Privacy statement

Stichting HAS Opleidingen / HAS Education Foundation (hereafter: HAS University of Applied Sciences) respects the privacy of students, course participants, members of staff, prospective students, prospective course participants, visitors and professional partners involved in the education, research, knowledge transfer and company training at HAS University of Applied Sciences. We only process personal data that is necessary for the proper execution of our tasks as a Dutch institute of higher education.
 

The principles

Personal data are data relating to an identified or identifiable natural person. We process personal data in accordance with the relevant laws and regulations, and in a proper and careful manner. In doing so, we ensure an appropriate balance between our interests and your interests as an involved party to make your own choices about your personal data.

HAS University of Applied Sciences, located at Onderwijsboulevard 221 5223 DE, ‘s-Hertogenbosch, The Netherlands, is responsible for the processing of personal data as mentioned in this privacy statement.
 

Contact details

Onderwijsboulevard 221

5223 DE ‘s-Hertogenbosch
The Netherlands

Tel.: +31 (0)888 903 600

www.has.nl/en


The Data Protection Officer for HAS University of Applied Sciences can be contacted by sending an email to:  
privacy@has.nl

 

The purposes for which we process personal data

For students and course participants

HAS University of Applied Sciences processes personal data of its students and course participants in order to meet its obligations as an educational institution, namely to be able to offer students and course participants the best possible education and support them in their learning process. This is reflected in the following activities that we carry out, for example:

  • Organising, planning and carrying out education, research, company training and knowledge transfer
  • Supervising students and course participants
  • Informing students and course participants about relevant matters concerning the facilities for studying and for the students in general, educational matters or other subjects related to HAS University of Applied Sciences
  • Reacting to your questions
  • Handling complaints, objections or disputes
  • Improving the quality of our education and the service we provide
  • Calculating, recording and collecting any outstanding payments
  • Carrying out administration and other internal management activities
  • Fulfilling our statutory obligations, for example regarding administration and storage of data
  • Arranging and carrying out the administration for traineeships and company assignments
  • Sending our newsletters and other communications
  • Tracking your surfing behaviour over various websites to enable us to tune our products and services to your needs
     

For Alumni

HAS University of Applied Sciences processes your personal data in order to be able to continue to carry out its educational task in the best possible way and to keep you informed of all relevant developments. We value our  alumni are the bridge to business and the professional field for which we prepare our students. In addition, we believe it is important for HAS University of Applied Sciences that our alumni stay involved with the university and with each other.

In this context, we carry out the following activities, for example:

  • Sending out questionnaires
  • Sending our newsletters
  • Sending invitations to various activities
  • We may also approach you regarding field research or other questions in relation to the study programmes

If you would prefer to no longer receive mailings or newsletters from us, you can simply unsubscribe by clicking on the unsubscribe link at the bottom of the relevant mailing or newsletter.


For prospective students and prospective course participants

HAS University of Applied Sciences processes your personal data in order to be able to provide you with the information requested about our programmes and courses. We can also send you mailings about our educational activities.

If you would prefer to no longer receive mailings or newsletters from us, you can simply unsubscribe by clicking on the unsubscribe link at the bottom of the relevant mailing or newsletter.


For members of staff

Please refer to the Employees Privacy Statement on the Intranet.


For 3rd parties

(This includes contact persons from, for example, collaboration platforms, suppliers, other educational institutions, research institutions and partner companies.)
HAS University of Applied Sciences processes your data in order to comply with an agreement or to keep you informed of our activities and developments. In this context, HAS University of Applied Sciences may inform you by means of mailings and newsletters about matters that are relevant to you.

 

If you would prefer to no longer receive mailings or newsletters from us, you can simply unsubscribe by clicking on the unsubscribe link at the bottom of the relevant mailing or newsletter.

Which personal data do we process?

HAS University of Applied Sciences processes your personal data because you use our services and/or because you have provided us with this data yourself. In the Processing Register we record which personal data and what type of personal data we process. We do not process more personal data than is necessary for the intended purpose.


Special and/or sensitive personal data processed by us

It is not the intention of our website and/or service to collect data on visitors to our website or users of our service, who are younger than 16 years of age, unless they have permission from their parent or guardian. However, we cannot check if a visitor is over 16. We, therefore, advise parents and guardians to be involved in their child’s online activities in order to prevent data about children being collected without parental consent. If you are convinced that we have collected personal data regarding someone who is under-age without permission, please contact us by sending an email to privacy@has.nl, and we will remove this information.

Data that you share in confidence will only be processed or shared with your permission, or in order to carry out further agreements. This applies, for example, to data regarding a disability. See also our 'Study+policy' on Intranet.


How long do we retain your personal data?

HAS University of Applied Sciences will not keep your personal data any longer than strictly necessary to realise the aims for which the data was collected. We apply the following retention period for these categories of personal data:

  1. Prospective student / prospective course participant
    Retention period: 3 years
  2. Student/course participant
    Retention period: 7 years
  3. Professional relations
    Retention period: 7 years
  4. Third parties
    Retention period: 7 years
  5. Employees
    Retention period: see the Employees Privacy Statement


At the end of the retention period, the data will be destroyed, unless it is intended for historical, statistical or scientific purposes. In that case, the data will be archived.


Access to personal data

Access to stored personal data is protected. Access is limited to the data that individuals need in order to carry out their specific task. This protected access includes, for example, various authorisation profiles of people who are involved in student administration, as well as the teaching and supervision of students and course participants.

