mba.com Privacy Policy

Home > Legal > Privacy Policy Highlights > mba.com Privacy Policy

Last Updated: April 3, 2012

Purpose of this Privacy Policy

Thank you for visiting mba.com, a website developed and maintained in the United States of America by the Graduate Management Admission Council® (GMAC®). This privacy policy, as part of our overall Terms and Conditions, covers personally identifiable information (“PII”) collected directly from you by GMAC or our service providers. For processing of this PII, GMAC is the "data controller" as that term is used in certain laws in the European Union.

Users of mba.com generally include:

  • mba.com registrants, including those who opt in to our services, and those who purchase products or services from the mba.com store (click here to view Special Notes for mba.com Users and Registrants)
  • Registrants for the GMAT® test, whom we refer to as “test takers” (click here to view Special Notes for GMAT Test Takers)
  • Participants in the Graduate Management Admission Search Service® (GMASS®) database who have consented to receiving optional information on graduate business schools, scholarship-granting organizations, job opportunities, and other products and services from strategic partners and corporate affiliates of GMAC that share its commitment to creating access to graduate business education (click here for information on the GMASS service)
  • Individuals who elect to participate in surveys (click here to view Special Notes for Survey Participants)

Users of mba.com consent to the processing of their data in accordance with the privacy policy in effect at the point in time their data is collected. Parts of this policy applicable to test takers are contained in the GMAT Handbook (Formerly the GMAT Information Bulletin) and must be agreed to for an individual to take the GMAT test (click here to access the Handbook or request a copy by contacting GMAT Customer Service).

Information Collection

You are not required to register with mba.com. Much of the content on the site can be accessed even if you are not a registrant. However, to access a greater variety of products and services at mba.com, we ask that you submit your personal information to GMAC®.

We clearly identify data that must be provided for us to deliver the various products and services that you may request. Depending on the product or service, we will require different types of information. You may also choose to provide additional or optional information to enhance the services provided to you. The categories of information we may collect include:

  • Basic contact information, including full name, address, telephone or facsimile number, and email address
  • Mymba.com profile settings including user and opt-in preferences (e.g., participation in the GMASS® service)
  • Background information, such as demographics and education
  • Email addresses in connection with the “Email to a Friend” feature in the mba.com school search service, which allows you to send a one-time email to a friend and does not store the email address (Note: GMAC will not send any messages beyond the initial introduction communication without first obtaining opt-in consent from those individuals)
  • Contact and shipping information, as well as purchase history, for purchases through the mba.com store, hosted by our e-commerce vendor, asknet AG.
  • Payment, contact and other registration information required to take the GMAT® test or for related services, facilitated by Pearson VUE, a business of NCS Pearson, Inc., and its payment vendor (see Special Notes for GMAT Test Takers)
  • Data used to verify and authenticate your identity during GMAT registration and at test centers, and to help the recipients of your GMAT score verify your identity (see Special Notes for GMAT Test Takers)
  • Contact and usage information for products offered by strategic partners including ITS (GMAT Focus®), Peregrine Partners (CareerLeader®), and Vantage (GMAT Write® and My Access® Professional Edition).

In addition, during your visit to mba.com, GMAC collects information regarding your use of the site (i.e., pages visited, files downloaded). This information is used to understand the habits of mba.com users and improve the products, services, and content offered.

Social media

GMAC may also collect information via social media such as Twitter and Facebook. This information may include your username, content posted, IP address, nationality, language, and other publicly available demographics. This information is used to improve the products and services that we offer in addition to identifying and resolving customer service issues.

Mobile Devices

You may also submit, or we may collect, information via mobile devices. This may occur via the mobile version of mba.com or via official GMAT apps. Depending on the mobile service used, this information may include your name, email address, location, and other site usage information similar to what we collect when you visit mba.com on non-mobile devices. This information is used to improve our products and services in addition to providing you the products and services you request.

Children’s Privacy

GMAC websites are not directed toward children, defined in the United States by the Children’s Online Privacy Protection Act (COPPA) as individuals under age 13, and we ask that children not submit any personal information to us.
If you would like to take the GMAT test and are between the ages of 13 and 18, please review “Test Takers Under Age 18” in the GMAT Handbook or contact GMAT Customer Service.

User-Submitted Content

GMAC has established a number of ways with which you may communicate with other users and with GMAC including responding to blog posts and submitting contact requests. All user communications made to or through mba.com are referred to as "User-Submitted Content." To request removal of your personal information from our blog or community forum, contact us at webmaster@gmac.com.  In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why. For information concerning our use of User-Submitted Content, please see the mba.com Terms & Conditions.

Web Site Support
Cookies

A cookie is a small text file that is placed on your computer by a Web server. Cookies contain information that can later be read by the Web server that originally placed the cookie. Like most websites, we use cookies to let us remember information about your preferences and passwords and allow you to move within our website without the need to repeatedly enter the same information. In addition, our third party e-commerce service provider asknet AG, which operates the mba.com store, may set cookies when you use the mba.com store in order to save shopping cart items.

By using mba.com, unless otherwise specified by local law or regulations, you agree to the use of cookies for the collection of information in order to provide the services you request and to improve those services.

Recent versions of popular internet browsers provide features to let you view and manage cookies. In addition, in certain countries you must accept the use of cookies in order to obtain full functionality of the web site. If you choose to block the use of cookies from our site, or do not accept the use of cookies, you may still use our site. However, choosing to do so will limit your user experience and access to functional site areas, such as areas that require login, like My Profile and online GMAT registration.

Website Log Files and Web Beacons

Like most standard website servers, during your visit, GMAC uses log files and web beacons to automatically collect information regarding your use of the site (i.e., pages visited, files downloaded), as well as system and security-related information. This information is used to understand the habits of mba.com users and improve the products, services, and content offered.

Website Log Files

Information collected by website log files includes Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks. In some cases, this information may identify you, or could be linked to your personal information. We use this information to analyze trends, administer the site, track aggregate user movement, and gather broad demographic information for aggregate use. Information collected in log files will not be shared with third parties, unless the disclosure is required for law enforcement or fraud prevention purposes.

Web Beacons

Web Beacons are small strings of code that provide a method for delivering a graphic image on a web page for the purpose of transferring data. For example, when you visit a page on this website, the code for a page being visited may be transferred to us. The information transmitted to us is used internally, and not shared with third parties, except as provided in this policy. We use this information for the following purposes:

  • Allow us to better understand the traffic patterns within our websites and, subsequently, adjust our content to better respond to your interests
  • Within the mba.com network of websites in order to count users and to recognize users by accessing cookies
  • Use this information to suggest information and resources that may be of interest to you based on your use of our website and products

Our third party tracking utility partner may employ Web Beacons on our site to track the online movements of our users.  We do not tie the information gathered by clear gifs to our customers’ personally identifiable information.

