Call us +47 23 22 72 50

Keystone GDPR Compliance

How is Keystone Academic Solutions preparing for GDPR?

Keystone will be fully compliant with GDPR as of May 25, 2018.

What is GDPR?
GDPR is the new EU law that dictates the use and processing of the personal data of individuals. You can read more about it here.

Who does GDPR apply to?
GDPR applies to you if your institution processes personal data of any European citizen.

When should you be ready for GDPR?
You must be compliant with GDPR by May 25, 2018.

Here is an overview of the processes we have implemented to ensure GDPR compliance

Right of rectification

Students can rectify their personal information at any time by contacting us directly or by accessing their account in StudentsHub.

Right to be forgotten

Students can, on request, have their personal information removed at any time. We will complete their request within 30 days.

Right to portability

Students can, on request, have their personal information transferred to a third party or another controller.

Right to object

Students can, on request, unsubscribe at any time to any specific use of their personal data, including the receipt of information about specific programs, or newsletters about relevant programs and other pertinent information.

Right of access

Students can, on request, gain access to the personal data we collect from them and how it is processed. Please refer to our Privacy Policy for details about the personal data we collect and what we do with it.

Important information for schools about Keystone's GDPR compliance

  • Keystone is considered a "joint-controller" of the personal data collected from our websites. This is due to the fact that when a student requests more information about your programs, we also ask them for consent to create an account in Student Centre, and to receive recommendations from us via email about other relevant schools and programs.


  • As of May 25, 2018, the contact forms on our websites will only provide you with consent to contact students with information about the specific program they inquired about on our websites. If you would like to contact these students for any other purpose (information about other programs, news, events etc.), you are required to ask them for that consent in your first communication with them. It is also possible to add this consent to your contact forms on our websites. Please ask your account manager for details.


  • For all students who contacted you from one of our websites prior to May 25, 2018, you are also required to send them an email asking them to reconfirm their consent for any other purpose beyond communication about the specific program they inquired about on our websites. Be sure to be specific about which type of emails you will send them (e.g. marketing, newsletters etc.) and through which contact method (e.g. email, phone, SMS).


  • It is not necessary for you to delete all student contacts you received from our websites before May 25, 2018. You already have consent to contact the students about the specific program they inquired about, but you are required to ask for additional consent for other specific purposes, such as newsletters and marketing information.