This NTU Privacy Statement (“Statement”) describes how Nanyang Technological University, its respective subsidiaries, and affiliates (collectively referred to as “NTU”, “we”, “us” or “our”) collects, uses and discloses your personal data.

NTU generally collect, use and disclose personal data that (a) that you knowingly and voluntarily provide in the course of or in connection with your relationship or via a third party who has been authorised by you to disclose your personal data to us; or (b) where collection, use and disclosure of personal data is permitted or required by the Personal Data Protection Act 2012 (“Act”) or other relevant laws. Before we collect any personal data from you, we will generally notify you of the purposes for which your personal data may be collected, used and disclosed, as well as obtain consent for the intended purposes. 

If you have any questions about this Statement or in relation to how NTU manages, protects and/or processes your personal data, please contact NTU Data Protection Officer via email at [email protected] or by mail:

Nanyang Technological University
NTU Data Protection Officer
71 Nanyang Drive #04-01
NTU Innovation Centre Singapore 638075

If you are aware of or suspect a personal data incident, you may report the incident by submitting your report to the NTU Data Protection Officer:

Depending on your relationship with NTU, the personal data which we collect from you may be used and/or disclosed for one or more of the following purposes (“Purposes”):

Students 

• Evaluating your application to be a student with us;


• Administering and managing your relationship as our student, including but not limited to candidature matters; matriculation, induction and orientation arrangements; academic matters; exchange programmes; extra-curricular or co-curricular matters; scholarships or grants, awards; counselling (including career or therapeutic counselling) welfare or student care; attendance (including at tutorials, seminars, workshops, lectures and conferences, and the monitoring of the same), fees (including handling financial information and addressing financing issues); your achievements, your degree or certification, placements, secondments or internships with external organisations, programmes or courses run by other organisations (including issuance of testimonials or reports); (collectively, the “Student Administration Matters”);


• Dealing with Student Experience activities. “Student Experience” refers to activities, (e.g. festival celebrations, graduation ceremonies, orientation and student group camps, conferences, programmes, student benefit activities or other social or cultural activities) which may be provided by NTU to enhance or enrich your life as a student with us, create networking opportunities for you, foster community spirit within the community, encourage holistic development of students both inside and outside the classroom and to assist you in planning and preparing for your life after graduation (including disclosures and communications in testimonials or communications as referees with requesting third parties);


• Liaising with other educational institutions, with referees, with government bodies (or public agencies), with medical or insurance service providers, with academic or vocational / professional bodies, all in connection with the Student Experience and Student Administration Matters;


• In respect of all of the foregoing, to the extent that the student is a minor, dealing or communicating with the parent or legal guardian of that student in respect of the foregoing purposes;


• (In respect of corporate / professional students, attending short courses, executive programmes, etc where attendance is sponsored or arranged in connection with employers or third parties) undertaking any of the above with (or including) your employer or such Student Administration or Student Experience matters;


• The purposes listed in NTU Personal Data Privacy Statement and Consent by Students (as the same may be amended from time to time) which you have agreed to and accepted as part of your enrolment with NTU.

Invited Guests / Visitors

• Establishing / evaluating (or compiling and preparing) your credentials and verifying your identity;


• Arranging and administering the visit (or any speech, lecture, event or other collaboration) including matters of attendance, accommodation, travel, registration, funding, security, immigration matters, diplomatic matters, and or other governmental or other third party matters relating to the attendance, stay, visit or activity in connection with NTU as may apply;


• Creating awareness / publicising / promoting your attendance or participation at speeches, lectures, or at collaborative events;


• Vetting underlying publications, documents or other deliverables with referees, peers or third parties required to process, qualify or certify the same;


• Processing honorariums / fees or handling financial payments and expense reimbursements (including handling financial information and addressing financing issues, grant, donor and /or sponsorship);


• (in respect of public facilities and visitor centres) arranging for ticketing or admission, issuance of passes or tokens / subject matter relating to your visit, handling site incidents.

