Privacy Policy
1 INTRODUCTION
This privacy statement describes how the University of Twente (UT) handles your personal data […].
2 PROCESSING PERSONAL DATA
Within [name application], the following personal data is processed:
| (Categories of) personal data | (Categories of) data subjects | Purpose of data processing | Legal basis | Retention period |
| [e.g. name] | [e.g. students] | [Describe the purpose for what the personal data is being processed] | [Choose one of the following six: Consent (when this is the legal basis, it should also be mentioned that data subjects may always revoke their consent and how they can revoke)Contractual necessityLegal obligations (when this is the legal basis, also mention what legal obligations)Public interestLegitimate interest (when this is the legal basis, explain what is the legitimate interest)Vital interest] | [Personal data shall be kept for no longer than is necessary for the purposes for which it is being processed. The retention period should be determined here.] |
3 COLLECTING PERSONAL DATA
[Mention how personal data is collected; the source and whether personal data is collected from public sources. In case personal data is collected from data subjects: are data subjects obliged to provide their personal data? What are the consequences when data subjects do not provide their personal data?]
4 TRANSFER OF PERSONAL DATA
[Explain whether, and if so which, personal data are being transferred to third parties and if so, to which parties and where these parties are based. Also explain why these personal data are transferred. In case personal data are being transferred outside the EU, please explain how an adequate level of protection is guaranteed.]
5 YOUR RIGHTS
The UT processes your personal data, but as a data subject, you have several rights to keep control over your personal data. You will find more information on these rights below. In case you have any questions or you wish to exercise these rights, please contact the Data Protection Officer (dpo@utwente.nl).
5.1 Right to access personal data
You have the right to receive, amongst others, a copy of your personal data which is being processed.
5.2 Right to erasure
The right to be forgotten. It is not always possible to erase all personal data.
5.3 Right to rectification
The right to have inaccurate personal data rectified, or completed if it is incomplete.
5.4 right to data portability
This right allows the data subject to obtain and reuse their personal data for their own purposes across different services.
5.5 Right to restrict processing
Under certain circumstances, you have the right to have less personal data being processed.
5.6 Rights in relation to automated decision making and profiling
[Explain whether decision are being made based on automated processed data. If not, this is not applicable. If so, data subjects have the right to have a human view on the decision].
5.7 Right to object
In certain circumstances, you have the right to object to processing.
6. COMPLAINTS
In case you have a complaint about the way the UT handles your personal data, you can contact the Dutch Privacy Authority (Autoriteit Persoonsgegevens).
7 CONTACT
For questions about [name application], please contact [NAME], [E-MAIL], [PHONE].
For questions regarding your personal data and privacy, please contact the privacy contact person of your faculty or service department (see https://www.utwente.nl/en/cyber-safety/contact/#privacy-contact-persons).
You can also contact the Data Protection Officer: dpo@utwente.nl.