The EXCITE Network handles personal data with care and acts within the limits of the law, i.e. The General Data Protection Regulation (GDPR).
Responsible party and responsibility
The EXCITE Network is the responsible party within the meaning of the GDPR. The EXCITE Network believes it is essential that the personal data of its students, researchers, employees and visitors are handled and protected with the utmost care. We also want to be open and transparent about the way in which your data is processed by us. That is why we have explained this process in detail below. Our first priority is to comply at all times with the requirements set out in the GDPR.
For what purposes does the EXCITE Network process your personal data?
The personal data collected from you are used by the EXCITE Network for operational management and for the proper performance of its legal tasks and duties for communication and research.
Whose personal data is collected by the EXCITE Network?
In the above-mentioned processes, the EXCITE Network collects data from different categories of data subjects. These include:
• Visitors to the website(s)
The EXCITE Network offers various activities that can only be carried out by using your personal data. Examples of such data include your email address for the purpose of sending a newsletter or promotional emails or your study characteristics for conducting research. Your data will only be used if you give explicit permission for this. You will always be informed of the purposes for which your data will be used, what type of data this concerns and to whom these data will be provided. If you have granted the EXCITE Network permission for using your personal data, you may always withdraw this permission at a later date.
What kind of personal data does the EXCITE Network collect?
In each process, different types of personal data are collected. The most common data are:
• Email address
• Interaction data (e.g. cookies or information received when you contact us)
• Images (photos and videos)
• Research specialism by keywords
• Information like messages to fellow researchers posted on the website by users voluntarily
• Surf and click behaviour
The EXCITE Network collects (personal) data directly from you, but in some cases the EXCITE Network also receives personal data via third parties, insofar as this is in accordance with the law.
Granting and withdrawal of permission
How does the EXCITE Network ensure the confidential handling of personal data?
The EXCITE Network treats personal data as confidential. We take appropriate technical and organizational measures to protect personal data. The EXCITE Network will only share personal data in accordance with this Privacy Statement and only with third parties if this is lawful and done with care.
Data sharing with third parties
Under the instructions of the EXCITE Network, third parties may provide certain parts of the services required for the performance of an agreement. The EXCITE Network makes agreements with these data processors to ensure the confidential and careful handling of personal data. These agreements are contractually laid down in so-called ‘Data Processor Agreements’.
Your personal data will not be rented, sold or otherwise shared with or provided to third parties. The EXCITE Network may share your (personal) data with third parties if you have given permission for this yourself or if this is necessary for the performance of the agreement.
The EXCITE Network provides personal data to enforcement authorities or anti-fraud organizations when this is necessary for complying with a legal obligation.
Transfer of your data outside the EU
The EXCITE Network does not share personal data to countries outside the EU.
How long are the data stored?
The EXCITE Network stores your personal data in accordance with the GDPR and the EXCITE Grant Agreement (no. 101005611). The data will not be stored longer than is strictly necessary to achieve the purposes for which the data have been collected.
How can you access, rectify or erase your data?
You are entitled to submit an access or rectification request to the EXCITE Network. When making this request, please indicate clearly that this relates to an access or rectification request based on the GDPR. You may also request that your data be erased, although this is only possible insofar as this allows the EXCITE Network to continue to fulfil its legal obligations, such as the legal retention period. Please note that you may be asked to provide a copy of a valid ID so that your identity can be verified.
You may also submit a complaint to the Dutch Data Protection Authority regarding the use of your data.
To optimally protect your personal data against unauthorized access or unauthorized use, the EXCITE Network applies appropriate security technology. Any apparent or actual misuse of data will be reported to the relevant law enforcement authorities. In addition, the EXCITE Network takes organizational measures to protect personal data against unauthorized access.
Cookies and click behaviour
General visitor data are stored on our website, such as the most requested pages. The purpose of collecting these general visitor data is to optimize the layout of the website for you. The EXCITE Network uses various tools to make the website function optimally, improve user-friendliness and actively collect feedback from users.
Two types of cookies are used on the EXCITE Network website: functional cookies and analytical cookies. Functional cookies help to make a website more usable, by facilitating basic functions like page navigation and access to secure parts of the website. The website would not work properly without these cookies. Analytical cookies help website owners understand how visitors use their website, by collecting and reporting on anonymous data.
Do you have any specific questions or comments about our Privacy Statement based on this information? If so, do not hesitate to get in touch with us. You may use the contact form on the website.