Links to Third Party Sites

Some GMAC Web pages may contain links to the websites of our strategic partners or other third parties which provide products or services relevant to your graduate management education. As such, these partners may utilize web beacons and web logs to understand your use of our web site. We do not provide your personal information to these partners so that they may identify your browsing behaviors.

Data Uses and Your Choices

Purposes of Information Collection

We use the information we collect for many purposes, including, but not limited to, those listed below. (See Special Notes for GMAT® Test Takers and Special Notes for Survey Participants.)

  • Allow you to create and update a Mymba.com profile and manage your data and preferences through this profile as well as through GMAC® Customer Service or GMAT Customer Service (for test takers) 
  • Provide the services you request from mba.com, such as saving searches of graduate business school programs, downloading software, and purchasing products and services using the mba.com store
  • Register you for the GMAT test, as well as allow you to reschedule or cancel test appointments, order additional score reports, and view past and future test appointments
  • Contact you concerning MBA programs and services, if you opt in
  • Contact you regarding participation in surveys
  • Provide you with email alerts you have requested
  • Authenticate and verify the identity of test takers including comparing certain data collected at the test centers against those of previous test takers (see Special Notes for GMAT Test Takers)
  • Maintain the integrity and quality of our products and services, customize site content to meet your specific needs, and make technical improvements to mba.com
  • Allow you to opt into additional programs and services offered by GMAC, such as the GMASS® service. Through this service, your contact and background information, along with your GMAT score range (if available), may be shared with strategic partners and corporate affiliates of GMAC that share its commitment to creating access to graduate business education. These partners may provide you with information about graduate business schools, scholarship-granting organizations, job opportunities and other products and services (click here for further information on the GMASS service).

GMAC does not sell, rent, or share your personal information to third parties for promotional or other purposes unless you have opted into communications from such third parties

Choices and Control of Your Personal Information

As an mba.com website registrant you may access your Mymba.com profile at any time to modify or delete inaccuracies in your personal information. You are responsible for the accuracy of any information you provide on this site and for maintaining the confidentiality of your personal information through keeping your user ID and password secure. We will respond to your access request within 30 days.

You may manage your opt-in preferences related to receiving information about or participating in programs and services offered by GMAC through your Mymba.com profile, GMAC Customer Service, or GMAT Customer Service (for test takers). You may elect to receive the following:

  • Information about graduate business schools, scholarship-granting organizations, job opportunities, and other products and services from strategic partners and corporate affiliates of GMAC that share its commitment to creating access to graduate business education.
  • Financial aid information
  • Information about recruiting events
  • Information about preparing to enroll in an MBA program
  • GMAT preparation and other test-related information
  • News and information about mba.com and GMAC

If you no longer desire to use mba.com, you may request to have your My mba.com profile deactivated using the contact information provided below, or by contacting GMAC Customer Service or webmaster@gmac.com. Inactive accounts will be subject to appropriate retention and archiving procedures to support the Council’s business needs and legal and integrity requirements. We will retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

When you register for the GMAT test, you will be required to agree to the terms and conditions stated in the GMAT Handbook, which include testing policies and rules, restrictions around test records and score data, and descriptions of the use and disclosure of such information and your personal information. Please review Special Notes for GMAT Test Takers regarding access, modification, rectification, data integrity, and retention of GMAT test taker information.

See Special Notes for mba.com Users and Registrants, Special Notes for GMAT Test Takers, and Special Notes for Survey Participants for further information on data use and choice.

Security of Your Personal Information

GMAC® has implemented important privacy safeguards because we are dedicated to protecting your privacy. GMAC retains personal information only to the extent necessary perform actions as described in the Purposes of Information Collection section of this policy including to:

  • Serve your needs
  • Administer the GMAT® test
  • Fulfill our GMAT program responsibilities, including maintaining the integrity of the test and detecting and preventing unlawful activity
  • Fulfill legal requirements

GMAC utilizes security safeguards incorporated within an enterprise security program. The security program is administered by appropriate GMAC officials and incorporates administrative, technical, and physical safeguards over your data and our systems to protect your information from loss, unauthorized disclosure, misuse, alteration, or destruction. The security program is designed to incorporate biannual audit and review processes and employee awareness training.

Purchases made through the mba.com store are protected by the Asknet Secure Sales Server technology (S3) and Secure Sockets Layer (SSL) encryption. The GMAT registration information you submit is sent to our authorized service provider Pearson VUE using SSL encryption. Our service providers are subject to strict confidentiality requirements.

Transborder Data Flows

GMAC® is a global organization. Users of mba.com, GMAT® test takers, and GMAC survey participants and other users of mba.com who provide their personal information, consent to their information being processed and controlled in the countries in which the data is collected, and then transmitted into and out of the United States, which is the primary processing location for GMAC and its service providers. Also, because a GMAT test takers’ score report is sent to the recipients that he or she has selected, he or she consents to his or her personal information being transmitted to such recipient, which may be located in a country that does not provide for a level of data protection that is equivalent to the one in his or her home country. Those who opt into the GMASS® service likewise agree that their personal information may be transmitted to countries that do not provide for a level of data protection that is equivalent to the one in their home country.

Data Sharing

GMAC® Key Service Providers

GMAC has a number of key service providers that fulfill services on mba.com, for the GMAT program, and for surveys. Each of the following service providers is subject to our strict confidentiality requirements: 

  • GMAT® test registration, customer service, test administration at test centers worldwide, and official test score reporting vendors: Pearson VUE, a business of NCS Pearson, Inc.
  • Test development vendors that also provide certain scoring services: ACT, Inc.
  • Vendor for the mba.com store: The mba.com store is hosted by our e-commerce service provider, asknet AG. If you purchase mba.com products or program materials, your information, including full name, address, phone number, email address, shopping cart data, and payment information, will be transmitted to or collected by asknet. For customer service purposes, asknet will provide GMAC with your full name, address, email, and the items purchased. 
  • Information technology (IT) vendors used to develop new and modify existing applications, store information, host our Web servers, and provide other IT development assistance.
  • Survey vendors used to send survey invitations and collect survey responses
GMAC Key Strategic Partners

GMAC has a number of key strategic partners that share our commitment to creating access to graduate management education. Each of the following GMAC strategic partners is subject to our strict confidentiality requirements:

