Data protection on DreamApply Knowledge Base

Data collection basics

Mon, 01 Jan 0001 00:00:00 +0000

During the admission process, DreamApply collects different types of data at different stages. To ensure clarity and trust, it is important to understand:

What types of data DreamApply collects
Who is responsible for managing this data
What options applicants and institutions have to handle this data

Roles and responsibilities

In DreamApply, data collection responsibilities are divided between the platform and an institution:

DreamApply acts as a data processor. It operates the admission management system, delivers authentication, account management and application processing functions and tools.
An institution acts as a data controller. It decides what applicant data is collected during the admission process, defines how this data is used and how long it is retained.

In short, DreamApply provides the platform, while the institution decides the scope and purpose of data use.

Recover data

Mon, 01 Jan 0001 00:00:00 +0000

When an Administrator confirms a request to delete an account or purge application data, DreamApply flags that data for deletion. The flagged data is permanently deleted within 24 hours during an overnight cleanup process.

Before the cleanup process begins, Administrators can recover flagged data. Restoring the data immediately reactivates all associated resources and information and makes it available in the system as if no deletion request has been submitted.

Before you begin

To recover applicant data, your account must have the Superuser role or the data-protection permission.

Collect applicant consents

Mon, 01 Jan 0001 00:00:00 +0000

To meet regulatory, legal and institutional requirements, institutions can define and manage applicant consents in DreamApply. Applicant consents are used to fulfil obligations related to the processing of personal data, including:

General Data Protection Regulation (GDPR)
ePrivacy regulations
National legislation
Internal institutional rules

Applicant consents are displayed as check boxes on the registration page. They guarantee that applicants are clearly informed how their data is used and have the opportunity to accept or reject specific terms and conditions.