Student Privacy Notice for Persons in the European Union

General Data Protection Regulation (GDPR)

Introduction

This Privacy Statement and Request for Consent outlines the data practices of Kansas State University ("K-State", "We", or "Us"), a United States-based educational institution, regarding information relating to you, your computer, or your device ("Personal Information").

K-State processes Personal Information submitted by individuals through our electronic platforms (e.g., KSIS), as well as via the K-State website (www.k-state.edu), during the admission process or as part of your academic experience.

By submitting information through the Site, YOU CONSENT TO K-STATE’S PROCESSING OF YOUR PERSONAL INFORMATION.

This notice addresses the processing of information submitted directly by students (including prospective students and current students) via K-State’s online platforms. It does not cover:

• Automatically collected information

• Information submitted via phone, fax, mail, or in-person

Questions about this notice or your data rights may be directed to: gdpr@ksu.edu

Collection of Personal Information

• A. Information You Voluntarily Submit

  You may be asked to provide personal information to participate in specific services or features, such as registration or academic processes. Information collected may include:

  • Name

  • Mailing and email addresses

  • Phone numbers

  • Sex and marital status

  • Social Security and Tax Identification numbers

  • Date/place of birth

  • Race/ethnicity

  • Military or veteran status

  • Disability status

  • Passport and international travel information

  • Citizenship/visa status and history

  • Educational background (transcripts, majors, degrees)

  • Standardized test records

  • Fingerprints

  • Billing/credit card information

  • Salary and financial data

  • Student disciplinary records

  • Health and treatment records

  • Photographs, video, and likeness

  This information may be combined with offline information and used according to this Privacy Statement.

• B. Sensitive Information

  Please do not submit information regarding:

  • Political opinions

  • Religious beliefs

  • Criminal background

  • Trade union membership

  If K-State specifically requests such data, it will only be processed with your express consent, in compliance with data protection laws. Unrequested sensitive data submitted may be deleted at K-State’s discretion.

• C. Information About Minors
  The Site is not intended for individuals under 16 years of age. We do not knowingly collect information from individuals in this age group. If you are under 16, contact the relevant K-State department before submitting any data.

• How We Use Your Information

  Your Personal Information is used only for the purpose for which it was collected, including:

  • Academic, housing, health, extracurricular, and study abroad records

  • Admissions processing

  • Class/event registration

  • Financial aid and payments

  • Donations and development

  • Student safety and compliance with legal obligations

  • Demographic reporting

  • Public presentations (e.g., media, website)

  We may also use non-identifiable data for any lawful purpose.

• Sharing of Your Information

  K-State does not sell your personal information. Your data may be shared with:

  • K-State departments and university-controlled affiliates

  • Kansas State University Foundation and Alumni Association

  • Vendors providing services such as payment processing or contact management

  • Government agencies to comply with laws and regulations

• Where Your Information is Processed
  Your information will be processed in the United States, regardless of your location. Data protection laws in the U.S. may be less comprehensive than those in your country of residence.

• Data Retention
  We retain Personal Information only as long as necessary for the purposes stated in this notice, or longer if required by law or university policy.

• Your Consent

  By submitting your Personal Information and signing consent forms that incorporate this Privacy Statement, you provide explicit consent to the processing of special categories of data (as applicable), including:

  • Marital status

  • Race/ethnicity

  • Disability status

  • Fingerprints

  • Health and treatment records

  You may withdraw consent at any time by emailing gdpr@ksu.edu. Withdrawal may limit K-State’s ability to provide certain services.

• Lawful Basis for Processing

  Our lawful basis for processing your information includes:

  • Performance of a contract, such as your enrollment or provision of university services

  • Compliance with legal obligations

  • Legitimate interests, such as institutional operations

  • Your consent, where required (see Section 6)

• Your Data Rights (EU Residents)

  If you reside in the European Union, you have the right to:

  • Access your Personal Information

  • Request correction of inaccurate information

  • Request deletion or restriction of processing under certain conditions

  • Lodge a complaint with your national data protection authority

  To exercise your rights, contact gdpr@ksu.edu. Requests will be processed based on our ability to confirm your identity and association with K-State. These rights are subject to legal limitations and university policy.

  For rights under U.S. educational privacy law (FERPA), visit the K-State FERPA page.

• Changes to This Statement

  K-State reserves the right to modify this Privacy Statement and Request for Consent at any time. Updates will be posted to the Office of the Registrar website under the Student tab.

  Your continued use of the Site signifies your acceptance of any revised terms.
  
  Last Updated: November 2018