We, the American University of Beirut – Mediterraneo (hereinafter “AUB – Mediterraneo”), take data privacy seriously and adhere to all applicable data privacy laws and regulations. It is our responsibility to ensure data has been obtained correctly, is accurate, and held in a secure manner.

Personal data relates to a living individual who can be identified directly or indirectly from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession.  We are the Data Controller (contact details below). This means we have responsibility for your personal data.

This statement explains how we will collect and use your personal data. In particular, it sets out:

1- What personal data we collect from you

2- For what purposes we collect your personal data 

3- Legal Bases for processing your personal data 

4- With whom we share your personal data 

5- Your rights 

If you have any questions, please send us an email to Yannis Anthis​. 

We pledge to be responsible when gathering your personal information and protect your privacy by: 

• Complying with our obligations under all applicable (to AUB - Mediterraneo) data privacy laws and regulations;

• Keeping personal data up to date;  

• Storing and destroying it securely;

• Collecting personal data only for specified, explicit and legitimate purposes and not exploiting it beyond these purposes;

• Not collecting or retaining excessive amounts of data; 

• Ensuring that our employees are provided the necessary training on how to be in compliance with data privacy;

• Protecting personal data from loss, misuse, unauthorized access and disclosure; and, 

• Processing personal data in a manner that ensures its security to the extent possible, using appropriate technical measures to protect personal data against unauthorized or unlawful access, as well as against accidental loss, destruction or damage (security, integrity and confidentiality).

Depending on your relationship with AUB – Mediterraneo, we require or we request certain of your personal data, which will include any one or all of the following information:

• Your personal details (First name, last name, postal and email address, telephone numbers, copy of your identity(ies), photo ID, etc.)

• Details of your education, and current and previous employments

• Your student academic achievements as well as examination scripts and results

• Information about your areas of interest 

• Preferred method of communications

• Next of kin, and emergency contact details (including full name, telephone and email address) 

• Whether you or the person on whose behalf you are submitting an application to the AUB - Mediterraneo is taking the Scholastic Aptitude Test

• Information about whether any of your family has graduated from the American University of Beirut, in Lebanon

We process your personal data for any one or more of the following purposes:  

• To process your application for admission and/or enrollment to the AUB – Mediterraneo

• For the performance of your student contract with AUB – Mediterraneo and the administration by the latter of your position as a student (including for the use of our services such as, administrative services, residential services, lecture capture, attendance monitoring, the Library, and all other services directly and indirectly necessary)

• For carrying out our role as an education and research establishment, meeting legal moral and contractual obligations;

• To register you with our electronic services and administer our systems where you have registered;

• To conduct surveys for which you have provided your consent to participate;

• To answer any queries which you may address to us by electronic or other means; 

• To communicate or notify you with news, updates and events related to the registered services;

• To enable us to review, develop and improve the services which we offer and provide you and other constituents (via mail, email, telephone or otherwise) with information about new programs, services, news and special events.; and,

• To maintain our business accounts and records. 

• For fund-raising activities; 

We will only process your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.

• Where it is necessary for our legitimate interests as an education and research establishment (or those of a third party) and your interests and fundamental rights do not override those interests.

• Where we need to comply with a legal obligation.

Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.

We may share your personal data internally with:

• Academic and/or administrative staff, student support staff, your tutor/tutors

• Finance teams, library, security staff and other members of staff if access to the data is necessary for performance of their roles

• IT services, in order to provide you with an IT account, email address, access to relevant buildings, etc.

We may share your personal data with third parties where there is a valid reasons for their receiving this information:

• Third party contractors and agents (e.g. for provision of IT support, financial transactions support and recovery)

• Third parties who conduct surveys on our behalf

• Professional or regulatory bodies, in relation to the confirmation of qualification, professional registration and conduct and the accreditation of courses. 

We may finally share your personal data with Government departments, agencies or authorities, where we have a legal obligation to provide information, e.g., with Customs and Immigration authorities or other regulatory authorities in your country of departure and/or destination in order to comply with the existing laws.

Our web site and mobile applications may contain links to other web sites. Please be aware that we are not responsible for the privacy practices of web sites or mobile applications not operated by us. We encourage you to read the privacy statements of each and every service, web site and mobile application that collects personally identifiable information. 

If, after you have given your consent, you no longer wish to receive promotional materials, you may opt-out at any time by notifying us - Email: [email protected]. 

We are required by law to retain personal data. Data may be retained for only a few days, to several months or years. 

 

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: 

• The right to request a copy of your personal data which AUB - Mediterraneo holds about you; 

• The right to request that AUB - Mediterraneo corrects any personal data if it is found to be inaccurate or out of date; 

• The right to request your personal data is erased where it is no longer necessary for AUB - Mediterraneo to retain such data as per the applicable laws and regulations; 

• The right to withdraw your consent to the processing at any time, where your consent is the legal basis for such processing; 

• The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing; 

• The right to object to the automatic or manual use of personal data, except where there is a valid reason to continue processing;  

• The right to portability of your personal data;

• The right to lodge a complaint with the Supervisory Authority, namely the Commissioner for Personal Data Protection in Cyprus. 

If we wish to use your personal data for a new purpose i.e. a purpose that is not covered by this Statement, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

We may change this Privacy Statement at any time and will notify users of any material changes by updating the statement here and by including a "NEWLY UPDATED" label with the "PRIVACY POLICY" link on the web sites governed by this statement for 30 days after any material changes are made.

To exercise all relevant rights, queries or complaints, please in the first instance, contact: 

American University of Beirut – Mediterraneo 

Neophytou Nikolaidi 65, Paphos

You can contact the  Office of the Commissioner for Personal Data Protection by: 

o Phone:  + +357 22818456 

o Email: [email protected] ​

o Iasonos 1, 1082 Nicosia, Cyprus.