How Is Keystone Academic Solutions Preparing For GDPR?
Keystone is fully compliant with GDPR as of May 25, 2018.
What is GDPR?
GDPR is the new EU law that dictates the use and processing of the personal data of individuals. You can read more about it here.
Who does GDPR apply to?
GDPR applies to you if your institution processes personal data of anyone located in the EU or EEA.
When should you be ready for GDPR?
You must be compliant with GDPR by May 25, 2018.
Here Is An Overview Of The Processes We Have Implemented To Ensure GDPR Compliance
Right of rectification
Students can rectify their personal information at any time by contacting us directly or by accessing their account in StudentsHub.
Right to be forgotten
Students can, on request, have their personal information removed at any time. We will complete their request within 30 days.
Right to portability
Students can, on request, have their personal information transferred to a third party or another controller
Right to object
Students can, on request, unsubscribe at any time to any specific use of their personal data, including the receipt of information about specific programs, or newsletters about relevant programs and other pertinent information.
Right of access
Important information for schools about Keystone's GDPR compliance
- As of May 25, 2018, the contact forms on our websites will only provide you with consent to contact students with information about the specific program they inquired about on our websites. If you would like to contact these students for any other purpose (information about other programs, news, events etc.), you are required to ask them for that consent in your first communication with them. It is also possible to add this consent to your contact forms on our websites. Please ask your account manager for details.
- For all students who contacted you from one of our websites prior to May 25, 2018, you are also required to send them an email asking them to reconfirm their consent for any other purpose beyond communication about the specific program they inquired about on our websites. Be sure to be specific about which type of emails you will send them (e.g. marketing, newsletters etc.) and through which contact method (e.g. email, phone, SMS).
- It is not necessary for you to delete all student contacts you received from our websites before May 25, 2018. You already have consent to contact the students about the specific program they inquired about, but you are required to ask for additional consent for other specific purposes, such as newsletters and marketing information.