Privacy and cookie statement UU Sales Service

In this Privacy Statement we explain what happens to your personal data and how we handle your personal data when you purchase a product via this website.

Who is responsible for processing my personal data?

Utrecht University (UU) is the data controller within the meaning of the General Data Protection Regulation (GDPR) and is responsible for the processing of your personal data as described in this Privacy Statement.

For what purposes are my personal data processed?

The personal data that Utrecht University collects from you will be used to enter into an agreement with you. You will not be able to buy a product or service from us without it.

From whom does Utrecht University collect personal data on this website?

We only collect personal data from individuals who buy a product or service from us via the UU Online Sales website.

Which personal data will be collected from me on this website?

The following personal data are collected at the check-out of the UU Online Sales website:

  • Name
  • Email address
  • Telephone number
  • Address

Will my data be shared with third parties?

Yes, your data are shared with one third party: Intracto Group NV (Intracto). Intracto maintains the UU Online Sales web shop on behalf of Utrecht University, as part of its performance of an agreement with Utrecht University. We have made agreements with this data processor to ensure the confidential and careful handling of personal data. These agreements are laid down in the Data Processing Agreement.

The Intracto privacy statement is available here:

Your personal data will not be rented or sold to third parties.

Utrecht University provides personal data to enforcement authorities and anti-fraud organisations when necessary to comply with a legal obligation.

Will my data be provided to countries outside the EU too?

No. The Intracto head office is located in Belgium, where it processes all of the personal data collected. We have entered into a data processing agreement with Intracto. A number of safeguards have been incorporated into the data processing agreement to ensure that your personal data are safe at all times.

How long will my data be stored?

If you enter into a transaction, we will store your data in line with accounting rules, but no longer than necessary for this purpose.

How can I access or arrange the rectification or erasure of the data collected via this website?

You are entitled to submit an access or rectification request to Utrecht University. When doing this, please indicate clearly that this request relates to an access or rectification request based on the GDPR in relation to the UU Online Sales website. You may also request that your data be erased, although this is only possible insofar as this allows Utrecht University to continue to fulfil its legal obligations, such as the legal retention period. Send your request to:, stating the nature of your request in the subject line.


If you have any specific questions or comments about our Privacy Statement based on this information, please do not hesitate to get in touch with us. You may either use the contact form on the website or send a message to: The Data Protection Officer at Utrecht University can also be reached via this email address.


Only functional cookies are used on the website of UU Online Sales. Functional cookies help to make a website more usable, by facilitating basic functions like page navigation and access to secure parts of the website. The website would not work properly without these cookies.

Privacy and Cookie Statement

This Privacy Statement was last modified on 1 April 2021. Utrecht University reserves the right, where necessary, to make changes to the Privacy Statement.

If you would like to read the general privacy statement for Utrecht University, click here to view it. The policy document explains how Utrecht University handles the processing of personal data.