Only where necessary for the purposes of carrying out the educational or other agreement you have with us, or in the general interest, or in order to comply with a legal obligation, may we pass on your personal data to others. Organisations with which we exchange personal data include:

- The Dienst Uitvoering Onderwijs (DUO)

- The Dutch Ministry of Education, Culture and Science

 - The Dutch Inspectorate of Higher Education

- Dutch municipalities

- Dutch tax authorities

- Studiekeuze 123 on behalf of the National Student Survey (NSE)

- Internship companies

- Partner institutions in the Netherlands and abroad (for study and internships abroad)

- The Dutch Immigration and Naturalisation Service (IND) on behalf of students in need of a residence permit


Sharing personal data with third parties

HAS University of Applied Sciences does not sell your data to third parties and will only forward this if necessary for the execution of our agreement with you, on the basis of a justified interest on the part of HAS University of Applied Sciences, if this is of vital importance to you, in order to comply with a legal obligation, or in the general interest. With companies that process your data at our behest, we conclude a processor agreement in order to safeguard the proper level of security and the confidentiality of your data. HAS University of Applied Sciences remains responsible for these processing operations.


HAS University of Applied Sciences only discloses personal data to third parties in countries outside the European Union (third countries) if the recipient or the host country can guarantee an adequate level of protection.

In the context of a study or internship abroad, it may be necessary in the context of the implementation of the (educational) agreement between you and HAS University of Applied Sciences for personal data to be provided to third countries without an adequate level of protection. In that case, we will inform you about the information we exchange.


Cookies, or similar technologies, that we use

We use analytical tools such as Google Analytics and Hotjar to process data about your activities on our website, your internet browser and the device you are using. Furthermore, HAS University of Applied Sciences uses functional, analytical and tracking cookies. A cookie is a small file that is saved during the first visit to this website in the browser of your computer, tablet or smartphone. HAS University of Applied Sciences uses cookies with purely technical functionality. These ensure that the website works properly and that, for example, your preferred settings are remembered. These cookies are also used to make the website work well and to optimise it. You can also use buttons to share our articles and videos that you view on our website via social media. For these buttons to function, AddThis and cookies from the social media parties are used, so that they recognise you when you want to share an article or video. For the cookies that the social media sites place and the possible data they collect with them, we refer you to the privacy statements of these parties on their own websites. In addition, we place cookies that keep track of your browsing habits so that we can offer customised content and advertisements. On your first visit to our website, we informed you about these cookies and asked you for permission to place them. You can opt-out of cookies by setting your internet browser so that it no longer stores cookies. In addition, you can also delete all information previously saved via your browser settings.

For further explanation, see: https://veiliginternetten.nl/themes/situatie/cookies-wat-zijn-het-en-wat...
 

Also see the HAS University of Applied Sciences Cookie statement.


Hyperlinks


Our websites contain hyperlinks to sites outside the domain of HAS University of Applied Sciences. This Privacy Statement does not apply to third party websites linked to the HAS University of Applied Sciences websites through links. HAS University of Applied Sciences is not responsible for the content of these sites or the software that you can download from them.
You use these hyperlinks at your own risk.


View, correct, or remove data

You have the right to view, correct or delete your personal data. You also have the right to withdraw your consent to the processing of your data, or to object to the processing of your personal data by HAS University of Applied Sciences, and you also have the right to data portability. This means that you may submit a request to us to send any personal data we have about you in a computer file to you or to another organisation specified by you.

You can send a request to view, correct, remove or transfer your personal data, or request to withdraw your consent to the data processing, or to object to the processing of your personal data to privacy@has.nl. To be certain that the request has been made by you, we may ask you for proof of identity.

We will respond to your request as soon as possible, but within four weeks. HAS University of Applied Sciences also wants to point out that, if you believe that we have not reacted adequately to your request, you have the possibility to file a complaint with the Data Protection Officer of HAS University of Applied Sciences by sending an email to privacy@has.nl or, if you believe the issue has not been resolved adequately, you may contact the national supervisory authority, the Dutch Data Protection Authority. This can be done by clicking on the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-perso...


How we secure personal data


HAS University of Applied Sciences takes the protection of your data seriously and takes appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification of your data.


Procedure for reporting security incidents and data leaks

A security incident or data breach may occur at HAS University of Applied Sciences, but also at a processor engaged by HAS University of Applied Sciences. It is essential that this is reported immediately. Depending on who is reporting the incident, this can be done in one of the following ways:

  • The notifier is an employee/student/course participant/visitor

They must report a security incident or data breach directly to the Servicepoint via the emergency telephone number +31(0)88 890 36 63, or at the service desk (both accessible during working hours), or via the self-service point on the Intranet (during and outside working hours). The manager concerned should also be informed immediately. For employees, this is the manager of their study programme or department, for students it is the study programme director, and for course participants it is the director of HAS Knowledge Transfer and Business Training. For visitors, the service desk/emergency line/Servicepoint intranet is sufficient

  • The notifier is a data processor

A data leak may occur at a processor engaged by HAS University of Applied Sciences. In accordance with the processing agreement, the processor should report the data leak to HAS University of Applied Sciences, which will then report the data leak to the Dutch Authority for Personal Data

  • Other notifiers

Other notifiers can report a possible data leak by sending an email to privacy@has.nl

The above information has been taken from the data leak procedure, which is described further in the Privacy Policy of HAS University of Applied Sciences.
 

About this Privacy Statement

This is the Privacy Statement of HAS University of Applied Sciences. We reserve the right to amend this Privacy Statement. Any changes will be made on this page. This page was last updated on 3 October 2019.