parliament and European Council of April 27 2016 and article 32 of the “Information Liberties” law of January 6, 1978, ACM_IAU hereby informs students that:
ACM-IAU collects data for the sole purpose of administrative processing and the organization of IAU/ACM educational programs. The responsible official may designate other administrative personnel of ACM-IAU under their authority to handle this data.
All personal data collected is for the sole purpose of the planning, organization, and security of ACM-IAU programs. It will be processed and handled in accordance with ACM-IAU policies and the aforementioned law and EU GDPR, guided by the principles of fairness, lawfulness, transparency, purpose limitation, accuracy, storage limitation, integrity, confidentiality and accountability, as well as the utmost protection of students’ privacy.
Data collected is held for five years from the time of registration. Students have the right to access, correct, or erase their personal data by requesting it via email or mail to the responsible official. ACM-IAU keeps a record of how it uses their personal data, which they can consult if they wish. ACM-IAU only uses sensitive personal data, such as health conditions and food habits, for the purposes for which they collect it, such as students’ health and safety.
Students have the right to:
- Limit the use of thier personal data
- Object to how their personal data is used
- The portability of their personal data
Students have the right to withdraw their consent to the use of their personal data at any time by writing a letter to: ACM-IAU, 8 rue de Littera, BP30970, 13604 Aix en Provence, France or email to: kristin.ouerfelli@iau.edu. They can also make a claim to the CNIL (Commission Nationale de l’Informatique et des Libertés).