ROA Privacy Statement

  • Protecting our privacy is important to Maastricht University (UM) and UM therefore treats your data with care. UM is the controller of your personal data. This privacy statement explains how UM handles personal data.

    This privacy statement relates specifically to the activities carried out by the UM Research Centre for Education and the Labour Market (ROA). UM also has a general privacy statement, which you can find at www.maastrichtuniversity.nl. This general privacy statement covers personal data not specifically mentioned in the ROA privacy statement. For additional information, reference may be made to this general privacy statement throughout this text.

    Contact details

    If you have a query about this privacy statement, if you want to know more about how UM handles personal data, or if you have a complaint, please contact:

    Maastricht University
    Attn. Data Protection Officer
    Postbus 616, 6200 MD Maastricht
    privacy@maastrichtuniversity.nl

    You can also contact UM’s Data Protection Officer directly by emailing fg@maastrichtuniversity.nl.

  • What personal data does ROA process?

    ROA may process the following personal data as part of its activities:

    • Name
    • Address
    • Country
    • Gender
    • E-mail address
    • Data included on surveys.

    The aforementioned surveys are always associated with ROA's primary research field: education and the labour market.

    ROA has access to the personal data you include on surveys. In some cases, ROA may receive your contact details from a third party, but only if you have given that party permission to share this information with ROA.

    Sensitive personal data

    Sensitive personal data is data that is special in nature. This may include data that reveals your race or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or sexual orientation. The term sensitive personal data also includes data about your health, genetic data or biometric data through which you can be identified (e.g. a fingerprint).

    ROA only processes sensitive personal data if legally permitted to do so, if you have made this data publicly available, or if you have explicitly consented to the processing of this data.

    While processing sensitive data is not the objective of the activities carried out by ROA, this may happen incidentally; for example, when you share information as part of a survey. ROA always takes the utmost care in handling personal data.

    Purposes

    ROA processes the aforementioned personal data for the purpose of conducting research in the field of education and the labour market.

    Exclusively for researchers: ROA processes the names of researchers with the aim of publishing research studies on its website.

    Lawful basis for the processing of personal data by ROA

    Whenever ROA processes your personal data, it does so with a lawful basis for processing. A lawful basis for processing is the grounds for processing personal data.

    Most of the personal data ROA obtains is only processed with your prior consent. You have the right to withdraw this consent at any time; however, this withdrawal is not retroactive.

    ROA may only receive personal data from third parties if you have given them explicit permission to do so or in the context of scientific or statistical research that falls under GDPR legislation.

    Exclusively for researchers: ROA may publish the names of researchers on its website in accordance with UM's public duty to conduct scientific research.

    Retention periods

    ROA does not keep personal data for longer than is necessary to achieve the purpose of processing or to meet statutory retention requirements.

    If you indicated that you can be approached for follow-up research, your contact details will be saved for a maximum of ten years, unless specified otherwise in advance.

    Recipients of personal data

    ROA has taken steps to ensure that only those individuals who need to process your personal data have access to it

    Your personal data will not be shared with third parties, unless ROA deems this is necessary for carrying out its activities. This may include third parties that enable ROA to carry out activities for which your personal data is relevant. ROA has established written agreements with these parties with respect to processing and safeguarding personal data.

    DANS

    Research data is saved by Data Archiving and Networked Services (DANS), the Dutch institute for permanent access to research information. DANS is part of the Royal Netherlands Academy of Arts and Sciences (KNAW) and the Netherlands Organisation for Scientific Research (NWO).

    External firms

    ROA does not conduct all of its research in-house; sometimes external research firms are hired to carry out a research study. ROA has established written agreements with these parties with respect to processing and safeguarding personal data.

    External researchers

    ROA collaborates with researchers from other institutes and companies and may share personal data with them in the context of joint research. ROA has established written agreements with these parties with respect to processing and safeguarding personal data.

    Clients

    If ROA conducts research on behalf of an external client, the research data may be shared with this client. In this case, you will be informed of this before the research commences.

    Website

    The ROA website uses cookies. Cookies are small text files that are placed on your computer, mobile phone or tablet when you consult pages on the ROA website. The next time you visit the ROA website, the information stored in this cookie can be read by UM’s servers. Like virtually all websites, the ROA website uses cookies to offer you the best possible user experience when you visit our website.

    The ROA website uses functional cookies to ensure the smooth operation of its website.

    Whenever you visit the ROA website, a secure connection is established between your device and the ROA website.

    Your rights

    Privacy legislation gives you a number of rights in relation to your personal data. Your rights, as well as how to exercise them, are outlined below. The general privacy statement on www.maastrichtuniversity.nl contains more information about these rights and how to exercise them.

    You have the right to view, edit, and delete your personal data at any time. You also have the right to restrict processing, the right to transfer your personal data to a third party, and the right to object to the processing of your personal data on the grounds of legitimate interest.

    If you wish to exercise one of your rights, send an e-mail to privacy@maastrichtuniversity.nl or contact the Data Protection Officer directly at fg@maastrichtuniversity.nl.

    If you have a complaint about the way ROA processes your personal data, please contact UM using the contact details above. You also have the right to submit a complaint to the Dutch Data Protection Authority. Details of how to do this can be found on the Data Protection Authority’s website.