Privacy is important. It gives us freedom and protects our personal lives. Privacy is extremely significant for the arts. After all, the arts and freedom are inextricably intertwined. ArtEZ therefore handles personal data with great care in accordance with the terms and conditions of the European Privacy Act, the General Data Protection Regulation (GDPR). This privacy statement explains what personal data ArtEZ collects, for what purposes, on the basis of what, how the rights of students, members of staff and others are guaranteed, and more.
ArtEZ may process various categories of personal data, including:
ArtEZ may use personal data for the following purposes:
ArtEZ processes personal data only on the basis of one of the following principles:
Special categories of personal data will only be processed if, in the specific case, there is an exception to the prohibition on processing special personal data. These exceptions include the following:
ArtEZ provides personal data to third parties because of a statutory obligation or for the performance of an agreement. These parties process the data in accordance with their published privacy statement. External parties include:
Furthermore, ArtEZ uses the services of companies and institutions that require personal data from ArtEZ for this purpose. ArtEZ enters into data processing agreements or other agreements with these companies and institutions to safeguard the privacy of the data subjects. ArtEZ will not provide more personal data than is necessary for the provision of a service, unless it is obliged to do so by law or you have given your permission to do so.
The ArtEZ website may contain hyperlinks to websites of third parties, which may be subject to a different privacy statement. ArtEZ has no control over other websites and is not liable for their content or operation.
ArtEZ will not provide personal data to countries outside the European Economic Area (EU Member States, Norway, Iceland and Liechtenstein), unless you are there for training, an internship as part of your course or short course or work for ArtEZ.
ArtEZ does not use profiling or automated decision-making.
ArtEZ has taken appropriate technical and organisational measures to protect personal data against loss or unlawful processing. These include encryption and pseudonymisation of personal data, encrypted communications, confidential treatment of personal data and use of a firewall. Personal data is stored in locations that are physically and technically secured. Students and members of staff can report security incidents to the Data Breach Notification Centre, after which the incident is investigated and, if necessary, measures are taken.
As an educational institution, ArtEZ uses Eduroam's Wi-Fi network. Information about your connection and computer or telephone is only processed to establish the Wi-Fi connection.
ArtEZ has CCTV on its sites and in its buildings. Visitors are reminded of this with text and images. ArtEZ uses these images to guarantee the safety of its students, members of staff and other visitors and for the security of its buildings and grounds.
ArtEZ will retain your personal data no longer than necessary and only for the purpose of processing. The duration depends on the type of personal data. Any applicable statutory retention periods will be observed. If statutory and agreed periods differ, the longest retention period will be used. If you would like to have your personal data removed sooner, you can submit a request to this effect.
As with other institutions, you have various rights at ArtEZ that help protect your privacy.
You have the right to check what personal data ArtEZ processes about you.
You have the right to correct or delete your personal data if your data is incorrect, incomplete or if the processing is not or no longer justified.
You have the right to object to certain processing of your data on account of your situation or position. Your objection may succeed if the processing is not based on your consent, the performance of an agreement concluded with you, a statutory obligation or the protection of a vital interest of you or others.
If you object to ArtEZ processing personal data about you in order to inform you about ArtEZ's activities, ArtEZ will always meet this objection. If you object to a different type of processing of your personal data, ArtEZ will ascertain whether your objection can be met. If your interest outweighs ArtEZ's interest in the further processing of your personal data, ArtEZ will stop processing your personal data. If ArtEZ thinks it has a more important legitimate interest in continuing to process your personal data, this will be explained.
If ArtEZ processes your personal data on the basis of your consent, you can always withdraw it. ArtEZ will cease processing the personal data based thereon from that moment. Previous processing remains lawful.
You may have the right to restrict the processing of your personal data. You can invoke this right if you have submitted a request for correction or objection, if your personal data should be deleted but instead of being deleted you request the continuation or restriction of the processing of your data, or if ArtEZ no longer needs your personal data but you still need it in connection with legal proceedings.
If we process personal data about you on the basis of your consent or an agreement concluded with you, you have the right to receive the digital data you have provided back in a common file format. You are then free to forward that data to another party.
If you wish to exercise your rights, please contact ArtEZ's Data Protection Officer. See Supervision and questions.
ArtEZ will assess your question or request individually. If your request cannot be complied with, this will always be motivated. ArtEZ will in principle respond to your question or request within one month. If it takes more time to answer it, for example because of the number of requests received or their complexity, you will be notified. You will in any event receive an answer within three months. No fees will be charged for the exercise of your rights, except in the event of abuse.
ArtEZ may ask you to provide proof of identity before your request is processed, which will prevent personal data falling into the wrong hands, changes being wrongly made to your personal data or the method of processing being wrongly adjusted.
ArtEZ has a Data Protection Officer, who advises on privacy legislation and supervises compliance within ArtEZ. The Data Protection Officer is independent and reports to the Executive Board. The Data Protection Officer is also the point of contact for ArtEZ data subjects, such as students and members of staff, and the national supervisor, the Dutch Data Protection Authority.
If you have any questions or requests concerning the privacy regulations and your privacy rights, please contact the Data Protection Officer:
by email: firstname.lastname@example.org
or by post: PO Box 49, 6800 AA Arnhem.
You can also lodge a complaint about the processing of personal data by ArtEZ with the Personal Data Authority. Her contact details can be found on her website.
The privacy statement of ArtEZ has been adopted by the Executive Board, on advice of the Participation Council, and has been in force since 25 May 2018. The privacy statement is subject to change. You can always find the most recent version on this website.