This privacy notice also provides mandatory information as required under Articles 13 and 14 of the European General Data Protection Regulation (GDPR) regarding the transparency of personal data processing for anyone residing or browsing in an European Union country (“EU”). As a potential EU data subject, you may have rights under the GDPR. AAUP will always fully respect your rights regarding the processing of your personal data. These are:                            
   • The right to be informed; this means anyone processing your personal data must make clear what they are processing, why, and who else the data may be passed to.                                        
   • The right of access; this is your right to see what data is held about you by a person, public authority, agency or other body which processes personal data.                                                        
   • The right to rectification; the right to have your data corrected or amended if what is held is incorrect in some way.                                              
   • The right to erasure; under certain circumstances you can ask for your personal data to be deleted. This is also called ‘the Right to be Forgotten.’ This would apply if the personal data is no longer required for the purposes it was collected for, or your consent for the processing of that data has been withdrawn, or the personal data has been unlawfully processed.                                                                    
   • The right to restrict processing; this gives the potential EU data subject the right to ask for a temporary halt to processing of personal data, such as in the case where a dispute or legal case has to be concluded, or the data is being corrected.                                                              
   • The right to data portability; a potential EU data subject has the right to ask for any data supplied directly to a person, public authority, agency or other body by him or her, to be provided in a structured, commonly used, and machine-readable format.                                    
   • The right to object; the potential EU data subject has the right to object to further processing of their data which is inconsistent with the primary purpose for which it was collected, including profiling, automation, and direct marketing.                                                        
   • Rights in relation to automated decision making and profiling; potential EU data subjects have the right not to be subject to a decision based solely on automated processing.