Alumni

• Maintaining a lifelong relationship with NTU alumni and for professional learning arrangements;


• Creating awareness and promoting alumni relations; this includes informing you of promotions, benefits and services available to alumni, and organising, facilitating and notifying you of alumni events and programmes, courses or other activities, and providing you with NTU publications that are for alumni;


• Studying the profile of the alumni community for NTU’s policy making and planning;


• Involving alumni in NTU’s continual development and progress through the engagement of voluntary services and giving back to their alma mater;


• Tracking or compiling employment statistics to provide insight into alumni affairs and NTU student or educational outcome.

Job Applicants (and Contractors)

• Evaluating your application and suitability for employment in any current or prospective position with us;


• Contacting or communicating with you for the purposes of processing your employment application and other employment opportunities;


• Carrying out due diligence or employment screening activities including but not limited to reference checks in accordance with legal or regulatory obligations or risk management procedures that may be required by law or put in place by us;


• For security clearances, conducting background checks and issuing permits and access to NTU resources or work arrangements.

Research or Survey Participants

• Conducting preparatory pre-screening you as a research subject or participant or qualifications as a survey subject, and verifying your identity;


• Arranging and administering your participation in the research or survey, including following up on specific issues or findings following from the same;


• Arranging and administering (including reporting to appropriate supervisory or regulatory bodies) approvals and addressing regulatory governance or reviews or funding or grant issues in respect of the research or survey;


• Processing honorariums or fees or handling financial payments and expense reimbursements;


• Entering into, executing or administering research collaboration projects or arrangements including with third parties.

Media Requests / Creation of Collateral

(where consent has been explicitly obtained beforehand)

• Including your name and/or likeness in materials (including but not limited to print, video, audio or other media) for the purposes of promoting or publicising relevant activities, testimonials, engagement or other interactions for the benefit of NTU’s interests in NTU’s activities.

Donors / Persons Who Provide Pledges

(where consent has been explicitly obtained beforehand)

• Including your name and/or contact details and profile for further donor engagement;


• Gift processing, handling financial, quality, feedback and security issues in relation to your contributions.

General (For all Data Subjects)

• Carrying out your instructions or responding to any enquiry given by you or on your behalf;


• Contacting you or communicating with you via various modes of communication such as voice call, text message or fax message, email or postal mail for the purposes of administering and managing your relationship with us;


• Dealing with, administering and or managing your use of NTU facilities including your accommodation or travel needs, provision of IT services and recreation facilities or of campus / NTU resource;


• Arranging for, administering or executing / attending to health and safety matters (including medical treatment or care as may be applicable and associated referrals or continued / allied care) or assisting differently-abled individuals who attend or interact with NTU;


• Complying with or as required by any request or direction of any governmental authority; or responding to requests for information from any governmental authority, hospitals, embassies, public agencies, ministries, statutory boards or other similar authorities including their appointed agents, contractors or third party service providers;


• Complying with or as required by any applicable law, governmental or regulatory requirements including but not limited to the compliance with the disclosure requirement;


• Arranging, administering, or executing audits and governance reviews;


• Conducting investigations and making reports into or about: (a) breaches of any laws, rules, regulations, codes, standards or other obligations, (b) in respect of any allegations, claim or proceedings; (c) matters of academic activity or conduct and (d) Student Administration and Student Experience Matters;


• Executing business or service improvement, quality assurance reviews, surveys or research;


• Arranging, administering or executing facilities (including parking, issuance of pass cards, keys or tokens), access management, equipment procurement / issuance and associated maintenance or replacement;


• (wherever CCTV or other surveillance equipment are deployed on campus or other locations in NTU premises), for detection and prevention of crime and for security purposes and investigations;


• Engaging with third party vendors in respect of procuring goods or services incidental or necessary to the provision of services or engagement in activities with you;


