Privacy Policy

The University of Tennessee recognizes the concerns of individuals regarding privacy and online data collection. We strive to respect and protect the privacy expectations of our website visitors.

Website Data Collection 

Websites within the University of Tennessee System domain, tennessee.edu, collect visitor information both passively (via web servers) and actively (through forms and surveys). While some data helps track user behavior, most is aggregated and does not identify individuals. This statement outlines the types of data collected, collection methods, and purposes. 

Data Retention 

UT stores the data it collects for the time periods specified in UT’s Records Retention Policy.

Changes to this Privacy Notice 

UT may, in its discretion, periodically update this privacy notice. 

Last updated: Feb. 25, 2025 

UT and the European Union’s General Data Protection Regulation

The University of Tennessee may be a data “controller” or “processor” with regard to certain activities as defined under the European Union’s General Data Protection Regulation. UT is committed to protecting the rights of individuals in compliance with the GDPR. 

 If you have a question regarding your rights as a data subject under GDPR, please contact privacy@tennessee.edu. 

Types of Information Collected

Aggregate Information

The following are examples of information that may be collected to provide communications staff, site owners, content managers, designers, and IT specialists insight into visitor behavior for the purpose of improving university websites and access to university information. 

  • The Internet Protocol (IP) address of the computer and name of the Internet domain used to access the Internet;
  • IP addresses of websites linking directly to sites within the tennessee.edu domain;
  • The date and time a site was accessed within the tennessee.edu domain;
  • Pages visited (“requested”) during this session;
  • Web browser and operating system used to access a site within the tennessee.edu domain;
  • Device used to access a site within the tennessee.edu domain. 

University of Tennessee System websites commonly use one of the following methods to collect this data: 

Cookies

Cookies are small pieces of data sent from our website(s) and stored in your web browser. Accepting cookies allows visitors to set user preferences and otherwise enable a more “personalized” experience with a website. Users may set preferences regarding the storage of cookies within their individual web browsers, which can also be used to remove stored cookies.

Third-party Tracking (e.g. Google Analytics)

Many websites within the tennessee.edu domain use Google Analytics to collect visitor data in aggregate. This data is also collected using cookies set by Google. See Google’s privacy and terms with regard to partner sites for more info: https://www.google.com/policies/privacy/partners/. The UT System may also transmit NPII collected by third-party tracking services (cookies) to other third parties (e.g. Facebook) so that you may see messages from the university when you visit other websites outside of the utk.edu domain.

Server Logs

All web servers collect very basic visitor information to monitor site usage and performance.

Lawful Basis for Collecting Personal Data

The University of Tennessee collects and processes personal data to support education, research, employment, and public service. This includes information such as names, email addresses, IP addresses, and, with consent, sensitive data.

Data is processed based on lawful bases, including:

  • Supporting UT’s educational, research, and public service mission.
  • Fulfilling contracts with students, employees, or research participants.
  • Complying with legal obligations.
  • Using data with individual consent for specific purposes.

Some data processing may fall under additional lawful bases as needed. 

UT will not share your information with third parties except:

  • as necessary to meet one of UT’s lawful purposes
  • as necessary to protect UT’s interests; or
  • with service providers acting on our behalf who have agreed to protect the confidentiality of the data.

Opting-Out of Data Collection

To opt out of the collection and use of information for ad targeting on Facebook and other websites, you can use the Digital Advertising Alliance’s WebChoices Tool, which scans your browser for companies that are already serving you customized ads.

To opt out of Google’s ad personalization, visit Google’s Ad Settings.

You can also opt out of “interest-based advertising” by visiting the Network Advertising Initiative opt out page.