  • GMASS® participants: These include business schools, corporate affiliates, and other organizations that have agreed to strict terms-of-use agreements concerning your personal information. They will only receive your information if you voluntarily opt in for the GMASS service. These organizations are required by GMAC to provide you with a chance to opt out in the event you decide you do not want to be contacted by them. Click here for further information on the GMASS service. Contact customercare@mba.com to report not being able to opt-out.
  • GMAT score recipients: Institutions that accept GMAT scores and that are selected by a test taker to receive his or her scores will receive the scores and certain personal data, including contact, background and demographic information including the digital photograph collected at the test center, if the institution has elected to receive the photograph.
  • Financial Aid Information: If you consent to receiving financial aid information in your profile, we may share some of your personal information, including contact, background and demographic information with a financial aid provider who may contact you directly.
Links to Third-Party Sites

Some GMAC Web pages may contain links to the websites of our strategic partners, as listed above or other third parties which provide products or services relevant to your graduate management education. THE PRIVACY POLICIES OF THESE THIRD-PARTY WEBSITES MAY BE DIFFERENT FROM OUR PRIVACY POLICY AND GMAC IS NOT RESPONSIBLE FOR THE PRIVACY PRACTICES OR THE CONTENT OF SUCH SITES. We recommend you carefully read the privacy policies of each site you visit.

Law Enforcement and Fraud Prevention

GMAC may provide access to personal information as required by law, to comply with requirements in a judicial or other governmental proceeding (for example, a court order, warrant or subpoena), or in instances where we determine that it is necessary in order to detect or prevent fraud or other unlawful activity.

Enforcement of this Policy

Because GMAC® is a global organization that collects and processes data within the United States and other countries, we comply with applicable domestic and international laws, including the European Union (EU) Data Protection Directive and U.S. state and federal laws.

TRUSTe Privacy Seal Program

GMAC participates in the TRUSTe Privacy Seal Program for this website, www.mba.com. GMAC has been awarded TRUSTe's Privacy Seal signifying that this privacy policy and practices have been reviewed by TRUSTe for compliance with TRUSTe's program requirements including transparency, accountability and choice regarding the collection and use of your personal information.  TRUSTe's mission, as an independent third party, is to accelerate online trust among consumers and organizations globally through its leading privacy trustmark and innovative trust solutions.  The TRUSTe program only covers information collected through this Web site www.mba.com and not through our mobile applications.

GMAC values the privacy of your personal information and will use its best efforts to resolve any problems. If you have questions or complaints regarding our privacy policy or practices, you should first contact our chief privacy official at privacy@gmac.com or through the other contact information provided below. If you are not satisfied with our response you can contact TRUSTe here.

Rights under Laws in Specific Jurisdictions

Your California Privacy Rights

If you are a resident of California, we are required to inform you that you have a right to know how information we collect from you is shared with other businesses for direct marketing purposes. We will not share any information submitted to this website with other businesses for direct marketing purposes without your explicit consent. If you have consented but later decide to opt out, we will honor your request in a timely manner. To opt out of sharing your information with other businesses for direct marketing purposes, you may manage your data and preferences through My mba.com profile, GMAC® Customer Service, GMAT® Customer Service (for test takers), or email, postal mail, or toll-free telephone, as stated in the Contact Us section below.

Data Protection for Residents of Argentina

El titular de los datos personales tiene la facultad de ejercer el derecho de acceso a los mismos en forma gratuita a intervalos no inferiores a seis meses, salvo que se acredite un interés legítimo al efecto conforme lo establecido en el artículo 14, inciso 3 de la Ley 25.326. La DIRECCION NACIONAL DE PROTECCION DE DATOS PERSONALES, órgano de Control de la Ley 25.326, tiene la atribución de atender las denuncias y reclamos que se interpongan con relación al incumplimiento de las normas sobre protección de datos personales

Data Protection for Residents of Croatia

When you provide personal data to GMAC, you agree that GMAC may collect, process and transfer your personal data, which may be disclosed by GMAC, to its data processors and vendors, as well as to authorized score recipients (if applicable) and GMASS® subscribers (if applicable), and also to the extent, if any, required by applicable regulations, or by a court of competent jurisdiction, or as necessary to detect and prevent unlawful activity. GMAC hereby informs Croatian residents that the scope of the processing is educational. Also, GMAC hereby informs Croatian residents that GMAC will not share your personal data with other businesses for direct marketing purposes without your explicit consent.

Also, you provide an explicit consent to the collection and transfer of your audio and visual data during the GMAT test through the use of a closed television circuit installed in the Local Test Center for the purposes of deterring fraud, maintaining the security and integrity of the GMAT exam, and to enable the test center personnel, Pearson VUE and GMAC to address questions or concerns of the test-takers.

You also agree to the transmission of your personal data into and out of the United States, which is the primary processing location for GMAC and its data processor, Pearson VUE. For test takers, you further agree to the transmission of your data into the countries where your selected score recipients are located and for GMASS participants, you agree to the transmission of such data to the countries where GMASS subscribers are located. You acknowledge the fact that the above countries may not provide the same level of data protection that their home country provides.

You understand that pursuant to the Croatian Act on Personal Data Protection, Section VIII (Official Gazette, No. 103/03, 118/06, 41/08), you have the right of access, modification, rectification and erasure of personal data as provided in this Privacy Policy, and for test takers, as provided in the GMAT Handbook.

To exercise these rights, you may review your My mba.com profile, or may contact GMAC Customer Service, or GMAT Customer Service (for test takers), or by email, postal mail, or telephone, as stated in the Contact Us section below. In addition, you may also contact your Local Test Center in Croatia, “Institute for the Development of Education,” with registered office in Zagreb, Preradoviceva 33/1 for any data protection issues.

From time to time, we may need to change our privacy policy or procedures to accommodate changes in applicable law, our programs or business needs, or for other reasons. If we make any material changes to our privacy policy, including changes in our use of personal information, we will post a prominent notice on the mba.com homepage and other places we deem appropriate so that you are aware of what information we collect, under what circumstances, and how we use it.

Data Protection for Residents of France

When you provide personal data to GMAC, a resident of France agrees that GMAC may collect and process your personal data, which may be disclosed by GMAC, to its data processors and vendors, as well as to authorized score recipients (if applicable) and GMASS subscribers (if applicable), and also to the extent, if any, required by applicable regulations, or by a court of competent jurisdiction, or as necessary to detect and prevent unlawful activity. You also agree to the transmission of your personal data into and out of the United States, which is the primary processing location for GMAC and its data processor, Pearson VUE. For test takers, you further agree to the transmission of your data into the countries where your selected score recipients are located and for GMASS participants, you agree to the transmission of such data to the countries where GMASS subscribers are located. Residents of France understand that you have a certain right of access, of modification, of rectification and of erasure of certain personal data as provided in this Privacy Policy. To exercise these rights, you may review your My mba.com profile, or may contact GMAC Customer Service, or GMAT Customer Service (for test takers), or by email, postal mail, or telephone, as stated in the Contact Us section below.

