Welcome to the Waubonsee Community College website. Your privacy is important to us and we have developed the following policy to explain our online information practices and the way your information is collected and used on our site.
Personally Identifiable Information
Waubonsee will not collect personally identifiable information about you (name, address, social security number, telephone number, or email address) unless you provide it voluntarily. If you do submit personal data we may use it in the following ways: to complete a request or order; to assist us in better understanding the needs of our constituents to improve our products and services; to reply to or contact you. Waubonsee will not give away, sell, rent or market personal data to third parties. Your personal information will only be shared if we have your consent or in response to a subpoena, court order, or other legal process.
Waubonsee takes security seriously and takes reasonable precautions to identify unauthorized attempts to access, upload or change information or cause damage to our site. Unauthorized access is prohibited by federal law. We also take commercially reasonable measures to ensure that credit card transactions are secure. Any payment submitted on our website is encrypted using SSL encryption to protect your information. Users should also take measures to protect their own privacy by not sharing any account information or passwords used to access our sites. Despite the use of security precautions there is always a risk, with any internet use, that a third party may unlawfully intercept transmissions and your use of our website is at your own risk.
Please note that Waubonsee may contact you via non-secure email. Please do not include information in an email that you would not want someone else to know.
Non-personally identifiable information collected automatically and cookies
In some cases, information that is not personally identifiable may be automatically collected and/or logged. For example, information about the browser, operating system, IP address, and the domain name of sites that are linked to the Waubonsee Web site. When you view the Waubonsee Web site, some information may be stored on your computer. These “cookies” allow us to tailor a web site or advertisement to better match your interests and preferences. Personally identifiable information is not stored on cookies. With most Internet browsers, you can alter user preferences to erase cookies from your hard drive, block cookies, or have it prompt you to either accept or refuse to store the cookie. Refer to your browser instructions or help screen to learn more about these functions.
Third-party Web sites
Disclaimer for Users and Third-party sites
By using our web site you consent to the collection and use of your information as described in this policy. Waubonsee is not responsible for or liable for any defamatory, negligent, inaccurate, offensive or illegal conduct by users of this website or third-party sites. If Waubonsee has to take legal action against any user of this website for inappropriate use, content or any violation of the above, user agrees to hold harmless and indemnify Waubonsee for all costs and fees, including reasonable attorneys’ fees.
Waubonsee uses remarketing with Google Analytics to advertise online. Third-party vendors, including Google, may display our ads on sites across the Internet. Waubonsee and third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) together to inform, optimize, and serve ads based on visitors past visits to our website.
Information Technology Acceptable Usage Agreement
The Information Technology Acceptable Usage Agreement contains information regarding the use of computing resources at the college, including computers, computer systems or networks provided or operated by specific departments of the college, whether users are affiliated with the college or not, both on-campus or from remote locations.
Information can be found regarding the rights and responsibilities of users, general rules and enforcement, security and privacy, protection of confidential data, reporting loss or theft of equipment or data, email systems, commercial use, excessive or disruptive use, retention periods, network/routing infrastructure, wireless, VPN usage, and requirements when traveling overseas.
General Data Protection Regulation (GDPR) Privacy Notice
Waubonsee Community College (“Waubonsee”) is committed to respecting and protecting the privacy rights of persons in the European Union (“EU”) pursuant to the EU General Data Protection Regulation (“GDPR”). This GDPR Privacy Notice describes Waubonsee’s commitment to the privacy of persons in the EU, and supplements Waubonsee’s Privacy Statement for certain persons in the EU.
2. Does This GDPR Privacy Notice Apply to Me?
This GDPR Privacy Notice applies to you if:
- You are a “Person” or “Data Subject”—meaning a natural person, not a corporation, partnership, or other legal entity—who is currently physically present in the EU;
- It is with respect to your “Personal Information”—meaning any information relating to an identified or identifiable person—that is provided while you are physically present in the EU;
- Such Personal Information is not earlier or later provided to Waubonsee while you are outside the EU; and
- Such Personal Information is provided to Waubonsee:
- During the course of Waubonsee offering you goods or services;
- While you are associated with any of Waubonsee’s programs.
3. What Personal Information Does Waubonsee Process?
We process your Personal Information, meaning we collect, record, organize, structure, store, adapt, alter, retrieve, consult, use, disclose by transmission, disseminate, make available, align, combine, restrict, erase, or destroy your Personal Information.
