“STAR, Studievereniging verbonden aan de RSM Erasmus University” (hereafter: STAR) operates multiple websites. These include but are not limited to rsmstar.nl; secresearch.nl; smw.rsmstar.nl; consultancycastle.nl. This Privacy Statement is applicable to all the websites STAR operates. STAR processes personal data for its websites. In this Privacy Statement, we inform you of the purposes for which personal data are processed and how you can exercise your privacy rights, and provide other information that could be important for you. This Privacy Statement applies to all activities of STAR, including the activities via the website. This Privacy Statement provides the most relevant information on each subject.
STAR treats personal data with care and acts within the limits of the General Data Protection Regulation (GDPR).
For most of the purposes described below, STAR is ‘controller’ according to the definition in the EU’s General Data Protection Regulation (GDPR). This means STAR determines the goals and means for the processing of personal data of all categories of data subjects. We consider it to be essential that everyone’s personal data is handled and secured with the greatest care. We also want to be transparent about the way in which we process your data.
STAR uses your personal data that we gather for its operations The main purposes for which STAR processes personal data are:
STAR processes personal data via its various websites, such as personal data acquired via contact forms. This takes place on the basis of permission or on the grounds of the justified interests of STAR. All processes in which personal data are processed are recorded in a register of processing activities. This gives STAR a complete and up-to-date overview of all data processing processes.
In the processes referred to above, STAR gathers data from different categories of data subjects. These are:
Different personal data are gathered in each process. The most common data are:
|Personal identification data||Name, date of birth|
|Contact details||Email address, home address, phone number|
|Financial data||Bank account number, payments|
|Educational data||Study phase, degree program|
|Application data||Curricula Vitae, resumés, grade transcripts|
|Digital data||Cookies, IP addresses, account logs|
STAR gathers (personal) data directly from you, and where applicable, STAR also receives personal data from third parties, in as far as this is in compliance with the law.
STAR offers various activities that can only be performed by making use of your personal data. These could include your e-mail address, in order to send newsletters and/or promotional e-mails. If you grant STAR permission to use personal data, you can always withdraw this permission at a later date.
STAR treats personal data as confidential. STAR takes appropriate technical and organizational measures to protect personal data. STAR shares personal data only in accordance with this Privacy Statement and with third parties only if this is warranted and takes place with care.
On the instructions of STAR, third parties may provide certain parts of the services for the execution of an agreement. STAR contracts agreements with these processors in order to ensure that personal data are handled confidentially and with due care. These agreements are contracted in ‘processor’s agreements’.
Your personal data will not be leased, sold or shared in any other way with or provided to third parties. STAR may share your (personal) data with third parties if, for example, you have personally granted permission for this or if this is necessary for the execution of the agreement.
STAR provides personal data to enforcement authorities or fraud control organizations if this is necessary in order to comply with a statutory obligation.
STAR retains the right to share your personal data with the following third parties:
In some cases, third parties may be located outside of the European Union. In these cases, STAR will take appropriate measures to protect personal data. For example, in the following situations: in case of a trip abroad where STAR has to share your data to arrange accommodation or flights.
STAR stores your personal data in compliance with the GDPR. The data are not stored for longer than is strictly necessary in order to realize the objectives for which the data are gathered. Please contact us for more information on our Data Retention Policy.
You can send a viewing or correction request to STAR. Clearly state that this concerns a viewing or correction request pursuant to the GDPR. You can also request the deletion of your data, but this is only possible in as far as STAR can still comply with its statutory obligations, such as the statutory term for storage. Bear in mind that you may be required to provide a copy of an identity document in order to verify your identity. You can make a secure copy of your proof of identity quite simply with the government ‘Kopie Id’ app which you can download in the app store.
You also have the right to submit a complaint concerning the use of your data to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
General visitor data, such as the most commonly requested pages, are recorded on our website. The purpose of collecting this general information on visits to the website is to optimise the design of the website for you. STAR uses different tools for the optimal functioning of the website and to improve its user-friendliness, and in order to retrieve active feedback from users. Read more about the cookies that STAR uses here.
Do you still have any specific questions or comments regarding our privacy statement after reading this information? Then please feel free to contact us by sending an email to firstname.lastname@example.org.
This privacy statement is based upon versions by the Erasmus University Rotterdam and Rotterdam School of Management. Exctracted from https://www.eur.nl/en/disclaimer/privacy-statement on 10 February 2020; and https://www.rsm.nl/about-rsm/privacy-statement/ on 9 March 2020.
Last updated: 29 May 2020