Data subject rights
Pursuant to the GDPR, you have a number of rights that you can excercise with regard to your personal data:
- The right to information about data processing
- The right to rectify inaccurate data
- The right to have personal data deleted when
- the data is no longer necessary for it's intended purpose
- the data have been collected unlawfully
- you withdraw consent for the processing of your personal data
- The right to restrict data processing. Your personal data may only be processed:
- with your permission
- for the protection of the rights of others
- for the purposes of filing, exercising or substantiating legal claims
Requests to exert your rights can be directed to the Data Protection Officer by sending an e-mail to: email@example.com
. In order to process your request we may ask for identifcation.
We are obliged to respond to your request withing 30 days. Requests are reviewed by us for reasonability and feasability. When we are not able to process a request within a period of 30 days we may extend this period to 90 days, in which case we inform you why this is necessary.
If we have a significant interest to process you personal data, we may deny a request to restrict or cease the processing of personal data, or the deletion of personal data.
Third party data processing
In some instances we may share your personal data with third parties:
- Government in case of a legal obligation
- Third parties that process personal data in the context of supplying a service to HKU
For the purposes of sharing data with third parties, HKU draws up data processing addenda, in which arrangements are made for the safe processing of your personal data.
Cross-border transfer of data outside of the EU only takes place if the country where processing takes places offers an appropriate level of protection in accordance with European law.
We have approporiate and up-to-date technical and organisational security measures in place to protect personal data we process against loss or any form of unlawful processing. Personnel is subject to confidentiatlity clauses in HKU's policies.
Data Protection Officer
If you have questions regarding the processing of personal data by HKU, please contact HKU's Data protection Officer (DPO) at: firstname.lastname@example.org
The DPO gives advice based on data protection legislation and monitors HKU's compliance with this legislation. The DPO is also the contact person for the national supervisory authority, the Dutch Data Protection Authority (DPA).
The DPO is independent and reports to the Executive Board.
about data breaches and how to report these.
Version: 22 June 2021.
HKU reserves the right to modify this privacy statement at any time.