Data Protection for Residents of Greece

When you provide personal data to GMAC, a resident of Greece agrees that GMAC may collect and process your personal data, which for GMAT test takers includes your name, date of birth, citizenship, gender, place of residence, certain education data, your exam responses, your digital photograph and your digital signature, and in case of payment of the examination fees by electronic means, your email address, your credit card number, its expiration date and the billing address. GMAC hereby informs Greek residents that the scope of the processing is educational. 

Also, a resident of Greece provides your explicit consent to the collection of their audio and visual data during the GMAT test through the use of a closed television circuit installed in the examination centers for the purposes of deterring fraud, maintaining the security and integrity of the GMAT exam, and to enable the test center personnel, Pearson VUE and GMAC to address questions or concerns of the test-takers.

A resident of Greece agrees that your personal data may be disclosed by GMAC to its data processors and vendors as well as to authorized score recipients (if applicable) and GMASS subscribers (if applicable), and also to the extent, if any, required by applicable regulations, or by a court of competent jurisdiction, or as necessary to detect and prevent unlawful activity. 

You also agree to the transmission of your personal data into the United States, which is the primary processing location for GMAC and its data processor, Pearson VUE. For test takers, you further agree to the transmission of your data into the countries where your selected score recipients are located and, for GMASS participants, you agree to the transmission of such data to the countries where GMASS subscribers are located. Greek residents acknowledge the fact that the above countries may not provide the same level of data protection that their home country provides.

Residents of Greece understand that pursuant to Law 2472/1997 you have the right of access, of modification, of rectification and of erasure of certain personal data as provided in this Privacy Policy, and for test takers, as provided in the GMAT Handbook. To exercise these rights, individuals may review My mba.com profile, or may contact Customer Service or GMAT Customer Service (for test takers), or by email, postal mail, or telephone, as stated in the Contact Us section below.

Greek residents are hereby informed that the local representative of GMAC in Greece for data protection issues is the company “Pearson Education Hellas,” with registered offices in Athens, at 229 Syngrou Avenue, 17121 Nea Smyrni.
Changes to this Policy

From time to time, we may need to change our privacy policy or procedures to accommodate changes in applicable law, our programs or business needs, or for other reasons. If we make any material changes to our privacy policy, including changes in our use of personal information, we will post a prominent notice on the mba.com homepage and other places we deem appropriate so that you are aware of what information we collect, under what circumstances, and how we use it.

Data Protection for Residents of Hungary

When registering for the test and when providing your personal data to GMAC™ (seat: 11921 Freedom Drive, Ste. 300, Reston, VA 20190, USA) a US based data controller, you consent to the collection, processing, use and transmission of your personal data in accordance with the following terms.

Your decision to provide personal data to GMAC is voluntary pursuant to Section 3 (1) a) and Section 3(2) a) of the Act LXIII of 1992 on the Protection of Personal Data and the Disclosure of Information of Public Interest (the “Data Protection Act”). However, if you do not provide information, GMAC may not be able to accomplish the purposes outlined below.

In order to administer the GMAT™ test and other GMAC education related programs, products and services, GMAC obtains Personally Identifiable Information (sometimes referred to as “PII”) from you (“Users”). GMAC uses PII only to the extent necessary to administer the GMAT test and maintain its security and integrity; to identify Users; to provide Users with opportunities to opt in to obtain information, products and services; and to enhance the quality of these products and services; to conduct research related to those who opt in to our surveys; and to fulfill its responsibilities for other GMAC programs.

To register for the test, you need to provide GMAC with the following PII: name, address, phone number, sex, date of birth and citizenship. At the Authorized Test Centers, you also need to provide biometric information in the form of a palm vein, digital photograph and digital signature. For those who choose the option of registering for the GMAT test on-line or purchasing products or services on-line, e-mail addresses, credit card numbers, expiration dates and billing addresses are required. Individuals who elect to receive education-related information and other products and services may provide additional data, such as their educational background and plans for a graduate business education. Test sessions at the test centers are recorded by audio/video means to deter fraud so as to safeguard the integrity of the test.

You acknowledge that GMAC shares your PII with its US based data processor, NCS Pearson, Inc. (seat: 5601 Green Valley Drive, Bloomington, MN 55437, USA, hereafter „ Pearson VUE” ) and Trainer C Kft (seat: H-1033 Budapest, Szentendrei út 39-53.), both administering the GMAT test on behalf of GMAC. You acknowledge that GMAC and Pearson VUE process the data in the United States of America. Factual place of data processing is the seat of the assigned data processor Trainer C Kft, the branch of the assigned data processor Pearson VUE (2510 N Dodge St, Iowa City, IA, 52245-9555, USA), as well as the establishment of GMAC™ at 11921 Freedom Drive, Ste. 300, Reston, VA 20190, USA. GMAC also shares the data with other GMAC service providers such as its e-commerce provider, information technology contractors and research survey contractors. All such providers are subject to strict confidentiality and non-disclosure obligations. When you have opted in to the Graduate Management Admission Search Service™ (GMASS™) database, your PII is shared with GMASS subscribers, which are schools that use the GMAT test, certain scholarship organizations and certain GMAC strategic partners that share GMAC’s commitment to creating access to graduate business education. Institutions that are selected by you to receive your GMAT score will receive the score along with certain of your personal data, including contact and demographic information, and your digital photograph, if the institution has elected to receive the photograph. Other biometric data are not shared with the schools. GMAC may disclose PII as required by law or in instances where GMAC determines that it is necessary in order to detect or prevent fraud or other unlawful activity. In addition, Pearson VUE is a subscriber to the Safe Harbor Subscriber Accord, which ensures adequate protection of personal data in connection with data transfers abroad according to Section 9 (2) a) of the Data Protection Act. By registering for the test and providing your personal data, you expressly consent to the transfer of your personal data abroad outside the EU/EEA, as well as to the transfer of your personal data to Pearson VUE located in the territory of the US. You acknowledge that data transfer may include transferring the data to locations and countries outside the European Economic Area (“EEA”) where the level of the protection of privacy may not comply with the data protection standards of the country where you are domiciled. In case of transfers abroad, GMAC will take steps to ensure that service providers protect the confidentiality and security of PII, and to ensure that PII is processed only for the provision of the services outlined in the present policy and in compliance with applicable laws.

