DATA PRIVACYNOTICE APPLICANTS, STUDENTS AND ALUMNI

WELCOME

With thisinformation we would like to explain to you how and for which purposes we useyour personal data in connection with your studies at RIT Croatia and whichrights and options you have in this respect. 

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

RIT Croatia, Don FranaBulića 6, 20000 Dubrovnik, will be the primary responsible controller for yourpersonal data. In addition, other RIT Global entities may control your personaldata to the extent we are required or permitted by law to share your personaldata with them for the purposes described below. 

FOR WHICH PURPOSES DO WE USE YOUR PERSONAL DATA?

We will process your personal data as required in connection with yourstudies at RIT Croatia, in particular for the following purposes:

Applicants:

• Informing you about studies at RIT Croatia, student life,enrollment process, brochures and other promotional materials by usingtelephone, post and electronically (SMS, email, Viber, Whatsapp, Social Media,etc).
• Advising you about Scholarship andFinancial Aid opportunities  Administering your application to RIT Croatia andassigning you your University ID number  Assessing your eligibility to applyfor studies with RIT Croatia and complying with relevant laws and regulations set by the Ministry ofHigher Education and Sports.
•  Security purposes, including ensuring integrity and security ofand controlling access to our premises, secured websites and applicationswebsites Monitoring and assessing compliance with our policies and standards

Students:

•  General student administration, including course schedules,course assignment, grade
• processing and otherdiploma related activities  Advising you about Scholarship and Financial Aidopportunities  Advising you about Study Abroad and Erasmus opportunities Contacting you about your outstanding dues or overpayments
•  Career planning and development, cooperative education employmentopportunities, guidance for employment opportunities, communication with youremployers to ensure proper grading
• Academic advising to ensure proper academic guidance during yourstudies at RIT Croatia
• Advising you and your families about upcoming college events,student life, Study Abroad/Erasmus opportunities (direct communication, email,social media, and via printed newsletter)
• Any potential Academic or Disciplinary Actions hearings and cases
• Security purposes, including ensuring integrity and security ofand controlling access to our premises, IT and communication systems, platformsand secured websites and applications websites and other systems or facilities(including monitoring by camera or other means of surveillance), investigating,preventing and detecting security threats, fraud, theft or other criminal ormalicious activities
• Legal documentationpurposes, to ensure compliance with legal documentation and document retentionobligations (such as archive and record keeping obligations)  Monitoring andassessing compliance with our policies and standards

Alumni:

• General alumni networking database administration, includinggathering your contact info, work place data andadditional education information  Advising you about further educationopportunities at RIT Croatia  Advising you about career opportunities, careerplanning and development  Advising you about Scholarship and Financial Aidopportunities  Contacting you about your outstanding dues or overpayments Advising you about benefits programs and other activities that are essentialfor Alumni

Association functioning

• Security purposes, including ensuring integrity and security ofand controlling access to our premises, IT and communication systems, platformsand secured websites and applications websites and other systems or facilities(including monitoring by camera or other means of surveillance), investigating,preventing and detecting security threats, fraud, theft or other criminal ormalicious activities
•  Legal documentationpurposes, to ensure compliance with legal documentation and document retentionobligations (such as archive and record keeping obligations)  Monitoring andassessing compliance with our policies and standards

The legal bases forprocessing of your personal data are described in Article 6 of the EuropeanData Protection Regulation. Based on this, the processing is either necessaryfor obtaining diploma transcripts due to compliance with our legal obligations,or necessary for purposes of our legitimate interest, always provided that suchinterests are not overridden by your interests or fundamental rights andfreedoms. In addition, the processing may be based on your consent where youhave expressly given that to us.

WHICH PERSONAL DATA DO WE COLLECT?

Unless otherwise agreed with you, we will collect only personal datawhich are required in connection with our business relationship for the abovepurposes. This typically includes the following categories of data:

• Personal details, such as name, address, date of birth, emergencycontact details, gender, country of residence, citizenship, national healthinsurance number, OIB and tax related details if necessary
• Information about your high school studies and previous collegerecords including grades and information regarding any disciplinary processes
• Degree continuation related information processed in connectionwith your enrollment or voluntarily provided by you, such as alternate emailaddresses, information about your personal and professional life, etc.
• Identification documentation, such as copies of your passport,driving license, national or work ID card, or other documentation required bylaw (which may include photographs of your face)
• Professional details where applicable or necessary to aid in yourcareer development, such as your work contact details, position and careerdata, CV, details of your qualifications, relevant experience and skills
• Data relating to accessto and use of our systems, facilities and premises including data generatedthrough monitoring by camera or other means of surveillance  Data relating toany travel done for RIT Croatia purposes that is considered business travel

HOW DO WE COLLECT PERSONAL DATA?

We will collect your personal data primarily directly from you throughdirect communication. However, some data may also be collected from yourapplication though state college enrollment portals (postani-student.hr orsimilar) or later trough online portals and social media (Facebook, Instagram,LinkedIN, etc).

HOW DO WE PROTECT YOUR PERSONAL DATA?

