Privacy

This privacy statement informs you on how COMPETING processes personal data and provides insight into your privacy rights.

General
COMPETING values the protection of your privacy and the safety of your personal data. We only process personal data in accordance to the EU General Data Protection Regulation (GDPR) and the Dutch law ‘Wet bescherming persoonsgegevens (Wbp)’.

According to both GDPR and Wbp, COMPETING is responsible for the processing of personal data of (prospective) students and employees associated with COMPETING.

The Data Protection Officer (DPO) of COMPETING is registered with the Dutch Data Protection Authority (DPA). The DPA ensures that the processing of personal data by COMPETING is in accordance with the privacy legislation.

Processing personal data
The following personal data and may be requested and processed by COMPETING:

Name and address details, date and place of birth, passport photo, bank account number (IBAN), student number, correspondence number Ministry of Education, Culture and Science, Citizen Service Number (BSN), diploma(s) of previous education.

Other statutory personal data.

Other statutory personal data based on specific Dutch legislation such as the Dutch Education and Vocational Education Act, the Secondary Education Act, the Tax Act, Identification Requirements and the Eligibility for Permanent Incapacity Benefit (Restrictions) Act (Wet Poortwachter).

Rights of data subject
As the owner of personal data (data subject) you have certain rights according to the GDPR.

Right of access by the data subject.
To obtain a statement of personal data processed and managed by COMPETING, a request can be sent to the DPO.

Right rectification
In case COMPETING uses personal data incorrectly, the data subject may ask for rectification, in which COMPETING is bound to follow personal data as registered in the The Education Executive Agency of the Dutch Ministry of Education, Culture and Science (DUO), which is based on the data registered in the Dutch BRP Register.

Right to erasure
All data of the data subject can be deleted from COMPETING files. However, there are technological and legal limitations to take in to account, as stated in for example the Public Records Act.

Right to data portability
The data subject has the right to receive the personal data concerning him or her and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided

Requests for this can be addressed to the Data Protection Officer of COMPETING via competing@stc-r.nl.

Transfers of personal data to third parties
For the processing of personal data, COMPETING can make use of service providers that act as processor only on behalf of and for the benefit of COMPETING. Processors work on the basis of a processing agreement concluded for that purpose. No personal data will be provided to third parties outside this, unless required to do so by specific legislation.

COMPETING, together with potential processors, ensures appropriate organisational and technical security of personal data. In this way, COMPETING ensures that this information is only accessible to persons who are authorized to do so by virtue of their position or duties. The data itself is only used for the purposes for which it was obtained and on the basis of a legal basis. COMPETING ensures that the storage, management and processing of the personal data takes place within the European Union.

Procedure to report personal data breaches
If a data subject suspects or believes that personal data of students or employees of COMPETING are accessible to unauthorized persons, we ask you to report this directly via the general number of COMPETING or at the service desk. Reporting ensures that the procedure for analysing, resolving and possibly reporting to the AP of the data incident will come into force.

Online media monitoring and web care
COMPETING uses the services of Obi4Wan B.V. for online media monitoring and web care. The purpose is to provide information to people who make their requests known through social media and to monitor the reputation of COMPETING. Obi4Wan contains an online search engine that searches public data from sources such as Facebook, Twitter, other social media, blogs, news sites and forums. This is done on the basis of the name of the COMPETING organisation and associated entities. Obi4Wan collects these public data but does not use it for its own purposes. As a processor of personal data, Obi4Wan is therefore responsible for data protection.

Cookies
All COMPETING websites contain cookies. Cookies are small text files which are stored on your computer, tablet or phone when you visit a specific web page. If COMPETING processes personal data (such as an IP address), COMPETING complies with applicable privacy legislation.

COMPETING strives to keep the overview below as up-to-date as possible. For third-party cookies, this third party determines the content of the cookie and how long the cookie is stored. We refer you to the privacy policy of the relevant third parties for more information about these cookies.

Functional cookies
Functional cookies provide more user-friendly websites and can be placed without permission. By placing functional cookies, COMPETING ensures that we recognize you on a subsequent visit to our website, we track web statistics and resolve errors. These types of cookies make your (next) visit to our websites easier and more efficient. These cookies are stored for a maximum of 1 year.

Analytical cookies
Analytical cookies are used to improve our websites based on the behaviour of visitors. With the information obtained we can see for example which parts of the websites are viewed (less) well. This way we can ensure that particular pages can be found easily or better. Some analytical cookies may be placed without permission. For other analytical cookies, explicit permission is required. Analytical cookies are stored for a maximum of 26 months.

COMPETING uses Google Analytics to keep track of how users access and use our websites. This ensures that we can adapt and improve our websites. For this purpose, your data will be anonymously shared with Google Analytics. Therefore, COMPETING has signed a processor agreement with Google. When sharing your data, part of your IP address will be withheld by us for your privacy. As such, your data can not be traced back to you and cannot be used by third parties. Also, the ‘Data sharing with Google Analytics’ feature is turned off.

Deleting cookies
You can automatically or manually delete cookies in your internet browser. It is also possible to adjust the settings in your internet browser so that you receive a message when a cookie is placed. Another possibility is set up that certain cookies cannot be placed. For this option, view the help function of your browser.

Amendments
COMPETING reserves the right to make changes to its Privacy Statement. More information about privacy, working with personal data and information security can be found on the website of the Dutch Data Protection Authority.

Questions, comments or complaints
COMPETING greatly appreciates questions and comments regarding this privacy statement. In case you feel this privacy statement is not complied with or if you have a complaint about the use of personal data, you can practice your legal rights as data subject. Please direct your complaints to our data protection officer: competing@stc-r.nl. Furthermore, there is always the possibility to submit a complaint to the Dutch Data Protection Authority via their website.