This privacy notice relates to people making enquiries about studying at Wittenborg University of Applied Sciences, whose enquiry is handled by the Admissions Team and the Registrar's Office.
Throughout this privacy notice, the terms “we” and “us” refer to the Admissions Team.
As part of enquiry management, Wittenborg University of Applied Sciences collects and processes personal data relating to you. The university is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.
If you are under the age of 13, you should not provide us with personal information. This is because the service provided by the Admissions Team is directed at students aged 13 and over.
We can usually resolve enquiries without you needing to give us sensitive information.
Data Controller
The Data Controller is the Wittenborg University of Applied Sciences, Laan van de Mensenrechten 500, Apeldoorn, The Netherlands.
If you would like information about how the university uses your personal data please contact dataprotection@wittenborg.eu.
Data Protection Officer
The Data Protection Officer is responsible for advising the university on compliance with data protection legislation and monitoring its performance against it.
If you have any concerns regarding the way in which the university is processing your personal data, please contact Denis Schuh, Manager GDPR, dataprotection@wittenborg.eu.
What information does the university collect?
Information held about you may include:
- Your name and your email address.
- Your date of birth, we need your date of birth only to ensure we have a unique record for you, we will not use it for anything else.
- If you are a current applicant, we may request additional information from you, for example, your applicant ID number (s-number), to enable us to identify your application record correctly.
- Although our telephone system collects telephone numbers from incoming calls, these details are not linked to a named individual. We will only record your telephone number, if you have provided these details as alternative means to contact you for the purpose of resolving your enquiry.
Where personal information is collected on our website, for instance through a web form, please read our website privacy notice.
Why do we collect your data?
We collect and process your information to respond to your enquiry with information you have requested about the university.
We may also use the information you provide us:
- to assess our admissions service
- to better understand your needs and inform improvements to aspects of our service.
Legal basis for holding your data
The Admissions Team collects your data on the basis of 'legitimate interest' to enable us to provide you with the information you have requested in your enquiry.
How your data is held?
Depending on how you contact us your personal data could be held within one or more of our enquiry management systems:
- Office365 within our Admissions Team's customer relationship management system
- Twak.to, our live chat platform
- OSIRIS, the enquiry management system at the university used by current students.
All data relating to your enquiry is held within the European Economic Area and will not be transferred outside of the EEA.
Who has access to data?
These systems are accessed by staff within the Admissions Team to manage and respond to enquiries.
We may share your details with other teams within the university only for the purposes of resolving your enquiry. These teams may use a range of systems to store and process data, including, but not limited to: Outlook; OSIRIS; and the university’s admissions portal.
We work with organisations who help us to process data. Some personal details are held on:
- Our customer relationship management database hosted by a company called OSIRIS
- Our live chat platform hosted by a company called twak.to.
We also share data from enquirers for double degree programmes with the University of Brighton, with the University of Brighton's admissions team (course enquiries team).
How does the university protect data?
The university takes the security of your data seriously. It has internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.
How long we will keep your data?
The Admissions Team will keep your data for three years. This enables us to match your enquiry should you contact us with a further enquiry and also provides management information to allow assessment of our enquiries service.
If your enquiry is shared with trusted university services, such as the disability and dyslexia team, in order to help you decide whether studying with us is best for you, then your details may be retained by those teams under their retention policies.
If you go on to apply or study with us, relevant teams in the university may retain your enquiry under application and student privacy policies.
Data subject's rights: access, rectification, erasure, restriction of processing, objection to processing, right to data portability
As a data subject, you have a number of rights. You can:
- access and obtain a copy of your data via a subject access request
- require the university to change incorrect or incomplete data
- require the university to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing
- object to the processing of your data, in certain circumstances, for example, where the university is relying on its legitimate interests as the legal ground for processing; or for direct marketing purposes
- ask the university to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override the university's legitimate grounds for processing data
- withdraw your consent at any time, where we have requested and obtained your consent
- where our lawful basis is consent or performance of a contract we will allow portability of your data.
If you would like to exercise any of these rights, please contact Denis Schuh, Manager GDPR, dataprotection@wittenborg.eu.
The existence of automated decision making, including profiling, information about the logic involved, including the significance and the envisaged consequences of such processing for the data subject
We will not use your personal data for automated decision making or profiling about you as an individual.
The right to complain to the Dutch DPA
If you are unsatisfied with the way the university has processed your personal data, or have any questions or concerns about your data please contact Denis Schuh, Manager GDPR, dataprotection@wittenborg.eu.
If we are not able to resolve the issue to your satisfaction, you have the right to apply to the Dutch DPA.
Privacy notices
Changes to this notice
We keep our privacy notices under regular review. This privacy notice was last updated May 24 2018.
Other privacy notices
We do our utmost to protect your privacy. Please be aware that other privacy notices exist within the university in respect of data held, including but not limited, to activities in relation to your enquiries, application, current students, alumni and use of our website.