We maintain physical, electronic and procedural safeguards inaccordance with data protection requirements to protect your personal data fromunauthorized access or intrusion. These safeguards include implementingspecific technologies and procedures designed to protect your privacy, such assecure filing cabinets, servers, firewalls and SSL encryption. We will at alltimes strictly comply with applicable laws and regulations regarding theconfidentiality and security of personal data.

WITH WHOM WILL WE SHARE YOUR PERSONAL DATA?

We may share yourpersonal data with:

• Our affiliates within RIT Global Group if and to the extentrequired for the business purposes and legally permitted. In such cases, theseentities will then use the Personal Data for the same purposes and under thesame conditions as outlined in this Data Privacy Notice. RIT Global Groupconsists of: RIT Rochester NY, USA; Global Delivery Corporation, Rochester, NY,USA
• Third parties who process your personal data on their own behalfbut in connection with a service provided to us due to legal/regulatory grounds(such as, higher education regulatory bodies, workplace safety regulators,external auditors other governmental authorities).
• Service providers (so called data processors) within or outsideof RIT Croatia, domestically or abroad (e.g. webmasters, HR and financedatabase providers, student database providers, workplace safety advisors,cloud providers) instructed by to process personal data for the Businesspurposes on our behalf and in accordance with our instructions only. RITCroatia will retain control over and will remain fully responsible for yourpersonal data and will use appropriate safeguards as required by applicable lawto ensure the integrity and security of your personal data when engaging suchservice providers.
• Public or governmental bodies such as regulatory (pension funds,health insurance providers, tax authorities) or enforcement authorities,attorneys or courts where we are required to do so by applicable law orregulation or at their request if legally permitted and necessary to complywith a legal obligation or for the establishment, exercise or defense of legalclaims.
• Otherwise, we will only disclose your personal data when youdirect or give us permission, when we are required by applicable law orregulations or judicial or official request to do so, or when we suspectfraudulent or criminal activities.

WHERE DO WE PROCESS YOUR PERSONAL DATA?

RIT Croatia is part of the RIT's Global DeliveryCorporation. In the course of our business activities, we may transfer yourpersonal data also to recipients in countries outside of the European EconomicArea ("third countries”), in which applicable laws do not offer the same levelof data protection as the laws of your home country. When doing so we willcomply with applicable data protection requirements and take appropriatesafeguards to ensure the security and integrity of your personal data, inparticular by entering into the EU Standard Contractual Clauses. You maycontact us anytime using the contact details below if you would like furtherinformation on the above.

 
YOUR DATA PROTECTION RIGHTS

Subject to certain legalconditions, you may request access to, rectification, erasure or restriction ofprocessing of your personal data. You may also object to processing or requestdata portability. In particular, you have the right to request a copy of thepersonal data that we hold about you. Please refer to Articles 15-22 of the EUGeneral Data Protection Regulation for details on your data protection rights.

For any of the above requests, please send a description of yourpersonal data concerned stating your name, your date of birth and your place ofbirth as proof of identity to the contact details below. We may requireadditional proof of identity to protect your personal data against unauthorizedaccess. We will carefully consider your request and may discuss with you how itcan best be fulfilled.

If you have given us yourconsent for the processing of your personal data you can withdraw the consentat any time with future effect, i.e. the withdrawal of the consent does notaffect the lawfulness of processing based on the consent before its withdrawal.In case consent is withdrawn, we may only further process the personal datawhere there is another legal ground for the processing.

If you have any concerns about how your personal data is handled by usor wish to raise a complaint, you can contact us at the contact details belowto have the matter investigated. If you are not satisfied with our response orbelieve we are processing your personal data not in accordance with the law youcan complain to the competent data protection supervisory authority in yourcountry.

ARE YOU REQUIRED TO PROVIDE PERSONAL DATA? 

As a general principle, you will provide us with your personal dataentirely voluntary. However, in certain circumstances we are required tocollect certain personal data for legal purposes, for example because thispersonal data is required to be able to issue you a diploma, or provideevidence of legally required trainings or qualifications. In these cases, ifyou do not provide us with your personal information, we may be unable toproperly administer your enrollment, assign certain tasks to you or permit youto participate in certain activities or services offered in connection withyour studies at RIT Croatia.

HOW LONG DO WE STORE PERSONAL DATA?

Your personal data will be deletedwhen it is no longer reasonably required for the business purposes or youwithdraw your consent (where applicable) and we are not legally required orotherwise permitted to continue storing such data. Please refer to our dataretention policies for further details.

UPDATES OF THIS DATA PRIVACY INFORMATION

This Data Privacy Noticewas last updated in May 2018. We reserve the right to update and change thisData Protection Notice from time to time in order to reflect and changes to theway in which we use your personal data or changing legal requirements. Anyamended information to Data Privacy Notice will apply from the date it isposted on RIT Croatia website or otherwise made available to you. 

HOW TO GET IN TOUCH WITH US

If you have any questionsregarding your rights or if you have any specific requests relating to yourpersonal data, please contact us at:

DataProtection Officer: dpo@croatia.rit.edu