Privacy is a highly important topic for the University of Amsterdam (UvA), and therefore the UvA handles your personal data with care. In this Privacy Statement we describe how personal data is processed and how the privacy of all individuals who partake in the UvA panel is protected.
Who is responsible for processing my personal data?
The UvA is the party responsible for processing your personal data within the meaning of the General Data Protection Regulation (‘GDPR’). The UvA is located at Spui 21, 1012 WX Amsterdam. Our postal address is PO Box 19268, 1000 WX Amsterdam.
For what purpose will my personal data be processed?
The UvA will process your personal data for the following purposes:
What is the legal basis for the processing of this data?
The UvA only processes your personal data based on your consent (article 6.1 (a) GDPR). You give your consent when you sign up for the UvA panel.
Which (categories) of personal data are processed?
After signing up for and participating in the UvA panel the following personal data of students will be processed:
After signing up for and participating in the UvA panel the following personal data of employees will be processed:
How long will my personal data be stored?
If you opt out of participating in the panel your personal data will be removed from the system directly. If you are inactive within the panel for more than 12 months, your personal data will be automatically removed from the panel.
For studies in which the results can be traced back to an individual, all data is destroyed or anonymized after completion of the study.
Will my personal data be shared with third parties?
The UvA will only share the personal data you have provided for the UvA panel with third parties if this is necessary to support the performance of the UvA panel’s tasks, for example a software supplier. In this case Qualtrics software is used. The UvA has written agreements with Qualtrics about the processing and security of your personal data.
How will my personal data be secured?
The UvA takes appropriate technical and organizational measures to protect your personal data against unauthorized access, loss and any form of unlawful processing. Only a few employees have access to the personal data stored in Qualtrics, only necessary information is shared with the person conducting the research and results are analysed anonymously.
Will my personal data be transferred to countries outside the European Union?
No, your personal data will not be transferred to countries outside the European Union.
How can I exercise my privacy rights?
On the basis of the current GDPR, you have the right – subject to certain conditions – to access the personal data that we process, to correct your personal data if it contains factual inaccuracies, to have your personal data deleted, to limit the processing of your personal data, and to object to the processing of your personal data.
If you wish to exercise any of these privacy rights, you can contact firstname.lastname@example.org.
If you are not satisfied with how the UvA dealt with your personal data, you can submit a complaint with the Data Protection Officer of the UvA, at email@example.com.
If you have any questions regarding the processing of your personal data, you can contact the UvA panel via firstname.lastname@example.org.