Privacy and cookie statement UU Sales Service

In this Privacy Statement we explain what happens to your personal data and how we handle your personal data when you purchase a product via this website.

Who is responsible for processing my personal data?

Utrecht University (UU) is the data controller within the meaning of the General Data Protection Regulation (GDPR) and is responsible for the processing of your personal data as described in this Privacy Statement.

For what purposes are my personal data processed?

The personal data that Utrecht University collects from you will be used to enter into an agreement with you. You will not be able to buy a product or service from us without it.

From whom does Utrecht University collect personal data on this website?

We only collect personal data from individuals who buy a product or service from us via the UU Online Sales website.

Which personal data will be collected from me on this website?

The following personal data are collected at the check-out of the UU Online Sales website:

Name
Email address
Telephone number
Address

Will my data be shared with third parties?

Yes, your data are shared with one third party: Intracto Group NV (Intracto). Intracto maintains the UU Online Sales web shop on behalf of Utrecht University, as part of its performance of an agreement with Utrecht University. We have made agreements with this data processor to ensure the confidential and careful handling of personal data. These agreements are laid down in the Data Processing Agreement.

The Intracto privacy statement is available here: https://www.intracto.com/nl-nl/privacy-policy

Your personal data will not be rented or sold to third parties.

Utrecht University provides personal data to enforcement authorities and anti-fraud organisations when necessary to comply with a legal obligation.

Will my data be provided to countries outside the EU too?

No. The Intracto head office is located in Belgium, where it processes all of the personal data collected. We have entered into a data processing agreement with Intracto. A number of safeguards have been incorporated into the data processing agreement to ensure that your personal data are safe at all times.

How long will my data be stored?

If you enter into a transaction, we will store your data in line with accounting rules, but no longer than necessary for this purpose.

How can I access or arrange the rectification or erasure of the data collected via this website?

You are entitled to submit an access or rectification request to Utrecht University. When doing this, please indicate clearly that this request relates to an access or rectification request based on the GDPR in relation to the UU Online Sales website. You may also request that your data be erased, although this is only possible insofar as this allows Utrecht University to continue to fulfil its legal obligations, such as the legal retention period. Send your request to: privacy@uu.nl, stating the nature of your request in the subject line.

Questions

If you have any specific questions or comments about our Privacy Statement based on this information, please do not hesitate to get in touch with us. You may either use the contact form on the website or send a message to: privacy@uu.nl. The Data Protection Officer at Utrecht University can also be reached via this email address.

Cookies

Only functional cookies are used on the website of UU Online Sales. Functional cookies help to make a website more usable, by facilitating basic functions like page navigation and access to secure parts of the website. The website would not work properly without these cookies.