A. General Categories
Depending on the specific purpose for processing Personal Information, Waubonsee may process the following general categories of Personal Information:
- Telephone numbers
- Email addresses
- Identification numbers including but not limited to social security numbers and driver’s license numbers
- Waubonsee identification numbers
- Personal identification numbers
- Demographic information, including residential information
- Education history
- Entrance exam scores
- Background check information, including criminal records
- Personal references
- Emergency contact information
- Financial information and family financial information including credit and debit-card numbers, tax information, financial aid information, and insurance and benefits information
- Transaction history
- Business information
- Passport and visa information
- Work history
- Donation history
- Insurance information
- Military service
- IP addresses
- Location information
- Device information
- Education records including but not limited to coursework, correspondence, evaluations, disciplinary complaints, and other records, and files maintained by Waubonsee as part of the educational process
- Any requests for accommodations or leave
- Medical history and treatment information
- Family medical history information
- Disability information
- Biometric and genetic information
- Purchasing activity to secure food, lodging, and other services for you
B. Special Categories
In order to fulfill certain purposes, Waubonsee may need to request special categories of Personal Information—information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic data; biometric data for the purpose of uniquely identifying a natural person; data concerning health or treatment; or data concerning a natural person’s sex life or sexual orientation.
Before Waubonsee processes your special-category Personal Information or your criminal-conviction Personal Information, if any, Waubonsee will ask for your affirmative consent unless Waubonsee has another legal basis for the processing, in which case Waubonsee will inform you of that basis. In this Notice, these special categories are referred to as Sensitive Personal Information.
4. How Does Waubonsee Receive Your Personal Information?
- From Third Parties:
Waubonsee may also receive your Personal Information from third parties. Examples include college entrance exam scores received from testing agencies, and online course registration information received from third parties that administer online courses. Waubonsee also may receive information from other individuals or institutions who provide treatment and services, from public health services, from law enforcement, and from other clinical researchers, as well as from those who process the information provided on behalf of these entities.
- From You, the Data Subject:
Waubonsee may receive your Personal Information when you visit the Waubonsee websites, apply for or attend classes or programs, apply for or take online courses, travel with Waubonsee to a location in the EU, attend events sponsored by Waubonsee in the EU, or otherwise interact with Waubonsee in the EU.
5. Who Processes Your Personal Information?
- Waubonsee Personnel:
Your Personal Information may be processed by Waubonsee trustees and employees, including faculty, financial-aid counselors, human-resources professionals, law-enforcement officers, and others, as may be necessary to carry out the purposes for processing the information and Waubonsee activities.
- Waubonsee Related Organizations:
Waubonsee may share your Personal Information with Waubonsee related organizations.
- Third Parties:
Waubonsee may share your Personal Information with third parties, such as: educational-platform providers and course partners to further the purposes for processing the information and Waubonsee activities; U.S. and foreign government entities to fulfill regulatory obligations (e.g., visa processing or public health or legal processing) and to facilitate access to funding sources (e.g., financial aid); partner institutions to facilitate study abroad activities; and vendors to provide services related to your affiliation with Waubonsee (e.g., print diplomas, arrange housing) and to improve Waubonsee outreach efforts.
Waubonsee may disclose your Personal Information to legal or governmental regulatory authorities as required by applicable law. We may also disclose your Personal Information to third parties as required by applicable law in connection with claims, disputes, or litigation, when otherwise required by applicable law, if we determine disclosure is necessary to protect the health and safety of you or us, to enforce our legal rights, or to enforce contractual commitments that you have made.
Waubonsee may share your Personal Information with third parties who complete transactions or perform services on our behalf or for your benefit, including functions related to payment and operation, legal processes, benefits assistance, and for quality control purposes.
Please note that Waubonsee may provide anonymized data developed from Personal Information to third parties, such as government entities and research collaborators, and that such anonymized data is outside the scope of this GDPR Privacy Notice.
6. How Long Does Waubonsee Keep Your Personal Information?
Waubonsee keeps your Personal Information as required by law or our policies to perform our legitimate interests, contracts, and substantial public interests.
7. What Are Your Rights as a Data Subject?
As a Data Subject pursuant to the GDPR, you have certain rights. This GDPR Privacy Notice summarizes what these rights under the GDPR involve and how you can exercise these rights. More detail about each right, including exceptions and limitations, can be found in Articles 15-21 and 77 of the GDPR.
Please note: Nothing in this GDPR Privacy Notice is intended by Waubonsee to waive sovereign immunity or any other defenses or immunities afforded by any or all U.S. federal law, Illinois state law, other applicable state law in the United States, and EU law.
The Right of Access
You have the right to request that Waubonsee confirm whether it is processing your Personal Information. If Waubonsee is processing your Personal Information, you have the right to access that Personal Information, and Waubonsee will provide you with a copy of that Personal Information unless prevented by applicable law.
The Right of Correction
You have the right to request that Waubonsee correct any inaccurate Personal Information that it maintains about you. You also have the right to request that Waubonsee complete any incomplete Personal Information that it maintains about you, which could be accomplished by incorporating a supplementary statement that you submit. If Waubonsee concurs that the Personal Information is incorrect or incomplete, Waubonsee will promptly correct or complete it.
The Right to Erasure
You have the right to request the erasure of Personal Information that Waubonsee maintains about you in certain circumstances. These circumstances are identified in Article 17 of the GDPR and include that the Personal Information is no longer necessary in relation to the purpose(s) for which it was collected.
Subject to applicable U.S., state, and EU law, and Waubonsee policies, including but not limited to its Privacy Statement, and provided that there are no overriding legitimate grounds for Waubonsee to retain the Personal Information, Waubonsee will comply with the request and will take reasonable steps to inform any third parties with whom the Personal Information was shared.
