Info For:
Privacy Statement

GDPR Statement

General Data Protection Regulation (“GDPR”) Notice

This GDPR Privacy Statement provides certain required information to persons located in the European Union (“EU”), a European Economic Area (“EAA”) member state, or Switzerland. Before the Drexel collects any Personal Data, which is any information that relates to you as an identifiable individual, you are entitled under the EU General Data Protection Regulation (“GDPR”), to the information in this section of our Policy.

Admissions and Financial Aid

We collect and use various kinds of Personal Data when you apply for admission to a School, program or course offered by us, and when you seek financial aid, if available. The primary source of these data is your application. We may solicit additional data, for example, from interviewers as part of the admissions process, if applicable, or from other available sources when identifying potential candidates for admission in connection with recruiting activities.

The Personal Data collected by us, or on our behalf, during the admissions process is collected for the primary purposes of considering your candidacy for admission to the relevant School, program or course, evaluating your eligibility for financial aid, if applicable, and, if you are admitted and enroll, facilitating your education (such as by sharing Personal Data with registrars and others in order to enable your enrollment and participation in the School, program or course to which you have been admitted).

What Personal Data Do We Collect?

We collect Personal Data as part of our admissions and financial aid processes. We and our third-party vendors (including, but not limited to, application and admissions/financial aid data base vendors) may collect:

  • Contact Information
  • Demographic Information
  • Education History
  • Testing History
  • Personal Information
  • Employment History
  • Financial Information
  • Family Information
  • Payment Information
  • Sensitive Information
  • Criminal History
  • Affiliation Information
  • Analytic Information

What is the Purpose of Processing?

We process your Personal Data as part of our admissions and financial aid processes:

  • To consider your candidacy for admission and eligibility for financial aid;
  • To respond to your requests and communicate admissions and financial aid decisions;
  • To facilitate our operations relating to the admissions and financial aid process;
  • To conduct research and analytics (for example, relating to application and admissions trends);
  • To satisfy legal, regulatory and contractual obligations.

What is Our Legal Basis of Processing?

We process your Personal Data for the purposes described above on the basis of our legitimate interests (for example, providing educational offerings and conducting admissions research); to process transactions requested by you and meet our contractual obligations (for example, to process your application for admission); as necessary for compliance with a legal obligation (for example, financial aid reporting); or on the basis of your consent, where applicable.

How is My Personal Data Used if I Am Admitted?

If you are admitted to a Drexel school, program or course offered by us, your information will be shared as necessary for registration, including, as applicable, with the registrar of the school admitting you. Your Personal Data may also be shared as necessary to deliver and administer your education and related activities with other persons or entities, including Drexel departments, faculty and staff, financial aid sources, and governmental authorities. For example, your name and other contact information may be shared with a professor in whose course you enroll, in order to administer financial aid, with Drexel University Health Services to enable you to obtain treatment, or for other reasons consistent with our efforts to provide educational services to you.

Alumni and Donors

We collect and use various kinds of Personal Data about alumni, donors and prospective donors from a number of sources, including data you provide to us, for example, when you update your alumni or donor profile, connect with us on social media, complete a donation form or register to attend Drexel events. If you were a student or studied at Drexel University, some of your Personal Data are transferred from your student record into our alumni databases. We may also collect Personal Data from publicly available sources or third-party sources that support our operations. The Personal Data collected by us, or on our behalf, is collected for the primary purpose of providing you opportunities to engage with Drexel, alumni, donors, prospective donors and students through interactions, events and your gifts or donations. We may disclose your data to other Drexel affiliated entities and individuals such as alumni clubs and special interest groups) or volunteers when their work meets one of the purposes described below.

What Personal Data Do We Collect?

We and our third-party vendors may collect:

  • Contact Information
  • Demographic Information
  • Education History
  • Personal Information
  • Employment History
  • Financial Information
  • Family Information
  • Payment Information
  • Drexel Affiliations
  • Contribution History
  • Health and Dietary Information
  • Pictures

What is the Purpose of Processing?

