The information on these pages relates to the following website:
Through this website, Hogeschool Utrecht (HU), a department of OO&S, shares information with its employees, (prospective) students and business relations. This may concern specific subjects but also invitations to events or completing forms.
HU considers it essential to handle your personal data with care. This Privacy Statement explains what data HU processes when you visit the above site or register for an activity at HU. We explain this for each target group.
Who is responsible for processing my data?
Hogeschool Utrecht (HU) is responsible for processing the personal data described in this Privacy Statement. HU has the legal obligation to process your data carefully as described in privacy legislation, the General Data Processing Regulation (GDPR).
External parties who work on behalf of HU – for example, the party (host server) that manages this website (Toek) and companies who arrange security for us – are also bound by this privacy legislation. HU has drawn up a processing agreement with them.
For what purposes are my personal data processed?
Processing per purpose and target group, and basis
Students
Purpose
To be able to inform you as a student, we collect many personal data from you. HU offers various activities and events to tell you about matters besides your studies.
We only ask for personal data via the minor website to register for the online minor market in March every year.
To participate in activities and events, HU requires personal data. These are mainly your contact details. We use these contact details to send you information about the activity in question. The HU also uses personal data to inform you about any location changes and starting times.
We will handle your personal data carefully and only process the data we have received from you. We will not make your data available to third parties. We follow the requirements of the AVG, the General Data Protection Regulation.
Legal basis
We process your data based on consent when you have indicated that you wish to participate in an activity or event. Should you object to your data being processed, or if you want to withdraw your permission for us to process your data during an event, you can indicate this by sending an e-mail to Askprivacy@hu.nl
Retention period
For events and activities, we delete your data within one month after the event or activity has ended.
For non-HU students
Data will be kept in the Edubroker system (KiesOpMaat), allowing educational institutions to settle among themselves. For corrective billing, data is kept for this purpose for 90 days. In Edubroker, learning agreements are anonymized within three months if a student has cancelled the registration.
For HU students
Your data for registration and participation in Minors will be stored in Osiris in the same way as regular courses.
Employees
Purpose
To be able to inform you as an employee about various activities and events, we will collect some personal data from you, if necessary. The HU offers multiple activities and events within the framewminor activities.
To participate in activities and events, HU needs personal data. These are mainly your contact details. We use these contact details to send you information about the relevant activity. The HU also uses personal data to inform you about possible location changes and starting times.
We will handle your personal data carefully and only process the data we have received from you. We will not make your data available to third parties. We follow the requirements of the AVG, the General Data Protection Regulation.
Legal basis
We process your data based on consent when you have indicated that you wish to participate in an activity or event. Should you object to your data being processed, or if you want to withdraw your permission for us to process your data during an event, you can indicate this by sending an e-mail to Askprivacy@hu.nl
Retention period
For events and activities, we delete your data within one month after the end of the event or activity.
How will my personal data be protected?
Your personal data will be stored in HU systems. Storage takes place in well-secured systems, and only people who are authorized to do so can view this data. We have made agreements with suppliers about how they will handle our personal data. We have recorded these agreements in the processor’s agreements.
HU ensures an adequate – risk-based – level of security and implements appropriate technical and organizational measures to protect your personal data against unauthorized access, modification, disclosure or loss of your personal data or other forms of unlawful processing. These measures also prevent the unnecessary or illegal collection and processing of personal data. A risk analysis of privacy protection and information security is part of our internal risk management and control system.
Implementation of external content
YouTube
The Minor website displays YouTube videos via embedding. During playback, log data is transferred to the YouTube server in America. For more information, visit the Google Privacy and Terms site.
Google Analytics and Cookies
The HU keeps track of usage data of the website(s) for statistical purposes. The personal data collected in this way are not sold to third parties.
Our WordPress sites use cookies from Google Analytics to track, in outline form, user behaviour. This helps to improve the functioning of the website(s). Google may provide this information to third parties if Google is legally required to do so or insofar as third parties process the information on Google’s behalf. By using the HU website(s), you consent to process the information by Google in the manner and for the purposes described above.
To increase the ease of use of the HU website(s), so-called “cookies” are used. A cookie is a small text file placed on your computer, tablet or smartphone when you visit the website(s) of the HU. Yes, you can remove the use of these cookies at any time, although this may limit the functionality and ease of use of the website(s). HU does not influence those third parties’ placement and use of cookies.
Deleting cookies
Below is described how you can delete cookies within the different internet browsers:
Deleting cookies may cause certain parts of the website not to work or not to work correctly.
Whom do I contact if I have questions or wish to object to processing my data?
If you have any questions about processing your data, you can ask the HU privacy desk: Askprivacy@hu.nl.
Based on the AVG, you have the right to inspect the personal data processed about you, the right to correct your data if it contains factual errors, the right to delete your data, the right to restrict the processing of your data and the right to object to the processing of your data.
In the event of an objection, it will be assessed on a case-by-case basis whether the objection can or must be met. For example, no data can be deleted, which would deny you access to the building.
If you wish to exercise your rights, you may submit a request by completing the privacy request form – if you have an HU account or by sending a message to the HU Utrecht University of Applied Sciences’ privacy desk at askprivacy@hu.nl.
You may be asked to identify yourself for the request to be processed. This will ensure that the correct person makes the request. If you are unsatisfied with how we handle your data, you also have the right to complain to the Personal Data Authority in the Netherlands https://autoriteitpersoonsgegevens.nl/en.