Your personal data is preserved by GMAC for no longer than it is necessary for the implementation of the purposes for which the data were collected or for which they are further controlled. A test taker may change his or her name only in certain circumstances, by calling or faxing GMAT Customer Service; name changes cannot be made online. To protect the integrity of the GMAT exam and provide you with access to your GMAT scores, scores are maintained for 10 years.  The digital palm vein pattern template, or fingerprint collected at a test center are maintained for a five years period from your most recent testing date in order to ensure the identification of the test taker during the entire validity of the exam, following the exam as well, without any doubt. Therefore, the biometric data collected by GMAC makes possible specific identification on the spot of the exam that is independent from the official identification documents in accordance with the laws applicable on the spot of the exam, and the reason of such identification is the international nature of the exam which can ensure the authenticity and integrity of the GMAC exam on an international level regardless of the state of the exam, to deter fraud and to ensure the reliability of the scores.
 
You have the right, once per year, free of charge, upon a written application, to receive information about what PII GMAC processes about you and how. You also have the right of access, modification, rectification and erasure of certain personal data as provided in this Privacy Policy, and for test takers, as provided in the GMAT Handbook. To exercise these rights, you may review your mba.com profile, or contact GMAC Customer Service or contact GMAT Customer Service (for test takers), or by email, mail, or telephone, as stated in the Contact US section. In line with the provisions of the Data Protection Act, you may also ask the rectification, or deletion of the PII, which will be honored by GMAC, unless this is otherwise provided by law.

You are entitled to object to the processing of your personal data, which objection will be investigated by GMAC within 15 days of filing your request at the latest. Should you not agree with the decision of the data controller concerning your objection, you are entitled to institute court proceedings within 30 days after receipt of the refusal of your objection in line with the pertaining provisions of the Data Protection Act. In case of the infringement of your rights as data subject, you are entitled to file court proceedings against the data controller or you may request compensation of your damages sustained as a result of an unlawful processing of your personal data or as a result of an infringement of the technical requirements of data protection.

---

Amikor Ön regisztrál a tesztre és megadja személyes adatait a GMAC™ részére (székhely: 11921 Freedom Drive., Ste. 300, Reston, VA 20190, USA), Ön hozzájárul a személyes adatai gyűjtéséhez, kezeléséhez, használatához és továbbításához az alábbi feltételek szerint.

Ön a személyes adatait a személyes adatok védelméről és a közérdekű adatok nyilvánosságáról szóló 1992. évi LXIII. törvény („Adatvédelmi Törvény”) 3. § (1) bekezdésének a) pontja és 3. § (2) bekezdésének a) pontja alapján önkéntesen szolgáltatja a GMAC részére . Amennyiben azonban Ön az adatait nem adja meg, a GMAC  nem lesz képes az alábbi célokat megvalósítani.

A GMAT™ teszt és más GMAC oktatással kapcsolatos programok, termékek és szolgáltatások lebonyolítása érdekében a GMAC személyes azonosító információkat („Személyes Adatok”) gyűjt Öntől (a „Felhasználók”). A GMAC csak olyan mértékben használja fel a Személyes Adatokat, amilyen mértékben az szükséges a GMAT teszt adminisztrációjához, az adatok biztonságának és integritásának megőrzéséhez; a Felhasználók azonosításához; termékek és szolgáltatások ajánlásához; az ilyen termékek és szolgáltatások minőségének javításához; kutatások végzéséhez olyan személyekkel, akik a felmérésekben részt kívánnak venni; és egyéb GMAC programokban vállalt kötelezettségek teljesítéséhez.

A tesztre való jelentkezéshez Önnek meg kell adnia a GMAC-nek a következő Személyes Adatokat: név, cím, telefonszám, nem, születési idő és állampolgárság. A Felhatalmazott Teszt Centrumokban a tesztet tevőknek szükséges továbbá biometrikus adatokat is megadniuk tenyérlenyomat, digitális ujjlenyomat, digitális fotó és digitális aláírás formájában. Azoknak, akik azt a lehetőséget választják, hogy on-line regisztráltatják magukat a GMAT-nél vagy on-line vásárolnak termékeket és szolgáltatásokat, szükséges megadniuk az e-mail címeiket, hitelkártya számaikat, azok lejáratát és a számlázási címüket. Azon személyeknek, akik a képzéssel kapcsolatos információhoz és más termékekhez, valamint szolgáltatásokhoz kívánnak hozzájutni, esetleg további adatokat is meg kell adniuk, mint például korábbi tanulmányaik és az üzleti továbbképzéssel kapcsolatos terveik. A teszt központokban a tesztek elvégzése során audió és videó felvétel kerül rögzítésre annak érdekében, hogy a csalásokat megakadályozzák és így biztosítsák a vizsgák tisztaságát.

