EU and Brazil Supplemental Privacy Notice
This supplemental privacy notice gives European Union (EU) and Brazilian residents additional information required by local law. These provisions, together with the statements in the College Board privacy notices, explain our practices for processing EU and Brazilian residents’ personal data.
Cookies: Visitors to our site from the EU and Brazil can opt out of cookies for nonessential website purposes when they first access our site. When you visit our website and with your consent, we place cookies on your computer. Please see the Cookies and Website Usage for more information regarding cookies and similar technologies.
This EU and Brazil Privacy Notice explains why we collect your personally identifiable information and how we process it. When necessary, we collect and process your information per the lawful bases described below:
- To fulfill a contract with you, for instance to provide a College Board test or a test offered by another company on behalf of College Board.
- We may provide personally identifiable information to our subcontractors (processors) and other trusted businesses or persons to process it for us, based on our written instructions and in compliance with our Privacy Statement and any other appropriate confidentiality and security measures. For example, we use service providers to help process and score our tests.
- To process a payment, to create an account on our website, and for website management.
We may also process your personally identifiable information with your consent to send you marketing email communications, enroll you in Student Search Service, or send your scores to your designated recipients.
We may also process your personally identifiable information for the purposes of our legitimate interests, if processing it doesn’t outweigh your rights and freedoms. We may process your personal information as needed to:
- Protect you, us, or others from threats (such as test security, security threats, or test fraud).
- Improve College Board tests and support College Board research initiatives.
- Enable or administer our business, such as for quality control, consolidated reporting, and customer service.
- Manage corporate transactions, such as mergers or acquisitions.
- Understand and improve our business, improve test integrity, and for research purposes.
We may also process your personally identifiable information to comply with applicable laws.
Automated Decision Making and Profiling: College Board may use automated processes in connection with scoring tests and for similar purposes, as needed to provide the test services you have requested, and for fraud prevention related to test security. All of these decisions are subject to human review. We will not make automated decisions about you that may significantly affect you, unless (a) the decision is necessary as part of a contract we have with you, (b) we have your explicit consent, or (c) we’re required by law to use the technology. You can learn more about test scoring by reading the information posted on our website about each of our tests. You can learn more about test security by reading the information posted on our website.
In some cases, we use certain elements of personal data for College Board research. For example, we may consider how certain types of test takers (such as non-native English speakers) respond to specific test questions. Our research initiatives reflect our commitment to fairness and equity in testing, helping to ensure that our tests are accessible and free from bias. They also aim to improve teaching, learning, and assessment. Our research results do not contain any identifiable data and aren’t used to target or profile individuals. Visit research.collegeboard.org to learn more.
Your Rights: As stated in this EU and Brazil Privacy Notice, you always have the right to object to our marketing communications. To opt out of emails, click the Unsubscribe link at the bottom of any email we send you. And see the sections above related to communications and marketing for information about your choices and opting out.
College Board also respects your right to access, correct, and request erasure or restriction of your personally identifiable information as required by law. This means:
- You have a right to know if College Board maintains your personally identifiable information. If we do, we’ll give you a copy (subject to the rights of others). If your information is incorrect or incomplete, you have the right to ask us to update it.
- You have the right to object to our processing of your personally identifiable information.
You may also ask us to delete or restrict your personally identifiable information, including a copy of your information related to your right to data portability.
To exercise these rights, please complete the Your Privacy Choices webform, email us at [email protected], or write to us at the U.S. address provided in this Privacy Statement and our Customer Service team will assist you (we may need to verify your identity before we can process your request). Our ability to delete personal information will be limited when we’re required to retain records, as in connection with score reports and test security processes.
If you believe we have processed your personally identifiable information in violation of applicable law, you can file a complaint with the College Board Chief Privacy Officer or a supervisory authority by emailing [email protected].
Data Retention: We’ll retain your personally identifiable information for as long as the information is needed for the purposes detailed above and for any additional period that may be required or permitted by law. You may request that we delete your personally identifiable information by emailing us at [email protected]. Unless we’re required by law to retain your information or have a legitimate interest in retaining it, we’ll delete it within 30 days of your request. If you ask us to delete your data you won’t be able to access any College Board account or test scores or send test scores to any colleges, universities, or any other third parties.