Our privacy program adheres to the following overarching principles to guide our collection, use and protection of personal information: Notice and Choice; Information Access; Information Integrity and Purpose Limitation; Information Security; Accountability and Onward Transfer; and Responding to Inquiries and Enforcement.
Personal Information We Collect
We collect information from you at various times including when you visit our websites, take a test, request disability accommodations, use our products and services, attend events, participate in research, or participate in marketing or other promotions, such as contests. We also gather information from member schools, from score report recipients, and from other affiliated organizations. We also collect information about your use of our websites to improve your experience and the experience of all our visitors. Learn more >
Our Use of Personal Information
Generally, GMAC processes your personal information through automated and other means for the following purposes:
- to administer our tests, other products, services, and events;
- to recommend graduate management educational programs that might interest you;
- to provide customized information to you regarding our products, services, events, or graduate education interests and motivations;
- to provide additional information on graduate management programs that might interest you;
- to conduct research and surveys;
- to enhance, improve, and develop our products and services;
- to operate our business;
- to communicate with you and for marketing, promotional, and advertising purposes;
- to improve our websites; and
- for the purposes described in the Processing and Sharing Your Personal Information section.
Learn more >
Processing and Sharing your Personal Information
We process, transfer, and share your personal information to complete any transaction, to improve our products and services, for marketing and promotional purposes, research and product development, event related activities, and to provide customized information to you regarding graduate management education. We also use personal information to provide any product or service you have requested or authorized. For example, when you register for the GMAT exam, we share your information with our test service provider to register you for the exam and for our provider to administer the exam on our behalf.
We also process, transfer, and share your personal information:
- to protect and maintain the security of:
- our tests and test takers;
- our products and services and their users;
- our GMAC member institutions; and
- organizations that receive score reports and other information (such as GMAT score recipients);
- to prevent or detect fraud or other unlawful activity;
- when compelled by law to do so (such as by court order, investigation, or subpoena) or as required by legal proceedings (including defense of legal claims);
- as part of a corporate transaction, such as a merger, sale of assets, or an equity investment that result in a new subsidiary or corporate affiliate of GMAC®; or
- for the purposes described in the Our Use of Personal Information section.
The personal information you provide to us will be stored in the United States, the country where the information was provided, and the country where the service is provided. The storage location depends on the product or service selected.
We process personal information per applicable law and with transparency and fairness. Our data processing activities are conducted:
- with your consent;
- in order to fulfill our obligations to you;
- for the legitimate purpose of operating our business including to improve and develop our products and services, for fraud prevention, for research, and improving your experiences; and/or
- as otherwise in compliance with law.
GMAC has obtained authorization from various data protection authorities throughout the world to process and transfer personal data. GMAC may also use model contracts with its service providers to govern the processing and transfer of personal data. Our Service Providers may also be certified under Privacy Shield or other frameworks for the processing and transfer of personal information. Learn more >
Protecting Your Personal Information
We understand that the security of your personal information is important. We use reasonable practices to protect your personal information from unauthorized use, disclosure, alteration, or destruction. We retain your information for only as long as needed to provide you with requested services, to meet our governance responsibilities, to comply with legal requirements, for business operations, and to protect against fraud and theft and as required or permitted by law. As with any website, no security controls are 100% effective; we cannot guarantee the prevention of breaches. We encourage our visitors to use common sense in protecting your id, password, and other personal information. Learn more >
Cookies and Similar Technologies; Interest Based Advertising
Your Access and Choices
GMAC is committed to providing you with access to your personal information and informing you about how to express your preferences concerning your personal information. Please keep in mind that your limiting the use and sharing of personal information may limit the services and products (or their capabilities) that we provide to you. No matter what your communication preferences are, you will receive certain transaction emails related to the services you use.
You may access your personal information maintained by GMAC® by visiting your account online or by contacting us by email, online form, or telephone. You may also receive your information in electronically portable form or request that your information be forgotten by those we have shared the information with by contacting us by email, online form, or telephone.
You may also exercise your right to object to or restrict processing by contacting us by email, online form, or telephone. Learn more >
Websites Linked to/from a GMAC Website
Our websites are linked to other websites that are not owned or controlled by GMAC. This Privacy Statement does not apply to these sites. These other websites each have their own privacy statement, which we encourage you to read.
Not Intended for Children
Our websites are not intended to be used by children. If you are under the age of 13 (or the applicable age in your country), please do not use our websites as we do not intend to collect your information.
Privacy Notices for Other Countries and California
Please visit the Local Privacy Requirements page to view the privacy notices for other countries and the state of California notice. For residents of the European Union, an individual has the right to request from GMAC the following: access, rectification or erasure of their personal information; to restrict the Council’s processing of that information; or to object to processing. EU residents also have the right to request data portability. The above rights are subject to applicable limitations, restrictions and limitations. In certain cases, your request may be denied based on a legitimate exception such as where we are prevented from disclosing such information based on legal requirements or fraud prevention or security concerns. See Your Access and Choices section in this privacy statement for more information on changing or deleting your data. To make a request, please contact firstname.lastname@example.org. To contact the Council’s local representative in an EU Member State, please contact email@example.com for the contact information.
Privacy Statement Updates
We will update this Privacy Statement periodically. A change in the effective date will indicate that this statement has been updated. If there are material changes to the statement or in how GMAC will use your personal information, we will notify you either by prominently posting a notice of such changes or by sending you a notification. We encourage you to periodically review this Statement to learn more about our information practices.
If you have questions or concerns about this Privacy Statement, the personal information you share with us, or if you wish to receive a physical copy of this Privacy Statement, please contact our Chief Privacy Official using the contact information provided below. You also have the right to contact your local Supervisory Authority or other applicable regulator to express any concerns you may have.
Contact: Chief Privacy Official
Phone: +1 (703) 668-9600
Toll-free in the U.S.: (800) 811-8042
Graduate Management Admission Council
PO Box 2969
Reston, VA 20195
Attention: Chief Privacy Official
Effective Date: May 16, 2018 | View our previous Privacy Statement