• Engaging with corporate third parties, partners and supporting corporate arrangements or collaborations including but not limited to clearing corporate documents (e.g. appointments, resolutions) and financing or security matters;


• (at NTU events / lectures / seminars / conferences / workshops / classes / tutorials where pictures or video are recorded and where signage to notify the same has been placed, and unless you explicitly instruct us not to use your image) for promotional, publicity, or event reporting purposes;


• Where you are deemed by law to have consented to various purposes, these purposes will be acted on until such time as such deemed consent is withdrawn in accordance with the arrangements we have in place to assist your doing so;


• Any other purposes which NTU may inform you in writing from time to time, but for which NTU will seek your separate consent.

Your failure to supply certain personal data to us (or if we are not permitted by you to process your personal data), may/would result in us being unable to process, administer and/or manage your relationship with us. Depending on the extent by which you do not permit us to process your personal data or the extent of personal data which you do not provide to us, it may mean that we will not be able to continue the relationship with you, as we will be unable to administer the relationship. 

In order to conduct our operations more smoothly, NTU may need to disclose your personal data to third parties, whether located within or outside Singapore, for one or more of the Purposes. Such third parties include but not limited to our third party service providers, affiliates or related corporations that would be processing your personal data on NTU's behalf.

We will take steps to ensure that your personal data that is transferred or disclosed to third parties continues to receive a standard of protection that is at least comparable to that provided under the PDPA.

Except where permitted by law (and not excluding disclosures to third parties for Purposes), NTU will not disclose your personal data to any third parties without first obtaining your consent permitting us to do so or unless any such disclosure is permitted under any of the statutory exemptions under the Act.

Subject to certain exceptions in the Act, you may request to review and update your personal data currently in our possession or withdraw your consent for the collection, use and disclosure of your personal data in our possession by submitting your request to NTU Data Protection Officer via email at [email protected].

We will respond to your request as soon as reasonably possible. In general, our responses to your access or correction request will be within thirty (30) days. Should we not be able to respond within the timeline after receiving your request, we will inform you in writing by when we will be able to respond to your request. 

REQUEST FOR ACCESS. If you request to access your personal information, we will ask you to verify your identity and specify what information you wish to access. NTU will provide you with the relevant personal data within a reasonable time after the request has been made.  A fee may be charged for handling the request and you will be notified in advance of this.

REQUEST FOR CORRECTION. For a request to correct your personal data, NTU will correct your personal data as soon as practicable after verifying your identity. We will send the corrected personal data to every other organisation to which the personal data was disclosed by NTU within a year before the date the correction was made, unless that other organisation does not need the corrected personal data, or if you so consent, only to specific organisations to which the personal data was disclosed by us.   

WITHDRAWAL OF CONSENT. NTU will similarly process your request within a reasonable time after a request to withdraw consent has been made. In some cases, the request to withdraw consent may adversely impact your relationship with NTU. We will notify you in advance of any such impact. In general, we shall seek to process your request within fourteen (14) days of receiving it.

NTU will take reasonable and appropriate measures to (i) keep your personal data accurate, complete and updated; and (ii) ensure that your personal data is adequately protected and secured. Appropriate security arrangements will be put in place to prevent any unauthorised access or misuse of your personal data.

We will similarly take reasonable efforts to ensure that the personal data in our possession is destroyed or anonymised as soon as (i) the purpose for which that personal data was collected is no longer being served by the retention of such data; and (ii) retention is no longer necessary for any other legal or business purposes.

This GDPR Privacy Statement applies only if a particular circumstance or activity applicable to NTU requires the application of the GDPR to NTU and residents of the European Union only.

Generally, we process personal data on the basis of consent. Apart from consent, under the General Data Protection Regulation (“GDPR”), we may also lawfully process your personal data on one or more of the following lawful basis:

• The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;


• Process your personal data on the basis of a balance of interests to pursue our or a third party's legitimate interests. This is carried out for one or more of the Purposes set out above. Further, we may process your personal data for the legitimate interests of promoting the good of NTU and/or alumni community, and maintaining NTU's relationship with its former students (i.e. alumni) to grow the NTU spirit in its students and former students;


• Necessary for compliance with a legal obligation to which NTU is subject;


• Necessary in order to protect the vital interests of the data subject or of another natural person;


• Necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in NTU.
  

