Privacy Statement for alumni

Personal data are pieces of information that can enable another person to identify you. There are many kinds of personal data, the obvious ones being someone's name, address and place of residence. Those data relate directly to a particular person or can be traced back directly to that person. There are also indirect personal data. These are data that say something about a person when combined with other data. In other words, they can be traced back to a person indirectly. Examples include your postal code combined with other data that can be traced back to you indirectly.

Hanze UAS processes your personal data for the following purposes:

• to sign up and register students for alumni associations
• to maintain contacts and to be able to contact you and respond to questions put by you
• to provide and/or send information about activities, degree programmes, training courses, training or further training programmes, conferences and events, and other products and/or services of Hanze UAS
• to keep an up-to-date overview of information sent
• to register and/or record consent given by alumni
• to raise funds among alumni and maintain relationships with alumni
• to send digital newsletters or other relevant information about products and services to alumni
• to improve the AR website and services
• to meet legal obligations, including the requirement to keep records and the retention obligation
• to improve the Hanze UAS website and services

We will not continue to process your personal data for a purpose that is incompatible with these purposes.

As far as Hanze University of Applied Sciences Groningen is concerned, alumni serve not only as its ambassadors but also as an important source of contacts, knowledge and expertise. During your studies at Hanze UAS, you will have learned a lot and maintained a constant focus on your development. But things do not stop when you graduate – the process keeps going. We want to keep contributing to your development, even after your studies are complete. Alumni have access to a variety of networking and other events, can receive employment updates for relevant sectors and can sign up for the latest information on further education options via HanzePro.

To stay in contact with you, we process certain personal data of yours in HanzeCRM. This is an application in which we process your data. You can also access HanzeCRM via your Alumni account. That way, you can see for yourself which of your data we process. You can also amend your data, such as your address.

The following personal data are processed in HanzeCRM:

• first and last name
• degree programme
• start year and end year of your degree programme
• student ID number
• date of birth
• email address
• postal address
• telephone number

and any other information you disclose to us. Details of any applications, for a newsletter, course or event, for instance, are also recorded.

Hanze UAS processes your personal data based on one of the following bases:

a) You have given consent to the processing of your personal data.

b) Processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract.

c) processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require protection of personal data, in particular where the data subject is a child.

Processing of special categories of personal data takes place only if the conditions specified in the law are met, or if any of the grounds for exception mentioned in the applicable legislation and regulations apply.

We are keen to maintain contact with our graduates. We regard you as ambassadors and relations of Hanze UAS. Maybe you would like to take a course or master's programme with us. Perhaps you would be interested in giving a guest lecture for a study programme. It is also possible that the company you are working at needs trainees from Hanze UAS. Contacts with alumni in the professional field are therefore very valuable to Hanze UAS. It is important that we retain certain data so that we can remain in contact with you after you graduate. Consequently, we ask you during your fourth academic year to register as an active alumnus and to update your contact information. You can update your data yourself in HanzeCRM or sign up using your LinkedIn account. You can also arrange consent to newsletter subscriptions or cancellations in HanzeCRM.

You may submit a request if you think your personal data should be removed entirely. See the section headed ‘what are your rights as a data subject’ for information in this regard.

We will not disclose your personal data to third parties, unless a legal obligation requires us to do so. Your data will be processed internally only for teaching purposes, such as arranging courses or events or sending newsletters.

Hanze UAS will not sell your personal data to third parties and will only provide these data if this is necessary for the performance of our agreement with you or to comply with a legal requirement.

We will conclude a processing agreement laying down agreements on, for example, the obligations of the data controller and the processor, the retention period, rights of data subjects and liability with companies that process data on our behalf. Hanze UAS will remain responsible for those processing operations and stipulate that the processor must secure those data adequately with organisational and technical measures.

Hanze UAS follows the basic principle that personal data will be processed within the European Economic Area. Should it be necessary to process data outside the EEA, Hanze UAS will make a Data Transfer Impact Assessment (DTIA) or what is known as a risk analysis for that specific transfer and – if necessary – take adequate measures to be able to guarantee an appropriate level of protection.

Automated decision-making means that decisions are made by computer programs or systems without any human intervention Hanze UAS will not take any decisions based on automated processing operations that could have an impact on you as alumni.

We take the protection of your personal data seriously and have taken appropriate measures to prevent misuse, loss, unauthorised access, inappropriate disclosure and unauthorised changes. This way, your data will be accessible only by persons authorised to have access by virtue of their positions or duties. The information security and privacy policy is based on the Royal Netherlands Institute of Chartered Accountants (NBA) Maturity Model of the Dutch professional association for IT auditors (NOREA) and the ISO27001/2:2017 standard. If you believe that your data are not being adequately protected or there are indications of misuse, please contact:

[email protected]

You are entitled to inspect, correct or delete your personal data. You are also entitled to withdraw your consent for the processing of data or to lodge an objection to the processing of your personal data by Hanze UAS.

You have the right of data portability, and the right to have your data removed from our employee records system in the customary way and then have them processed elsewhere, for example, with your new employer.

You can submit a request for the inspection, correction, deletion or transfer of your personal data, a request to withdraw your consent or an objection to the processing of your personal data to [email protected]. We will respond to your request as soon as possible but within four weeks at the latest.

Hanze UAS would also like to point out that you have the possibility to submit a complaint to the national supervisory authority, the Dutch Data Protection Authority.