91´ÎÔª

UM collects personal data, which includes personal information, which is information concerning an individual that is created by UM or provided to UM, including your name, home address, work address, telephone number and email address, as well as demographic information that is not unique to you, and personal sensitive information, which is information about an individual’s race, ethnic origin, religious or philosophical beliefs, health data, sexual orientation and criminal convictions.

Information about your computer is automatically collected, including IP address, browser, domain names, access times and referring website addresses. This information assists UM in the operation, security, and quality of our services and provides general statistics about use of UM’s website.

UM is not responsible for the privacy statements or other content on websites, applications or social media outside of UM, including links to other websites, applications or social media controlled or maintained by third parties. Please be familiar with the privacy statement of each and every service that you visit that collects your information.

UM must collect and use your information to operate its websites, applications and services, to deliver its services to you, and to inform you of other products or services that are available from UM and its affiliates. UM may contact you to conduct research on current services or potential new services that may be offered in the future. UM does not sell, rent or lease customer lists to third parties.

UM may share data with trusted third parties to assist with statistical analysis, to send you email or postal mail, to provide customer support, or to arrange for deliveries. UM may also share data with trusted third parties who have entered into a contract with UM to support its operations or delivery of services to you.

UM keeps track of the websites and webpages that you visit within UM. This data is used to deliver customized content or advertising to those whose behavior indicates that they are interested in a particular subject area.

UM will disclose your information, without notice, if required by law or with the good faith belief that such action is necessary to comply with legal process served on UM, to protect and defend the rights and/or property of UM, and to protect the personal safety of users of UM or the public, to fulfill UM contractual obligations, including delivery of services to you. Except as permitted by law, UM will not use or disclose personal sensitive information without your consent.

A “cookie” is a small data file written to your device memory or storage that contains information about your visit to a website. Tracking technologies also used are beacons, tags and scripts to collect and track information and to improve and analyze our services.

If you prefer not to receive cookies, configure your browser not to accept them at all, or to notify and require your approval before setting new cookies. This may cause some websites or webpages to malfunction, and/or you may have to provide the same information each time you visit those websites or webpages.

UM and third party vendors use cookies together to inform, optimize ads and serve ads based on a person’s past visits to UM websites, and to display content-specific advertisements to visitors that have previously visited UM websites when they go to other websites. They are also used to report visitor ad impressions other uses of the ad services, and how interactions with those ad impressions and ad services are related to visits to UM websites.

We are committed to ensuring that your personal data is secure. To prevent unauthorized access or disclosure, we have put in place appropriate technical and organizational measures to safeguard and secure the personal data we process.

UM may periodically change this Privacy Statement as necessary and encourages you to review this Privacy Statement to keep updated on how UM is protecting your information.

If you have comments about this Privacy Statement or believe that UM has not adhered to this Privacy Statement, please contact the UM Office of Legal Counsel.

The university collects “Personal Information” which includes name, email address, ID, user IDs, account numbers, photos and electronic identifiers such as IP addresses or other online identifiers and device IDs.

The university also collects “Personal Sensitive Information,” which includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. Processing of personal sensitive data requires the express informed consent of the data subject.

The university collects and processes Personal Information and Personal Sensitive Information only as necessary in the exercise of the university’s legitimate interests, functions, responsibilities as a public research higher education institution. When information is submitted to the following departments, or you use the university’s websites, applications, and other services, you agree to the collection, use, and disclosure of that information as described below. As necessary, depending on the nature of the information and the circumstances, the university will obtain consent for its collection, use and disclosure of your information.

Academic Affairs:

The data is collected and shared with internal and external parties: to analyze and improve UM’s admissions process; for outreach efforts; for processes and functions related to admission as a student; manage an account; provide academic advising; develop and deliver education programs; track academic progress; analyze and improve education programs; recruitment; retention; maintenance of accreditation; for regulatory reporting, auditing, and other related university processes and functions.

Student Affairs:

The data is collected and shared with internal and external parties: to provide and administer housing to students; manage a account; provide reasonable accommodations; provide career counseling and placement; administer conduct processes; improve student experience; 5

personalizing the student experience and interactions; marketing; for regulatory reporting, auditing and other related university processes and functions.

Graduate School:

The data is collected and shared with internal and external parties: to analyze and improve UM’s graduate admissions process; for graduate school outreach efforts; for processes and functions related to admission as a graduate student; manage an account; provide academic advising; develop and deliver graduate education programs; track academic progress; analyze and improve graduate education programs; recruitment; retention; maintenance of accreditation; for regulatory reporting, auditing and other related university processes and functions.

