Processing and Sharing Your Personal Information

Personal Information We Collect Our Use of Personal Information
Processing & Sharing Your Personal Information
Protecting Your Personal Information Cookies & Similar Technologies Your Access & Choices

We process, transfer, and share your personal information to complete any transaction, to improve our products and services, for marketing and promotional purposes, research and product development, event related activities, and to provide customized information to you regarding graduate management education. We also use personal information to provide any product or service you have requested or authorized. For example, when you register for the GMAT exam, we share your information with our test service provider to register you for the exam and for our provider to administer the exam on our behalf.

We process personal information per applicable law and with transparency and fairness. Our data processing activities are conducted:
  • with your consent; 
  • in order to fulfill our obligations to you;
  • for the legitimate purpose of operating our business including to improve and develop our products and services, for fraud prevention, for research, and improving your experiences; and/or 
  • as otherwise in compliance with law. 

GMAC has obtained authorization from various data protection authorities throughout the world to process and transfer personal data. GMAC may also use model contracts with its service providers to govern the processing and transfer of personal data. Our service providers may also be certified under Privacy Shield or other frameworks for the processing and transfer of personal information.

We also process, transfer, and share your personal information:
  • to protect and maintain the security of:
    • our tests and test takers;
    • our products and services and their users;
    • our GMAC member institutions; and
    • organizations that receive score reports and other information (such as GMAT score recipients);
  • to prevent or detect fraud or other unlawful activity;
  • when compelled by law to do so (such as by court order, investigation, or subpoena) or as required by legal proceedings (including defense of legal claims);
  • as part of a corporate transaction, such as a merger, sale of assets, or an equity investment that result in a new subsidiary or corporate affiliate of GMAC®; or
  • for the purposes described in our Use of Personal Information section.

Storing of Personal Information

The personal information you provide to us will be stored in the United States, the country where the information was provided, and the country where the service is provided. The storage location depends on the product or service selected. Based upon the products or services you use, your personal information may also be transferred to another country.

We will obtain your consent, where required, for the transfer of your personal and/or sensitive information, and in cases where consent is not required for processing and transfer, we may utilize another basis. For our European Union visitors, these may include standard contractual clauses, contractual necessity or legitimate interest.

Tests

When you register to take a test, you consent to the collection, retention, use, processing, transfer, and disclosure of your personal information, test responses and scores, signature, palm vein pattern scan (where permitted by law), digital photograph and audio/video recording (where permitted by law) to GMAC, to its service providers (such as Pearson VUE), and to score report recipients you designate located in the United States or other countries. These organizations may be outside of the country where you are testing or where you reside. You understand that these countries may have different privacy protections than your home country and you agree to these conditions. The score report recipients designated by the test taker can request and receive the digital photograph of the individual, which will be sent along with the test taker's score report.

GMASS

If you consent to participate in the Graduate Management Search Service (GMASS) when you register for one of our tests or when you create an account on mba.com, your GMAT test score range and your contact details, background and career information may be provided to schools, scholarship-granting organizations, strategic partners and corporate affiliates of GMAC for their own direct marketing. For more information about the GMASS service, please visit the GMASS page.

Test Accommodations

When you submit a request for a test accommodation on the basis of a disability, GMAC may share your information with our service providers and external reviewers exclusively for the purpose of allowing GMAC to evaluate your request and with your explicit consent. Our service providers providing technical and security support may also have access to your accommodations information.

GMAC Subsidiaries, Corporate Affiliates and Strategic Partners

We also share information with GMAC controlled subsidiaries (such as the Graduate Management Global Connection UK, GMAC India Private Ltd. and GMAC HK Ltd.); as part of a corporate transaction, such as a merger, sale of assets, or an equity investment that result in a new subsidiary or corporate affiliate of GMAC; our corporate affiliates; and with strategic partner organizations that share our graduate management education-related mission or provide the tools, resources or capabilities that contribute meaningfully to the mission.

Strategic partner organizations and corporate affiliates that share our graduate management related mission may receive personal information with your consent or for legitimate business purpose such as a corporate transaction. For example: an organization that is a sponsor of an event, or with whom we co-sponsor an event, may receive your personal information to communicate with you regarding the event and provide information about their graduate management education related services. A school may host the “What Motivates You” tool on their website and you are requested to consent to their receipt of your personal information. GMASS strategic partners that have a related graduate management education purpose may provide you with information about their services.

Products and Services

When you purchase, register, or create an account for a product or service, you consent to the collection, retention, use, processing, transfer, and disclosure of your information to GMAC, its service providers, any recipient of information you select (any of which might be located in a country with different privacy protections than your home country), recipients otherwise required and disclosed in the Terms and Conditions of the product and/or service, and others as necessary to prevent unlawful activity or as required by law. Please see the specific Terms for the products or services that you have selected.

Interest Based Advertising

GMAC uses third party service providers to process your interest based activity information to track and help us deliver ads. See the Cookies & Similar Technologies section for more information about sharing information with advertising providers and interest based advertising.

Research

We share your personal information with our service providers that help administer our surveys and research reports and provide technical support. We might combine your information with others in an aggregated, unidentifiable form to improve our services and to market those services to third parties. For more information, visit our GMAC Research Services: Survey Participation Privacy and Confidentiality page.

Privacy Notices for Other Countries and California

Please visit the Local Privacy Requirements page to view the privacy notices for other countries and the state of California notice. For residents of the European Union, an individual has the right to request from GMAC the following: access, rectification or erasure of their personal information; to restrict the Council’s processing of that information; or to object to processing. EU residents also have the right to request data portability. The above rights are subject to applicable limitations, restrictions and limitations. In certain cases, your request may be denied based on a legitimate exception such as where we are prevented from disclosing such information based on legal requirements or fraud prevention or security concerns. See Your Access and Choices section in this privacy statement for more information. To make a request, please contact privacy@gmac.com. To contact the Council’s local representative in an EU Member State, please contact privacy@gmac.com for the contact information.