The American University of Beirut takes data privacy seriously and adheres to applicable data privacy laws and regulations. It is the responsibility of each member of the AUB community to ensure that personal data has been obtained, used, and held appropriately.
This statement sets out the framework of data privacy at AUB and states the responsibilities of members of the community.
I. What is Personal Information
Personal Information is any information that can be used to identify, whether directly or indirectly, an individual (referred to as data subject), such as their name, date of birth, email address, phone number, picture, voice, or video recording, etc.).
II. When Can Personal Information Be Lawfully Held and Processed
What are the lawful bases for AUB to process personal data:
1. Consent: the individual has given clear consent to process their personal data for operating AUB's regular business.
2. Contract: the processing is necessary for the performance of a contract entered into between AUB and the individual.
3. Legal obligation: the processing is necessary for AUB to comply with the law (not including contractual obligations).
4. Vital interests: the processing is necessary for AUB to protect someone's life.
5. Public task: the processing is necessary for AUB to perform a task in the public interest or for official functions, and the task or function has a clear basis in law.
6. Legitimate interests: the processing is necessary for AUB's legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual's personal data which overrides those legitimate interests.
III. What are Data Subjects Rights
Data subjects have the below rights:
- The right to request a copy of their personal data held by AUB.
- The right to request the correction of their personal data if it is found to be inaccurate or out of date.
- The right to request to erase their personal data where it is no longer necessary for AUB to retain.
- The right to withdraw their consent to the processing at any time.
- The right, where there is a dispute in relation to the accuracy or processing of their personal data, to request a restriction is placed on further processing.
- The right to object to the automatic or manual use of their personal data, except where there is a valid reason to continue processing.
- The right to lodge a complaint with the appropriate supervisory authority.
IV. What are Students Rights Under FERPA
AUB students are subject to the Family Educational Rights and Privacy Act, better known as FERPA. Under FERPA, students have rights with respect to the management of their educational records. More Information may be found in the Notification of Rights Under FERPA.
V. Disclaimer
AUB is not responsible for the privacy practices of third-party digital platforms referred to or linked to on AUB digital platforms.
VI. Things to keep in mind
1. Personal Information may not be used for a purpose other than the initial purpose it was collected for, unless proper consent of the data subject is provided.
2. For all direct marketing and promotional activities, explicit consent of the data subject must be obtained, and an opt-out feature must be available.
3. Service providers and third-party processors hired to process personal information on behalf of AUB must meet and adhere to strict data protection standards and must sign a Personal Data Processing Agreement.
VII. Contacts
For inquiries related to the collection, storage and processing of personal data, please send an email to <dpo@aub.edu.lb > for AUB Campus data privacy related matters, and to <dpo_aubmc@aub.edu.lb> for AUBMC data privacy related matters.