• ACCESS. You have the right to request confirmation of whether we process your personal data, a copy of the personal data we are processing about you, and other information relating to your personal data as provided for in the GDPR.


• RECTIFICATION. You have the right to have incomplete or inaccurate personal data that we process about you rectified.
  


• ERASURE. You have the right to request that we delete personal data that we process about you if one of the grounds for erasure under the GDPR applies.


• RESTRICTION OF PROCESSING. You have the right to restrict our processing of your personal data if one of the grounds for such restriction under the GDPR applies, such as where you believe such data to be inaccurate; our processing is unlawful; or that we no longer need to process such data for a particular purpose, pursuant to the full terms of the grounds as provided in the GDPR.


• DATA PORTABILITY. You have the right to obtain personal data we hold about you, in a structured, commonly used, electronic format, and to transmit such data to another data controller, if certain conditions under the GDPR are satisfied.


• OBJECTION TO PROCESSING. You have the right to object to our processing of your personal data where such personal data is being processed by us for the performance of a task carried out in the public interest, or in the exercise of official authority vested in us, or for the purposes of the legitimate interests pursued by us. Additionally, you have the right at any time to object to our processing of your personal data for direct marketing. Further, you have the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes, subject to condition(s) in the GDPR.


• WITHDRAWING CONSENT. If you have consented to our processing of your personal data, you have the right to withdraw your consent at any time, free of charge.

This section describes the information practices (and how we process your personal data when you interact with us) in connection with NTU’s websites and apps, including mobile websites and applications that are accessed and, on the site (collectively, the “Site”).

• If you are only browsing this Site or using the Search function, we do not capture data that allows us to identify you individually. While user sessions will be tracked, the users will remain anonymous.


• If you choose to submit your request via our form or send an email that contains personally identifiable data, for NTU to process or to render you a service, we may share that relevant data within NTU, or if necessary, with other Government agencies or universities, so as to serve you efficiently and effectively.


• For your convenience, when you are carrying out a transaction on our Site, we may also display to you the data that you previously supplied to NTU, other Government agencies or private organisations that have been authorised to carry out specific services on our behalf. This is intended to save you time and effort in re-keying the same data. If the pre-displayed data is out-of-date, please enter the latest data. NTU will retain your personal data only as necessary for business and legal purposes.


• To safeguard your personal data, we have put in place appropriate security technologies, policies and procedures to secure all electronic storage and transmission of personal data. Although we make every effort to secure our networks, please understand that the transmission of information via the internet is not completely secure and we cannot guarantee the security of your personal data transmitted through any online means. Therefore, you are strongly advised to take safety precautions and any transmission remains at your own risk.


• This Site may contain links to other independently managed websites within the NTU network and sites outside of "ntu.edu.sg" domain whose privacy practices may be different from ours. We are not responsible for the content and privacy practices of these other websites and encourage you to examine the privacy notices of those sites.

• To help us optimise your browsing experience and ensure the website works properly, we use cookies when you use our websites.


• If you would like to disable our cookies, you may deactivate it by adjusting your internal browser setting.

As part of our effort to ensure that we properly manage, protect and process your personal data, we may update this Statement from time to time at our absolute discretion. We encourage you to periodically check this Statement so that you will remain updated on any changes. 

This Statement applies in conjunction with any other policies, notices, contractual clauses, and consent clauses that apply in relation to the collection, use and disclosure of your personal data by us. By continuing your relationship with us and/or accessing any part of the Site, you acknowledge that you have read and understood the terms of this Statement and agreed or shall be deemed to agree to be bound by this Statement including updates or amendments.

This Statement was last updated in September 2023.