Ön tudomásul veszi, hogy a GMAC átadja a Felhasználók Személyes Adatait az amerikai egyesült államokbeli adatfeldolgozója, az NCS Pearson, Inc. (székhely: 5601 Green Valley Drive, Bloomington, MN 55437, USA, a továbbiakban: „Pearson VUE”), továbbá a Trainer C Kft. (székhely:  H-1033 Budapest, Szentendrei út 39-53.) részére, akik a GMAT vizsga lebonyolítását adatfeldolgozóként a GMAC megbízásából végzik. Ön tudomásul veszi, hogy a GMAC és a Pearson VUE részéről a személyes adatok kezelésére, illetőleg feldolgozására az Amerikai Egyesült Államok területén kerül sor. Az adatkezelés, illetőleg adatfeldolgozás tényleges helyszíne a Trainer C Kft. mint kijelölt adatfeldolgozó székhelye, a Pearson VUE mint kijelölt adatfeldolgozó fióktelepe (2510 N Dodge St, Iowa City, IA, 52245-95555, USA), valamint a GMAC  intézete az 11921 Freedom Drive., Ste. 300, Reston, VA 20190, USA helyszínen. A GMAC hozzáférhetővé teszi továbbá a Személyes Adatokat más szolgáltatóknak, mint például a GMAC e-kereskedelmi szolgáltatójának, információs technológiai alvállalkozóinak és kutatáselemző alvállalkozóinak. Minden ilyen szolgáltatóra szigorú titoktartási kötelezettség és a közlési tilalom vonatkozik. Amikor Ön bejelentkezett a Graduate Management Admission Search Service™-ben („Menedzsment Továbbképző Felvételi Kutatási Szolgáltatás”; „GMASS™ ”) történő részvételre, akkor az Ön Személyes Adatait hozzáférhetővé teszik GMASS előfizetőknek, akik a GMAT tesztet alkalmazó iskolák, ösztöndíjat nyújtó szervezetek és a GMAC egyes stratégiai partnerei, akik elkötelezettek a GMAC-vel az okleveles üzleti oktatáshoz történő hozzáférés biztosításában. Azok az intézmények, amelyeket Ön kiválaszt arra, hogy GMAT tesztjének eredményét megkapják, a teszteredményeket a tesztet tevő bizonyos Személyes Adataival együttesen kapják meg, beleértve az elérhetőségre és a demográfiai helyzetre vonatkozó információkat, és a tesztet tevő digitális fotóját, ha az intézmény a fotót igényelte. Az egyéb biometrikus adatok nem kerülnek továbbításra az iskolák részére. A GMAC akkor továbbíthat Személyes Adatokat, ha azt jogszabály kívánja meg, vagy ha az szükségessé válik csalárd vagy valamely jogellenes tevékenység feltárásához vagy megelőzéséhez. Ezen túlmenően a Pearson VUE részese a Safe Harbor Egyezmények, amely a személyes adatok külföldre történő továbbításánál megfelelő szintű védelmet biztosít az Adatvédelmi Törvény 9. § (2) bekezdésének a) pontja alapján.  A tesztre történő jelentkezésével és személyes adatai megadásával Ön kifejezetten hozzájárul az adatainak külföldre, az EU-n/Európai Gazdasági Térségen kívülre történő továbbításához, valamint a személyes adatainak a Pearson VUE részére történő továbbításához az Amerikai Egyesült Államok területére. Ön tudomásul veszi, hogy az adattovábbítás tartalmazhat olyan területre történő továbbítást, amely az Európai Gazdasági Térségen („EGT”) kívüli területekre és országokba irányul, ahol a személyes adatok védelmi szintje nem felel meg azon országok védelmi szintjének, ahol Ön lakik. Külföldre történő adattovábbítás esetén a GMAC intézkedéseket tesz annak érdekében, hogy biztosítsa, hogy a szolgáltatást nyújtók megőrizzék a Személyes Adatok bizalmasságát és biztonságát és, hogy biztosítsák, hogy a Személyes Adatok csak a jelen szabályzatban meghatározott szolgáltatások teljesítése és a vonatkozó jogszabályokkal összhangban történjen.

Az Ön adatait a GMAC csak annyi ideig őrzi meg, amennyi az adatgyűjtés, illetve a további adatkezelés céljának megvalósításához szükséges. A tesztet tevő nevét csak bizonyos körülmények esetén módosíthatja, telefonálva vagy faxot küldve a GMAT ügyfélszolgálata részére; a neveket on-line nem lehet megváltoztatni.  Annak érdekében, hogy a GMAT vizsgák sérthetetlenségét védje és, hogy az Ön részére a GMAT vizsgák eredményéhez hozzáférést biztosítson, az eredményeket 10 évig őrzik meg. A tesz centereknél gyűjtött digitális tenyérlenyomat mintáját vagy az ujjlenyomatot a GMAC az Ön legutóbbi vizsganapjától számított öt éves időtartamig őrzi meg annak érdekében, hogy a vizsgázó azonosíthatósága a vizsga érvényességének teljes időtartama alatt utólagosan is kétséget kizáróan biztosított legyen. A GMAC által felvett biometrikus adatok tehát a vizsga helyén irányadó jogszabályok alapján a személyazonosság igazolására alkalmas okiratoktól független, egyedi azonosítást tesznek lehetővé, melynek indoka a vizsga nemzetközi jellege, hogy a GMAC a vizsga államától függetlenül biztosítani tudja a GMAT vizsga nemzetközi szintű hitelességét, integritását, a csalások kiszűrését és az eredmények megbízhatóságát.

Önnek – évente egy alkalommal díjmentesen, írásbeli megkeresés útján – joga van tájékoztatást kapni arról, hogy hogyan és milyen Személyes Adatokat kezel a GMAC Önnel kapcsolatban. Önnek szintén joga van a jelen adatvédelmi szabályzatban meghatározott módon, illetőleg a tesztet tevőknek a GMAT tájékoztatójában foglaltak szerint a Személyes Adataihoz hozzáférni, azok módosítását, helyesbítését, illetőleg  törlését kérni. Ahhoz, hogy ezen jogait gyakorolja, Ön megtekintheti az Ön mba.com profilját, vagy kapcsolatba léphet a GMAC centrumával vagy (csak a tesztet tevők számára) a GMAT ügyfél centrumával vagy e-mailen, telefonon az amerikai kapcsolattartás (US Contact) részben foglaltaknak megfelelően. Az Adatvédelmi Törvény rendelkezéseivel összhangban Ön ugyancsak kérheti a Személyes Adatai helyesbítését vagy törlését, amelynek a GMAC jogszabály eltérő rendelkezése hiányában tesz eleget.

Ön jogosult tiltakozni személyes adatainak kezelése ellen, mely tiltakozás a GMAC által kivizsgálásra kerül legkésőbb a kérelem benyújtását követő 15 napon belül. Amennyiben Ön nem ért egyet az adatkezelő tiltakozást érintő döntésével, Ön jogosult bírósági eljárást kezdeményezni a tiltakozás elutasításáról szóló döntés kézhezvételét követő 30 napon belül az Adatvédelmi Törvény vonatkozó rendelkezéseivel összhangban. Amennyiben az Ön mint adatalany jogait megsértik, jogosult bírósági eljárást indítani az adatkezelővel szemben vagy kérheti azon kár megtérítését, amelyek a személyes adatai jogellenes kezelésével vagy az adatok védelméhez szükséges technikai előírások megsértésével kapcsolatosan merültek fel.

A magyar lakosokat ezúton tájékoztatjuk, hogy a GMAC kommunikációs és levelezési kapcsolattartója Magyarországon a Bán, S. Szabó & Partners Ügyvédi Iroda (1051 Budapest, József nádor tér 5-6., ügyintéző: dr. Szemán Péter ügyvéd, telefon: 266 3522, e-mail: office@bansszabo.hu.) A magyar lakosokat arról is tájékoztatjuk, hogy az Adatvédelmi Biztos Irodája a GMAC-t 1356-00001. szám alatt adatkezelőként nyilvántartásba vette.

---

Data Protection for Residents of Romania

Residents of Romania understand that pursuant to Law no. 677/2001 they have certain rights: the right of access (art.13), the right of intervention (art. 14), the right of opposition (art. 15), the right not to be subject to automated individual decisions (art. 16) and the right of access to justice (art. 17) as provided in this Privacy Policy and for test takers, as provided in the GMAT Handbook. To exercise these rights, individuals may contact the local representative of GMAC in Romania for data protection issues, review My mba Profile, contact GMAC Customer Service or contact GMAT Customer Service (for test takers) by email, mail or telephone, as stated in the Contact Us section below .