We process your Personal Data as part of our alumni and donor outreach and services:

  • To provide you and your family opportunities to engage with Drexel, alumni and students;
  • To facilitate alumni and donor communications, events, fundraising and operations;
  • To request and process your contributions and subscriptions;
  • To communicate with you about other opportunities for giving, and to understand better your interests and how you might help support Drexel through volunteerism and philanthropy;
  • To conduct analytics to improve our alumni and donor services, analyze engagement and contribution trends, and create custom experiences;
  • To satisfy legal, regulatory and contractual obligations.

What is Our Legal Basis of Processing?

We process your Personal Data for the purposes described above on the basis of our legitimate interests (for example, requesting gifts or donations); to process transactions requested by you and meet our contractual obligations (for example, registration for events or processing of donations); as necessary for compliance with a legal obligation (for example, to provide required tax information); or on the basis of your consent, where applicable.

Educational Programs Conducted in the EEA

We conduct certain educational programs in the EEA, including executive education offerings and summer school programs, among others, and collect Personal Data as part of our administration of these offerings.

The Personal Data collected by us, or on our behalf, are collected for the primary purpose of providing educational offerings and, if applicable, evaluating qualification for certificates and credit.

What Personal Data Do We Collect?

We and our third-party vendors may collect:

  • Contact Information
  • Demographic Information
  • Education History
  • Course Assessment Data
  • Personal Information
  • Employment History
  • Health and Dietary Information
  • Pictures
  • Residential Information
  • Payment Information

What is the Purpose of Processing?

We process Personal Data relating to course offerings in the EEA:

  • To provide and administer the course or program in which you are participating, including sharing information about you with other participants, providing academic guidance and evaluating your success in the course or eligibility for a degree or certificate;
  • To provide you with services related to the course or program, including assistance with travel, residential lodging and dietary or medical needs.
  • To respond to your requests and communicate with you regarding current or future courses or programs;
  • To conduct analytics to improve our educational offerings; To satisfy legal, regulatory and contractual obligations.

What is Our Legal Basis of Processing?

We process your Personal Data for the purposes described above on the basis of our legitimate interests (for example, conducting analytics to improve program offerings); to process transactions requested by you and meet our contractual obligations (for example, providing educational programs); as necessary for compliance with a legal obligation; or on the basis of your consent, where applicable.

With Whom We Share Your Personal Data

As part of our Processing Activities, we may share certain Personal Data about you with third parties for the purposes and in the ways described in the “Personal Data We Collect” section above.

We may share your personal data with partners and service providers, such as:

  • Payment and contribution processing;
  • Customer relationship management (CRM) services;
  • Marketing and analytics;
  • Processing admissions applications;
  • Alumni and donor outreach and engagement;
  • Event registration and coordination;
  • Providing course platforms or tools that enable or enhance our offerings;
  • Course registration and administration;
  • Course evaluations and assessments;
  • Enrollment verification;
  • Research insights and analytics;
  • Research collaboration;
  • Educational operations and collaborations;
  • Performing human resources administration; and
  • System maintenance and security.

Some of these partners have access to Personal Data about you that we may not otherwise have (for example, when you sign up directly with that provider) and may share some or all these data with us.

We share your Personal Data with Third Parties based on your consent, where necessary to fulfill our contractual commitments to you, as may be necessary for legal compliance, or as may be necessary to serve our legitimate interest in the following operations:

