MISTI is committed to supporting the privacy of students, faculty, and affiliates of MIT. This Privacy Statement explains how we handle and use the personal information we collect about MIT students, faculty, and affiliates.
What personal information we collect
While specific information may vary for particular individuals, we may collect, use, store and transfer different kinds of personal information about you, which we have grouped together as follows:
- Basic biographic/contact information – home and business addresses, phone numbers, and email addresses
- Demographic information – name, gender, birth date, photographs, and race/ethnicity (if you choose to provide)
- MISTI placement information – host name, location, and internship project
- Donor information –giving information regarding any donation which is made
- Analytical information – aggregated information related to web visitor activity and email marketing actions
How we collect personal information about you
We collect information about you from a variety of sources. The majority of the information we maintain is that which you have provided to us, either by completing a MISTI application, attending an event, communicating with us, or making a donation.
How we use your personal information
We use your personal information for a number of legitimate purposes all in support of the Institute and its mission. Specifically, we use your personal information to:
- Keep you updated with information about MISTI activities and programs
- Conduct surveys, including learning outcomes, program satisfaction and interests
- Fundraise for MISTI initiatives or programs
- Perform administrative tasks and for internal record keeping purposes
- Create and analyze aggregated (fully anonymized) information about our students, alumni, and donors for statistical research purposes in support of our educational mission
If you have concerns about any of these purposes, or how we communicate with you, please contact us at misti [at] mit.edu (misti[at]mit[dot]edu). We will always respect a request by you to stop processing your personal information (subject to our legal obligations).
When we share your personal information
To perform the functions listed above, it may be necessary to share your personal information with International host institutions and partners, as well as donors (for funded internships).
How your information is stored and secured
MIT uses risk-assessed administrative, technical and physical security measures to protect your personal information. Only authenticated MIT users/MISTI employees may access the data.
How long we keep your personal information
We maintain archival student records to provide historical program data and alumni contact information. We will maintain a record for you until such time as you tell us that you no longer wish us to keep in touch.
Rights for Individuals in the European Economic Area
You have the right in certain circumstances to (1) access your personal information; (2) to correct or erase information; (3) restrict processing; and (4) object to communications, direct marketing, or profiling. To the extent applicable, the EU’s General Data Protection Regulation provides further information about your rights. You also have the right to lodge complaints with your national or regional data protection authority.
If you are inclined to exercise these rights, we request an opportunity to discuss with you any concerns you may have. To protect the personal information we hold, we may also request further information to verify your identify when exercising these rights. Upon a request to erase information, we will maintain a core set of personal data to ensure we do not contact you inadvertently in the future, as well as any information necessary for MIT archival purposes. We may also need to retain some financial information for legal purposes, including US IRS compliance. In the event of an actual or threatened legal claim, we may retain your information for purposes of establishing, defending against or exercising our rights with respect to such claim.
By providing information directly to MIT, you consent to the transfer of your personal information outside of the European Economic Area to the United States. You understand that the current laws and regulations of the United States may not provide the same level of protection as the data and privacy laws and regulations of the EEA.
You are under no statutory or contractual obligation to provide any personal data to us (other than personal data provided in connection with your status as an MIT student).
Additional Information
We may change this Privacy Statement from time to time. If we make any significant changes in the way we treat your personal information we will make this clear on our MIT websites or by contacting you directly.
The controller for your personal information is MIT. If you are in the EU and wish to assert any of your applicable GDPR rights, please contact dataprotection [at] mit.edu (dataprotection[at]mit[dot]edu).
MIT’s EU Representative can be contacted via MIT Press London 1 Duchess Street, London W1S 6AN.
This policy was last updated in OCTOBER 2018.