What are my rights?
The GDPR provides additional rights to data subjects whose personal data are processed. Data subjects include students, staff, alumni, prospective students and research participants.
As a data subject, you have several rights which you can choose to exercise.
All employees, students, alumni, prospective students and visitors of the AUAS, along with participants in AUAS research, have the right to know what will be done with their personal data and why.
AUAS procedure
As a basic principle, the AUAS will inform you about any data processing activities when the AUAS collects or receives personal data from you. This can be done in the form of explanatory notes for fields on a form, for instance. The AUAS will additionally inform you via the privacy statement.
Data protection officer
The AUAS has appointed a data protection officer, who ensures that personal data is processed in accordance with the applicable regulations. The data protection officer is registered with the Dutch Data Protection Authority.
Read more about the data protection officer.
All employees, students, alumni, prospective students and visitors of the AUAS, along with participants in AUAS research, have the right to access their personal data which have been processed by or on behalf of the AUAS.
Which data does the AUAS share and why?
The AUAS processes your personal data in various systems, such as SAP and Hippo. Your data is also shared with a number of entities, including the Dutch Tax and Customs Administration and the occupational health and safety service. In the attached document you can see the important systems processing your details and with whom such information is shared. This document is updated regularly.
AUAS procedure
To a significant extent, you can exercise your right to access your personal data yourself via the Digital Service Point for Employees (DSPM). Go to the DSPM and click on ‘My details’ > ‘Personal details’ > ‘View or change personal details’.
With effect from 4 June, you will also have direct access to your personnel file.
If you would like to view other details, you can submit a request via AVG@hva.nl
Following a request to access your personal data, you may ask the AUAS to correct or add to your details if these are incomplete. First check whether you can amend your details yourself via the DSPM (such as work and private contact details, address details, a new bank account number etc.).
Go to the DSPM and click on ‘My details’ > ‘Personal details’ > ‘View or change personal details’.
You can submit a request via AVG@hva.nl
You also have the ‘right to erasure’ and the ‘right to be forgotten’. This allows you to ask the AUAS to delete your data. On top of that, you can ask the AUAS to delete all links to your personal data as well (‘right to be forgotten’).
Please note
Requests to delete personal data and requests to be forgotten may also be rejected, for example in connection with other regulations (such as the Dutch Higher Education Act or the Dutch Salaries Act) under which the AUAS remains obliged to retain certain data.
You can find more information on the retention periods via Archive > What does the Department of Records and Information Services (DIV) do? (only in Dutch)
You can submit a request to receive your personal data in a machine-readable format, or to have it transferred by the AUAS to another institution. This is only possible if processing has taken place on the basis of consent or pursuant to an agreement and concerns only that data which you yourself have provided as a data subject.
You can submit the request via AVG@hva.nl
The right to restrict processing of personal data gives you the option to temporarily ‘freeze’ the processing of your personal data. The data may then be processed in the following cases only:
- with your consent;
- for the establishment, exercise or defence of a legal claim;
- to protect the rights of other (legal) persons.
If you would like to temporarily suspend the processing of your personal data, you can submit a request via AVG@hva.nl
The processing of your personal data is preceded by a consideration of interests, in which your right to privacy is weighed against the grounds for the processing. This consideration is general and abstract.
When a specific situation applies to you, you can make this situation known to the AUAS. This will allow the AUAS to reconsider the processing interests based on your new or specific situation.
Please note
It is not possible to object to a processing activity for which you have given your consent. In that case you can withdraw your consent.
If you would like to lodge an objection, you can submit a request via AVG@hva.nl
Term
The AUAS carefully processes all requests. You will receive a response as soon as possible, within a maximum of one month. The processing term for complex requests may be extended by up to two months. You will be informed of any such extension within one month of submitting your request.