MLRC Data Use Terms and Data Processing Addendum

(Last edited August 4, 2023)

The Multilingual Learning Research Center (MLRC) at the University of Wisconsin-Madison is committed to respecting your right to privacy. Our goal is to provide the greatest transparency concerning the information we collect, and the control that you maintain over your information.

Personal Information We Collect and Use

We define personal information as any information that relates to an identified or identifiable individual. We collect the information that you provide directly to us.

We collect the following information when you sign up to receive MLRC information, announcements, and newsletters:

First and last name
Email address
School or organization affiliation

We collect the following information when you become an MLRC School Network Member, and when a Member School Hub User accesses the MLRC School Network Hub:

First and last names
Email addresses
School or organization affiliations
Mailing address
Phone number
Payment information
Users IDs/Passwords (credentials to access the Hub)
Hub Users’ Discussion Contributions
Any other information shared by Hub Users in the Hub

We collect the following information when you register for an MLRC event:

First and last name
Email address
School or organization affiliations
Mailing address
Phone number
Payment information

Your Rights

The MLRC is committed to facilitating the exercise of the rights granted to you by law in a timely manner. In the context of our processing activities that are subject to GDPR, you have the following rights regarding your personal information:

Access, correction and other requests: You have the right to obtain confirmation of whether we process your personal data, as well as the right to obtain information about the personal data we process about you. You also have a right to obtain a copy of this data. Additionally, and under certain circumstances, you may have the right to obtain erasure, correction, restriction and portability of your personal data.

Right to object: You have the right to object to receiving marketing materials from us by following the opt-out instructions in our marketing emails, as well as the right to object to any processing of your personal data based on your specific situation. In the latter case, we will assess your request and provide a reply in a timely manner, according to our legal obligations.
Right to withdrawal consent: For all the processing operations that are based on your consent, you have the right to withdraw your consent at any time, and we will stop those processing operations as allowable by law.

Please note that when you make requests based on these rights, if we are not certain of your identity, we may need to ask you for further personal information to be used only for the purposes of replying to your request.

Retention Period

We strive to keep personal data in our records only as long as necessary for the purposes they were collected and processed. Retention periods vary and are established considering our legitimate interests and all applicable legal requirements.

Data Transfers

When you interact with the MLRC, your personal information is transferred to the United States. The United States is not currently among the countries outside the European Union that have been deemed by the European Commission to have an adequate level of legal protections for personal information. To ensure the lawful transfers of personal information from the EU, the MLRC relies on the derogations laid out in Article 49 GDPR. In particular, we rely on your explicit consent for the transfers. However, please be aware that we provide safeguards for the information transferred, as required by the GDPR itself.

Data Sharing

The MLRC does not sell or rent your personal data. The MLRC may share your personal data with internal University of Wisconsin-Madison units (where the MLRC is housed) and external third parties in the following circumstances:

Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share your information with our third-party providers of technical support services, analytics and educator usage insights. These third parties are under contract with us and can only access, process or store your personal data in the course of performing their services for us. Our vendors and service providers are prohibited from using or sharing your personal data for any purpose other than providing their services to us and are prohibited from selling or renting your information to any party.
Legal Requirements: If required to do so by law pursuant to valid legal process, applicable regulation or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of the University of Wisconsin-Madison, (iii) act in urgent circumstances to protect the personal safety of you our users, and the public, (iv) in response for requests for public records, as applicable under the Wisconsin Public Records law, or (v) protect us against legal liability.

University of Wisconsin-Madison GDPR Supplemental Privacy Notice

The University of Wisconsin-Madison’s GDPR Supplemental Privacy Notice outlines the collection, use, and disclosure of personal data provided to UW–Madison by individuals while located in the EU and/or the EEA.

Concerns

If you have any concerns or questions about how your personal data is used or the MLRC, please contact us at mlrc@wcer.wisc.edu. We will promptly respond to your request and do our best to address your concern. If you would like to withdraw consent to the use or sharing of your personal data, please contact gdpr-program@wisc.edu to request that your personal data be deleted. If you believe we have not been able to deal with your concern appropriately, you have a right to complain to your local data protection authority, as granted by Article 77 of the GDPR. You also have the right to submit a complaint in the Member State of your residence, place of work or of an alleged infringement of the GDPR.