Romanian residents are hereby informed that the local representative of GMAC in Romania for data protection issues is the company, M.B.L. Computers SRL, with registered offices in 020331 Bucharest, 15 Fabrica de Glucoza street, Romania, Telephone:+40 21 204 67 50  Fax: +40 21 204 67 41.

GMAC is the data controller and is registered with the Data Protection Authority (DPA) (Autoritatea Nationala pentru Supravegherea Prelucrarilor de Date cu Caracter Personal) under file number 6010.

Data Protection for Residents of Serbia

If you are resident of Serbia, we are required to inform you of your rights regarding collection, processing and transfer of your personal data. You are providing your personal data for the purposes of participation in the GMAT exam (The Graduate Management Admission Test). Before taking the test, you provide personal data to GMAC (The Graduate Management Admission Council). You should know that GMAC is a non-profit organization of leading graduate business schools around the world, situated at the address 11921 Freedom Drive, Suite 300, Reston, VA 20190 United States. GMAC is the owner and administrator of the GMAT exam. When registering for the test and when providing your personal data to GMAC, you consent to the collection, processing, use and transmission of your personal data in accordance with the terms described below.

You agree that GMAC, on its own or through its data processors, may collect and process your personal data for the purposes of your participation in the GMAT exam. GMAC hereby informs Serbian residents that the scope of the data processing is educational. You also agree to the transmission of your personal data into and out of the United States, which is the primary processing location for GMAC and its data processor, Pearson VUE, a business of NCS Pearson, Inc. (seat: 5601 Green Valley Drive, Bloomington, MN 55437, USA, hereinafter “Pearson VUE”) who is administering the GMAT test on behalf of GMAC. You are hereby informed that the legal basis of the collection and processing of your personal data is the Data Processing Agreement executed between GMAC and Pearson VUE, according to which GMAC is the “data controller” and Pearson VUE is a “data processor” who is entitled to collect, process, transfer and provide other services of the “data processing” (as defined under European Union Data Privacy Directive 95/46). Pearson VUE possesses a Safe Harbor certificate issued by the US Department of Commerce and Safe Harbor registered companies are considered to provide an adequate level of protection under the Safe Harbor Principles as recognized by the European Commission.

To register for the test, you need to provide GMAC with the following data: name and surname, address of residence, phone number, gender, date of birth, citizenship, native language and on an optional basis, education degrees and professional experience. For those who choose the option of registering for the GMAT on-line or purchasing products or services on-line, e-mail addresses, credit card numbers, expiration dates and billing addresses are required. If allowed by law, at the Authorized Test Centers, you also need to provide biometric information in the form of a palm vein scan.

Also, you provide an explicit consent to the collection and transfer of your photograph, digital signature, and audio and visual data during the GMAT test through the use of a closed television circuit installed in the Local Test Center for the purposes of deterring fraud, maintaining the security and integrity of the GMAT exam, and to enable the test center personnel, Pearson VUE and GMAC to address questions or concerns of the test-takers.

You understand that pursuant to the Serbian Law on Personal Data Protection (Official Gazette of the RoS”, no. 97/2008 and 104/2009), you have the right to recall the consent for data processing at any time in which case further processing of your personal data will not be allowed. Also, you have the right to request the modification, rectification, erasure as well as cease or temporary suspension of the data processing in case of infringement of your rights as data subject, fraud or other unlawful activity.

Data Protection for Residents of Spain

Residents of Spain provide their explicit consent to the collection of their personal data (name, surname, address, test records, the digital photograph, signature, fingerprint and/or palm vein template, and other optional background information that may be provided), in relation to their participation in the GMAT exam and their registration on this website and/or other optional programs or services including the GMASS service, in addition to  the audio and visual data collected through the use of a closed television circuit installed in the examination centers for the purposes of deterring fraud, maintaining the security and integrity of the GMAT exam, and to enable the test center personnel, Pearson VUE and GMAC to address questions or concerns of the test-takers.

Such residents also agree to the transmission of their personal data for managing their participation in the GMAT exam, registering on this website, or participating in any optional programs or services including the GMASS service, to GMAC, with its registered office at 11921 Freedom Drive, Suite 300, Reston, VA 20190, United States, and its data processor, Pearson VUE, with its registered office at 5601 Green Valley Drive, Bloomington, Minnesota, 55437, United States, and also to the extent, if any, required by applicable regulations, or by a court of competent jurisdiction, or as necessary to detect and prevent unlawful activity. For test takers, they further agree to the transmission of their data into the countries where their selected score recipients are located, and for GMASS participants, they agree to the transmission of their data to the countries where the GMASS subscribers are located. Residents of Spain acknowledge that the above countries may not provide the same level of data protection that their home country provides.

Residents of Spain understand that they have the right of access, of modification, of rectification and of erasure of certain personal data as provided in this Privacy Policy, and for test takers, as provided in the GMAT Handbook. To exercise these rights, individuals may review their My mba.com profile, or may contact GMAC Customer Service or contact GMAT Customer Service (for test takers), or by email, mail, or telephone, as stated in the Contact Us section below.

Spanish residents are hereby informed that the local representative of GMAC in Spain for data protection issues, and the exercise of the above rights, is the company "Pearson Educación S.A", with registered offices in Madrid, at Calle Ribera del Loira 28, 28042. Spain.

Data Protection for Residents of Sweden

When you provide your personal data to the data controller, GMAC, you agree that GMAC, on its own or through its data processors, may collect and process your personal data for the purposes of your participation in the GMAT exam and providing the exam results to score recipients selected by you, and your registration on this website and/or other optional programs or services including the GMASS service, and through the use of a closed television circuit installed in the test centers for the purposes of deterring fraud, maintaining the security and integrity of the GMAT exam, and to enable the GMAC or its data processors in the form of test center personnel or Pearson VUE to address questions or concerns of the test takers.

The categories of data that are collected are contact details such as name, address, telephone and fax number, payment information, test records and exam results, identification information such as a digital photograph, signature, fingerprint and/or palm vein template, audio/video recording and other optional background information that you may provide. The audio/video recording is retained for a maximum of thirty (30) days, unless it is needed as evidence in which case it is retained for as long as necessary due to the investigation and proceedings.

You also agree to the transmission of your personal data outside of the EU/EEA to GMAC, and its data processors, including Pearson VUE, for managing your participation in the GMAT exam, for registering on this website, or participating in any optional programs or services including the GMASS service, and also to the extent required by applicable regulations, or by a court of competent jurisdiction, or as necessary to detect and prevent unlawful activity. As a test taker, you further agree to the transmission of your data to the countries where the score recipients you have selected are located, and as a GMASS participant you agree to the transmission of your data to the countries where the GMASS subscribers are located. You acknowledge that the above countries may not provide the same level of data protection that Sweden provides.