  • Conducting our operations and administering our educational offerings;
  • Administering fellowships, grants and other programs in support of individual study and research projects;
  • Contacting you to respond to your requests or inquiries;
  • Providing you with newsletters, articles, service alerts or announcements, event invitations, and other information that we believe may be of interest to you;
  • Requesting gifts and donations;
  • At your request, processing and fulfilling transactions for merchandise or other Drexel products;
  • Alerting you about a safety or security announcement;
  • Conducting research, surveys and similar inquiries to help us understand trends and needs of our applicants, students and others using our websites or other services;
  • Meeting the requirements of our accreditors;
  • Disclosing directory information ;
  • Performing marketing, promotions and advertising, either directly or through third-parties. These activities may include interest-based advertising, targeted advertising and online behavioral advertising in order to increase the likelihood that the content would be of interest to you;
  • Preventing, investigating, taking action regarding or providing notice of fraud, unlawful or criminal activity, other misconduct, security or technical issues, or unauthorized access to or use of Personal Data, our website or data systems; or
  • Responding to subpoenas, court orders, or other legal process; enforcing our agreements; protecting the health, safety, rights or property of you, us or others; and meeting legal obligations.

Data Retention

We will retain your Personal Data for as long as is necessary for the purposes set out in these Disclosures unless a longer period is required under applicable law, or is needed to resolve disputes or protect our legal rights or otherwise to comply with legal obligations.

Where we are processing Personal Data based on our legitimate interests, we generally will retain the data for a reasonable period of time based on the particular interest, taking into account the fundamental interests and the rights and freedoms of the data subjects.

Where we are processing Personal Data based on your consent, we generally will retain the information for the period of time necessary to carry out the processing activities to which you consented, subject to your right, under certain circumstances, to have certain of your Personal Data erased (see “Your Rights” below).

Where we are processing Personal Data based on contract, we generally will retain the information for the duration of the contract plus some additional limited period of time that is necessary to comply with law or that represents the statute of limitations for legal claims that could arise from the contractual relationship.

Where we are processing Personal Data based on the public interest, we generally retain the information for the period of time that continues to serve that underlying interest.

What Safeguards Are in Place to Protect Your Personal Information

We are concerned with protecting your privacy and information. Drexel provides reasonable technical, administrative and physical controls to secure the confidentiality, integrity and availability of personal information. If you have any questions about security on the Drexel website, you may contact us at [insert contact]

The Transfer of Your Personal Information Outside the EEA

Drexel may transfer your Personal Data between Drexel Entities and/or to the third parties discussed above. We may transfer your Personal Data outside the EEA relying on appropriate or suitable safeguards or specific derogations recognized under data protection laws, including the GDPR.

The European Commission has adopted standard data protection clauses, which provide safeguards for Personal Data transferred outside of the EEA. We may use Standard Contractual Clauses when transferring Personal Data from a country in the EEA to a country outside the EEA. If your Personal Data are affected, you can request a copy of our Standard Contractual Clauses by contacting us as set forth in the Contact Us section below.

Your Rights Under the GDPR with Regard to your Personal Information

Under the General Information Protection Regulation (GDPR), EU based students, applicants, employees, alumni and research subjects have the right to:

  • Request from us access to Personal Information we store about you.
  • Request a portable copy of the Personal Information we store about you.
  • Amend (or rectify) this information.
  • Restrict our processing of the Personal Information.
  • Erase the information or to receive a copy of the information in a structured, commonly used and machine-readable format (information portability).

If you wish to invoke a right under the GDPR, you may contact us at:

Privacy Officer

Email: gdpr@drexel.edu or privacy@drexel.edu
Phone: 215.359.5598

Please use the subject line “GDPR query” in the subject line. Your email should include a description, sufficiently detailed, the GDPR right with which you seek assistance. We may need to contact you for further information, and reserve the right to charge a fee for certain requests. We will notify you if your request has been granted, declined or if exemptions apply

If you have provided consent for the processing of your information you have the right (in certain circumstances) to withdraw that consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn.

You have the right to lodge a complaint to the Information Commissioner’s Office (ICO) if you believe that we have not complied with the requirements of the GDPR with regard to your Personal Information.

Contact Us

If you have any concerns as to how your information is processed you can contact:

Privacy Officer

Email: gdpr@drexel.edu or privacy@drexel.edu
Phone: 215.359.5598