ÄûÃʵ¼º½

1. Data Controller, Register person-in-charge and Contact Information

The data controller for the processing of your personal information is Aalto University, located in Finland. 

The register person-in-charge is Eeva Liinamo-Liukku
Tel.: (exchange) 09 47 001
Email: eeva.liinamo-liukku@aalto.fi

2. Data Protection Officer Contact Information

Our designated Data Protection Officer is Sirpa Syrjälä, who can be contacted at:

Aalto University, Legal Services
Otakaari 1, Espoo
PL/PB 18000, 00076 Aalto
Email: dpo@aalto.fi

3. Purpose and Legal Basis for Processing

We are processing the personal data obtained from GMAC's GradSelect Service to send newsletter(s) regarding our educational opportunities to individuals residing in EEA countries. Aalto University processes your personal data based on consent (GDPR Article 6(1)(a)). You have the right to withdraw your consent at any time.

GMAC's legal basis for processing this data is your consent provided during participation in the GradSelect Service. Link to GMAC's GradSelect Service Preferences and Consent: .

4. Categories of Personal Data

The personal data we process includes the information provided by GMAC as part of the GradSelect Data, such as contact details, demographic information, program preferences, and GMAC assessment score ranges.

The personal data processed by the university includes the following:

• Name
• Gender
• Languages Spoken
• Highest Level of Education Attained
• Graduate Management Degree Preferences
• Email Address
• Age
• Current Location
• Undergraduate Major
• Study Location Preferences
• Score Sending Destinations
• Postal Address
• Country of Citizenship
• City, State/
• Province
• Undergraduate Institution
• Planned Date of Enrollment
• Business School Journey Stage
• Telephone & Mobile Number1
• Country, Region
• Date of Graduation
• Assessment Date3
• Date of Birth
• Work Experience
• Undergraduate Grade Point Average (GPA)
• Broad Score Band3
• School / Program Commitment4
• My recommendations via mba.com
• Military Experience
• Results from the GMAC GME Motivation Survey
• Post-graduate interests
• GradSelect Elevate Engagement

5. Recipients of Personal Data

Your personal data will not be shared with third-party recipients other than as required by law. We may disclose your personal data to third parties when access to or processing of personal data is necessary (e.g., to comply with applicable legislation and/or a court order). 

6. Transfer of Personal Data

We do not intend to transfer your personal data outside the EEA. 

The data protection policy of the university is to exercise particular care if transferring personal data outside the EU and European Economic Area (EEA) to countries that do not offer the level of data protection required by the European General Data Protection Regulation (GDPR). Transfers of personal data outside the EU and EEA are done in accordance with the requirements of the GDPR.

7. Data Retention Period

We maintain GradSelect data for a maximum period of 12 months from the date it is received. After this period, your personal data will be securely deleted.

8. Your Rights

Under the GDPR, you have the right to review your information and rectify any inaccurate or erroneous personal data. In addition, with certain exceptions, you have the right to erase your data, restrict or object to its processing, and exercise your right to data portability. If the processing of personal data is based on your consent, you also have the right to withdraw your consent. If the data to be corrected or deleted are in the possession of our partner, we will ask them to act accordingly.

You have the right to lodge a complaint with a supervisory authority, the Data Protection Ombudsman, if you believe your data protection rights have been violated. You can read more at: .

You can exercise the rights described above by submitting a request in accordance with the Data Protection Regulation through our personal data portal: . 

You can find more information about your rights and how to exercise them in Aalto University's privacy notices page: Privacy notices | Aalto University.

9. Source of Personal Data

The personal data has been obtained from GMAC's GradSelect Service, which is not publicly available. 

Link to GMAC's GradSelect Service’s  and . 

10. Profiling and Automated Decision-Making

We do not perform any automated decision-making or profiling using your personal data.

11. Notification and Conditions

This statement is provided in compliance with Article 14 of the GDPR. You will be informed of any substantial changes to the processing of your data or this privacy agreement by email. 

For further information or to exercise your rights, please contact the register person-in-charge or our Data Protection Officer.