Data subject rights
Pursuant to the GDPR, you have a number of rights that you can excercise with regard to your personal data:
- The right to information about data processing
- The right to rectify inaccurate data
- The right to have personal data deleted when
- the data is no longer necessary for it's intended purpose
- the data have been collected unlawfully
- you withdraw consent for the processing of your personal data
- The right to restrict data processing. Your personal data may only be processed:
- with your permission
- for the protection of the rights of others
- for the purposes of filing, exercising or substantiating legal claims
Requests to this end can be submitted to the email address email@example.com
. You can also use this address for questions regarding the processing of personal data by HKU. When you submit a request to us to exercise your rights, we may ask you for additional identification.
We are obliged to respond to your request withing 30 days. Requests are reviewed by us for reasonability and feasability. When we are not able to process a request within a period of 30 days we may extend this period to 90 days, in which case we inform you why this is necessary.
If we have a significant interest to process your personal data, we may deny a request to restrict or cease the processing of personal data, or the deletion of personal data.
Third party data processing
In some instances we may share your personal data with third parties:
- Government in case of a legal obligation
- Third parties that process personal data in the context of supplying a service to HKU
For the purposes of sharing data with third parties, HKU draws up data processing addenda, in which arrangements are made for the safe processing of your personal data.
Cross-border transfer of data outside of the EU only takes place if the country where processing takes places offers an appropriate level of protection in accordance with European law.
We have approporiate and up-to-date technical and organisational security measures in place to protect personal data we process against loss or any form of unlawful processing. Personnel is subject to confidentiatlity clauses in HKU's policies.
Data Protection Officer
HKU has a Data Protection Officer (DPO). This person advises on the application of data protection legislation and monitors HKU's compliance with this legislation.
The DPO is independent and reports to the Executive Board.
You can reach the DPO via firstname.lastname@example.org
about data breaches and how to report these.
Version: 22 June 2021.
HKU reserves the right to modify this privacy statement at any time.