You have the right, once per year, free of charge, upon a written application, to receive information about what personal information GMAC processes about you and how. You also have the right of access, of modification, of rectification and of erasure of certain personal data as provided in this Privacy Policy, and for test takers, as provided in the GMAT Handbook. To exercise these rights, you may review your mba.com profile, or contact GMAC Customer Service or contact GMAT Customer Service (for test takers), or by email, mail, or telephone, as stated in the Contact Us section.

Special Notes for mba.com Users and Registrants

We occasionally send out email communications to mba.com registrants who have opted in to features or services we offer through mba.com. You may subsequently opt out of these email communications by updating your mba.com profile, or by contacting GMAC® Customer Service.

You may opt in to the GMASS® service by asking in your profile to be contacted by strategic partners and corporate affiliates of GMAC that share our commitment to creating access to graduate business education. If you opt in, these organizations may send you graduate business or management program-related news and information, or they may contact you to offer you their products or services. If you participate in the GMASS service, you will be subject to the privacy policies of these organizations, as you interact with them; GMAC encourages you to read and understand their privacy policies. These organizations are required by GMAC to provide you with an opt-out mechanism in the event you decide you do not want to be contacted by them. If you would like to obtain a list of participating organizations, or wish to report not being able to opt out, please contact customercare@mba.com.

Special Notes for GMAT® Test Takers
Information Collection

To register for and take the GMAT test, you must consent to and agree to abide by all terms and conditions set forth in the GMAT Handbook at the time of your test date, which includes but is not limited to testing policies and rules, exclusive remedies for testing/scoring errors, restrictions around test records and score data, and a Privacy Policy describing the use, disclosure, and transmission into the United States of your personally identifiable information and test records. We require test takers to provide certain personal information in order to register, including first and last name, address, telephone number, email address (required for online registration only), date of birth, gender, country of citizenship, and race and ethnicity (U.S. only). You will also be required to agree to the terms of the GMAT Testing Rules and Agreement, which will be given to you upon arrival to the test center, and you indicate your agreement to this document with an electronic signature. Click here to review the terms of this agreement in advance or contact GMAT Customer Service. Test takers must also provide data at the test center to verify their identity and protect the security of the exam, including an original government-issued identification, digital photograph, digital fingerprint and/or palm vein pattern, digital signature, and an audio/video recording of the test experience. The palm vein template and the digital photograph may be compared against those of other test takers for fraud detection purposes.

When registering for the test, you consent to the collection, processing, use and transmission to the United States of your personal information for the purposes and in accordance with the principles stated in this Privacy Policy and in the Handbook. You further consent to the disclosure of such information to GMAC® (the "data controller" under certain international laws), its service providers, any score recipient you select (who might be located in a country that does not provide for a level of data protection that is equivalent to the one in your home country) and others as necessary to prevent unlawful activity or as required by law. You also acknowledge that you are aware of your ability to access, modify, or rectify certain personal data, as explained in this Privacy Policy and in the Handbook.

Access, Modification, Data Integrity, and Retention

Personal information such as your address and plans for graduate business school may be accessed, modified and rectified through your Mymba.com profile or by contacting GMAT Customer Service, except as stated below.

A test taker may only change his or her name in certain circumstances by calling or faxing GMAT Customer Service; name changes cannot be made online. As explained in the GMAT Handbook, to protect the integrity of the GMAT test and provide you with access to your GMAT scores, scores are maintained for 10 years. As a result, certain information cannot be altered or destroyed during those 10 years, including your test scores, records related to your testing experience (“test records”), and the digital photograph and signature required to help verify your identity. The digital fingerprint and/or palm vein pattern template collected at a test center are maintained, and cannot be altered or destroyed, for five (5) years from your most recent testing date.

Also, to protect the security and integrity of the exam, test takers will not have access to: audio/videotape of the testing experience; their digital photograph, signature, fingerprint and/or palm vein pattern template; and key stroke statistics, exam answers, essays, and similar test records. Test takers in countries where access may be allowed by applicable law may request access by contacting privacy@gmac.com; these requests will be handled in accordance with applicable law.

If you have already taken the GMAT test and have a complaint or concern about the test or a test center, send your written complaint or concern by email, fax or postal mail immediately following the test administration. Use the information provided under "GMAT Customer Service" and include "Attention: GMAT Complaints" in your communication. Test scores are provided as explained in the GMAT Handbook; additional score reports may be obtained for certain fee.

Special Notes for Survey Participants

GMAC® conducts survey studies with individuals and may share anonymous aggregate reports with schools and organizations. Participants in survey studies include, but are not limited to:

  • mba.com registrants
  • Graduating business school students
  • Business school alumni
  • Purchasers and users of mba.com and GMAC products and services

GMAC may also receive students’ names from schools and graduate business programs. You may always decline to participate in GMAC surveys or opt out of participating in surveys by following the directions provided within the survey invitation.

For those who voluntarily respond to a survey invitation, we may collect your basic contact information, background information (e.g., demographics, education, and work history), opinions, and attitudes, in addition to your existing GMAT® score(s) and score report destinations, if available. GMAC generates anonymous aggregate reports from survey responses and uses these reports internally to improve GMAC products and services and for publications regarding the GMAT exam and the graduate management education industry. Other graduate business program surveys may be generated for schools or organizations that provide GMAC with student information. Survey records are not associated with individuals in any of these reports, and individuals’ names and contact details will be used only to track survey completion and for follow-up communications as appropriate. 

Changes to this Policy

From time to time, we may need to change our privacy policy or procedures to accommodate changes in applicable law, our programs or business needs, or for other reasons. If we make any material changes to our privacy policy, including changes in our use of personal information, we will post a prominent notice on the mba.com homepage and other places we deem appropriate so that you are aware of what information we collect, under what circumstances, and how we use it.

Contact Us

If you have questions about this privacy policy or believe we have not adhered to it, please contact our chief privacy official:

Email us at:
privacy@gmac.com*

Phone us at:
+1-703-668-9600 or (800) 811-8042 (toll-free in the United States and Canada)

Fax us at:
+1-703-668-9601

Write us at:
Graduate Management Admission Council
Attention: Chief Privacy Official 
11921 Freedom Drive, Suite 300
Reston, VA 20190 USA

* Please note that opt-out requests should be made by deselecting your preferences in your My mba.com profile or by calling or faxing GMAC® Customer Service or GMAT® Customer Service (for test takers).

TRUSTEe - Click to verify
On this page...