The Right to Restrict Processing of Personal Information
You have the right to request that Waubonsee restrict the processing of your Personal Information where one of the reasons identified in Article 18 of the GDPR apply. These reasons include that the Personal Information is inaccurate, the processing is unlawful, or Waubonsee no longer needs the Personal Information.
If Waubonsee grants your request to restrict processing, Waubonsee will only process that Personal Information with your consent, for the protection of the rights of another natural or legal person, for reasons of important public interest, for the establishment, exercise or defense of legal claims, or as otherwise required by applicable U.S., state, or EU law.
The Right to Data Portability
Where the basis for processing is either consent or performance of a contract between you and Waubonsee, and where the processing is carried out by automated means, you have the right to receive your Personal Information that you have provided to Waubonsee. Waubonsee will provide the Personal Information in a structured, commonly used, and machine-readable format. Where technically feasible and upon your request, Waubonsee will transmit the Personal Information directly to another entity.
The Right to Withdraw Consent
If the basis for processing your Personal Information is consent, you may revoke your consent at any time. Upon receipt of your notice withdrawing consent, and if there are no other legal grounds for the processing, Waubonsee will stop processing the Personal Information unless the processing is necessary for the establishment, exercise, or defense of legal claims. Revoking consent does not affect the lawfulness of processing that occurred before the revocation.
The Right to Object to Processing
In certain situations, you may have the right to object to processing of your Personal Information
- Public Interest or Legitimate Interests. If the basis for processing your Personal Information is public interest or legitimate interests, you have the right to object to processing the Personal Information. Waubonsee will cease processing unless it demonstrates overriding legitimate grounds for processing or the processing is necessary for the establishment, exercise, or defense of legal claims.
- Direct Marketing. If Waubonsee is using your Personal Information for direct marketing purposes such as fundraising, you have the right to object at any time, and the University will stop using your Personal Information for that purpose.
The Right to File a Complaint
You have the right to submit a complaint with an EU supervisory authority, in particular the one in the EU Member State of your habitual residence, place of work, or place of the alleged violation, if you believe that Waubonsee’s processing of your Personal Information violates the GDPR.
For more information on the process for submitting a complaint, consult the relevant EU supervisory authority: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/ index_en.htm.
8. How to Exercise Your Rights
In order to exercise any of these rights, except the right to file a complaint with an EU supervisory authority, you should submit your request to Waubonsee’s GDPR Compliance Officer by completing this form and emailing to : GDPRcompliance@waubonsee.edu
At that time, you will be asked to:
- Identify yourself
- Provide information to support that the GDPR applies to you (see Section 2, above).
- Identify the specific information or data that you are concerned about.
- State what right(s) you wish to exercise
To expedite processing your request, please identify the data-collection location (e.g., the website where your Personal Information was collected), if known.
9. How Does Waubonsee Respond to Requests for Personal Information?
In addition to the rights provided by the GDPR, you may also have rights with respect to your Personal Information pursuant to U.S. federal law, state law, or Waubonsee policy. When you submit a request to Waubonsee to exercise your rights, it will respond in accordance with existing Waubonsee policies and procedures that implement the relevant privacy law(s). These include, but are not limited to, policies pertaining to student education records and policies pertaining to certain health records that Waubonsee maintains.
10. Existence of Automated Individual Decision-Making
Waubonsee may use automated decision-making, including profiling, to help identify prospective Waubonsee supporters and its activities. The logic would take an all-factor approach to assessing a possible donor’s propensity to support Waubonsee and may result in a prospective donor being contacted to explore support opportunities.
You will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision is necessary for entering into or performing a contract or unless you explicitly consent.
11. Transfer of Personal Information outside the EU
Waubonsee is based in the U.S. and is subject to U.S. and Illinois law. Personal Information that you provide to Waubonsee will generally be hosted on U.S. servers. To the extent that Waubonsee needs to transfer your information either (a) from the EU to the U.S. or another country or (b) from the U.S. to another country, Waubonsee will do so on the basis of either (i) an “adequacy decision” by the European Commission; (ii) EU-sanctioned “appropriate safeguards” for transfer such as model clauses, a copy of which you may request, if applicable, by contacting Waubonsee as set forth in Section 9; (iii) your explicit and informed consent; or (iv) it being necessary for the performance of a contract or the implementation of pre-contractual measures with Waubonsee, in which case Waubonsee will inform you of the intent to transfer the Personal Information. Please note that the U.S. is not currently considered a safe harbor country under the GDPR.
12. How Do I Contact Waubonsee, the Data Controller?
Waubonsee is the data controller. If you have any questions about anything contained in this GDPR Privacy Notice, please contact Waubonsee’s GDPR Compliance Officer:
13. Updates to GDPR Privacy Notice
Waubonsee may update this GDPR Privacy Notice from time to time. Any changes will become effective upon posting of the revised GDPR Privacy Notice.