Athletics:

The data is collected and shared with internal and external parties: to recruit student-athletes; for processes and functions related to admissions; for processes and functions related to student- athlete eligibility; manage student-athlete academic accounts; provide academic advising; manage athlete health and training; track academic progress; for regulatory reporting, auditing and other related university processes and functions.

International Programs:

The data is collected and shared with internal and external parties to support admission of foreign students and scholars; employment of individuals from foreign countries; support study abroad, faculty exchange, and student exchange programs; enter and execute agreements with foreign higher education institutions; identify activities of interest; for regulatory reporting, auditing and other related university processes and functions.

Human Subject Research:

The data is collected and shared, consistent with laws governing human subject research, with internal and external parties to conduct studies with research subjects in the exercise of scientific, historical research, and/or statistical purposes; for regulatory reporting, auditing, and other related university processes and functions.

Human Resources:

The data is collected and shared with internal and external parties: to consider an applicant for employment; perform background checks; administer an employment contract, including payroll and benefits; provide reasonable accommodations; assess capacity to work; analyze and improve hiring practices; for regulatory reporting, auditing, and other related university processes and functions.

Administration and Finance:

The data is collected and shared with internal and external parties: to administer accounts; perform contracts; administer receipts and payments; analyze and improve cash and credit transaction processes; apply for financial aid and scholarships; for regulatory reporting, auditing and other related university processes and functions.

General Use:

The data is collected and shared with internal and external parties: to conduct general demographic and statistical research to improve university programs; identify appropriate support services or activities; enforce university and BOR policies and/or comply with applicable laws; for regulatory reporting, auditing and other related university processes and functions.

The university may use and disclose Personal Information and Personal Sensitive Information in accordance with state and federal law as follows:

Consent:

With consent to do so, unless applicable law permits such data to be collected and processed without consent.

Emergency Circumstances:

When necessary, if, in UM’s sole judgment, the individual is physically or legally incapable of providing consent and/or such disclosure is necessary to protect the health, safety, or property of any individual.

Emergency Contacts:

When necessary, because of an emergency or to complete the admissions/financial aid process.

Employment Necessity:

When necessary for administering employment or benefits, in accordance with applicable law.

Public Information:

If the individual has clearly made it public.

Archiving:

For archiving purposes in the public interest, and for historical research, and statistical purposes.

Legal Obligation:

When the disclosure is required or permitted by federal, and state laws and regulations.

Contractual Obligation:

When the disclosure is necessary for the performance of a contract to which the individual is a party or to take steps at the request of an individual prior to entering into a contract. 7

Service Providers:

When a third party has entered into a contract with the university to support the administration of university services, operations and policies.

De-Identified and Aggregate Information:

In de-identified or aggregate form without limitation.

Depending upon your location/residency, you may have the right:

1. To request access to or transfer of your information;
2. To ask about the methods in which your information is maintained and processed;
3. To request information about the organizations with whom your information may be disclosed;
4. To ask UM to delete or restrict how the university uses your information, but this right is determined by applicable law and may impact your access to and participation in the university’s activities and services;
5. If you believe your information is incorrect or incomplete, you can request corrections or updates to any inaccuracies, and for those corrections to be made if it is deemed inaccurate by UM.
6. To object to the collection, processing, retention or use of your information; and
7. To lodge a complaint with the appropriate authorities, including United States and European Union Governmental Bodies.

The 91´ÎÔª adheres to state and federal law regarding the release of student records. The Office of the Registrar maintains a list of Directory Information that may be released to the public. Students who wish to opt out of the directory may do so by completing the UM Confidentiality Request Form through the Office of the Registrar.

If you have any complaints, questions, or wish to exercise your rights regarding your data, please contact the UM Office of Legal Counsel. Please note that the university may require you to provide additional information to verify your identity and confirm that the rights you are seeking to exercise are extended to you and your data by law or regulation.

Your privacy is important to UM, and we are committed to respecting it while at the same time adhering to applicable legal obligations we have regarding or connected with your information. Please keep in mind that if you choose to request that UM erase your personal information, the University may be unable to effectively offer you certain educational services or allow you to participate in certain University activities if your information is needed to provide those services or activities.

The University may have legal obligations that require it to retain certain information for a specific period of time, which may prevent UM from honoring your request to delete your personal information. In such cases, your records will be deleted when those records are eligible for destruction under applicable law and policy. For individuals requesting that their personal information be deleted under the European Union General Data Protection Regulation (GDPR), UM has a legitimate business interest in retaining records in accordance with applicable records retention laws, and records subject to such regulations will be deleted when the required retention period lapses.

UM does not accept requests to access or delete personal data from third parties. All such requests must come from the individual whose data is involved.