Any information submitted via the website will only be used for the purposes stated on the submission page. KSU will not share your information with third parties except: as required by law, as necessary to protect Institutional interests in the course of an investigation, as necessary to further research efforts pursuant to approvals from the appropriate data stewards and the Institutional Review Board, and/or with contracted service providers acting on behalf of the university who have agreed to protect the confidentiality of the data.
Links within the university website may direct you to other Websites that we do not control. Kennesaw State University is not responsible for the privacy practices, policies, actions, Web content, services or products of non-KSU sites to which we link. These links are not intended to, nor do they constitute, an endorsement by KSU of the linked materials.
(Lawful Basis for Collecting and Processing of Personal Data)
Kennesaw State University is an institute of higher education involved in education, research, and community engagement. In order for KSU to educate its students both in class and on-line, engage in world-class research, and provide community services, it is essential, necessary, and KSU has lawful bases to collect, process, use, and maintain data of its students, employees, applicants, research subjects, and others involved in its educational, research, and community programs. The lawful bases include, without limitation, admission, registration, delivery of classroom, on-line, and study abroad education, grades, communications, employment, applied research, development, program analysis for improvements, and records retention. Examples of data that KSU may need to collect in connection with the lawful bases are: name, email address, IP address, physical address or other location identifier, photos, as well as some sensitive personal data obtained with prior consent.
For more information regarding the EU GDPR, please review Kennesaw State’s EU General Data Protection Regulation Compliance Policy.
The majority of KSU’s collection and processing of personal data will fall under the following categories:
There will be some instances where the collection and processing of personal data will be pursuant to other lawful bases.
Individual data subjects covered by KSU’s EU General Data Protection Regulation Compliance Policy will be afforded the following rights:
Note: Exercising of these rights is a guarantee to be afforded a process and not the guarantee of an outcome.
Any data subject who wishes to exercise any of the above-mentioned rights may do so by submitting a Service Request with the Office of Cybersecurity at firstname.lastname@example.org