1. Introduction
1.1. This privacy and cookie statement describes the processing of personal data by the Foundation Leeuwarden Studiestad also operating under the name Leeuwarden Student City (LSC), registered in the Commercial Register of the Chamber of Commerce under number 01086874. LSC is located at Rengerslaan 1, 8917 DD Leeuwarden, and operates the website www.leeuwardenstudentcity.nl.
1.2. LSC is involved in providing information about activities for students in Leeuwarden and organizing various activities for students in Leeuwarden. These activities include at least sports activities (Studentsport Leeuwarden) and LEIP!.
1.3. LSC handles your personal data with care and takes appropriate technical and organizational measures to protect the personal data. LSC adheres to the applicable privacy legislation, including the General Data Protection Regulation (GDPR) and the Implementation Act General Data Protection Regulation (UAVG).
2. Personal Data
2.1. Depending on the services provided by LSC, LSC may process the following personal data from you:
(a) first and last name;
(b) address details;
(c) phone number;
(d) email address;
(e) date of birth;
(f) gender;
(g) username;
(h) educational institution and/or student number;
(i) customer number for sports pass;
(j) technical measurement data from equipment such as an IP address, MAC address, identifiers in cookies, and your browsing behavior on our website(s); and
(k) payment details, including the bank account number.
2.2. The specific personal data that LSC processes depends on the services that LSC offers you and the functionalities of the website that you use.
3. Purposes
3.1. We process the above data for the following purposes:
(a) the execution of services;
(b) sending information about LSC and the services it provides or may provide;
(c) newsletter subscription;
(d) offering (discount) promotions;
(e) the use of the website; and
(f) improving the website.
4. Use of Personal Data and Legal Bases for Processing
4.1. When using our services and website(s), you can enter personal data and otherwise leave certain data behind.
4.2. Your personal data is mainly processed by LSC to fulfill the agreement between you and LSC (Article 6(1)(b) GDPR). LSC also processes personal data when it has the legal right or obligation to do so (Article 6(1)(c) GDPR) or because LSC has a legitimate interest (Article 6(1)(f) GDPR).
4.3. For sending marketing information about other products and services than you have received from us, LSC asks for your consent (Article 6(1)(a) GDPR). You give this consent online by activating a checkbox. You can withdraw your consent by unsubscribing from these emails with the link in the email or by sending an email to info@leeuwardenstudentcity.nl.
5. Providing Personal Data to Third Parties
5.1. When it is necessary for the execution of services by LSC, LSC sends the personal data provided by you to third parties. These are third parties such as IT companies that assist LSC with the website and data storage, the accountant, parties that perform marketing activities together with or for LSC, and the Tax Authorities or other government agencies to which LSC is obliged to share the data. Third parties include at least Eventix B.V., Bewegingscentrum Leeuwarden, DEWI.nl.
5.2. If LSC provides your personal data to a third party, that third party is obliged not to use your data for purposes other than those for which they were provided. If the GDPR prescribes this, LSC enters into a processing agreement or a joint data controller agreement with third parties.
5.3. If we transfer your personal data to a third country, we will ensure that one of the transfer instruments from the GDPR is applicable. 5.4. LSC will not provide personal data to other parties than those mentioned above unless it is legally permitted or required.
6. Security and Retention
6.1. LSC has taken appropriate technical and organizational security measures to prevent misuse of and unauthorized access to your personal data as much as possible.
6.2. LSC does not retain your personal data longer than necessary. LSC retains your data no longer than seven years after the end of the agreement you have entered into with LSC. If the processing of your personal data is based on consent and you withdraw your consent, LSC will delete the relevant personal data. The foregoing does not apply if LSC is required to retain your personal data for a longer period due to a legal obligation.
7. Cookies and Profiling
7.1. Cookies are text files that are stored on your computer or mobile device if you visit LSC's website(s). Cookies are used on LSC's website(s) to provide you with an optimal user experience. For example, this means you do not have to enter the same information repeatedly, and you can navigate the website more easily.
7.2. For the use of tracking cookies, LSC asks for your prior consent as soon as you use the website. In that case, personal data will be processed based on consent (Article 6(1)(a) GDPR).
7.3. LSC may use analytical cookies to analyze the use of the website and improve the website. For this, LSC uses Google Analytics. The obtained information, including your device's IP address, is stored by Google in the United States. For more information, read Google's privacy policy and the specific privacy policy of Google Analytics.
7.4. You can change the settings of your browser to allow or not allow (other) cookies.
8. Third-Party Websites
LSC's website may contain references to other websites, such as hyperlinks. LSC is not responsible or liable for the processing of personal data by those websites. This privacy statement does not apply to the use of those third-party websites.
9. Social Media
Social media buttons may be included on this website to share pages via social media networks such as Facebook, YouTube, TikTok, LinkedIn, Instagram, and Google+. If you click on these buttons, your personal data will be processed by the respective social media network. Read the privacy statements of Facebook, YouTube, TikTok, LinkedIn, Instagram, and Google+ to see how these networks handle your personal data.
10. Changes
LSC may change this privacy and cookie statement from time to time. Changes will be published on our website.
11. Your Rights: Access and Modification of Data
You have the right to request access, rectification, or deletion of your personal data. Additionally, you have the right to request a restriction of the relevant data processing, as well as the right to object to the processing and the right to data portability. Upon receipt of your request, we will respond as soon as possible and in any case within the timeframe set by the GDPR. You can send such a request to info@leeuwardenstudentcity.nl.
12. Complaints
LSC would like to hear from you if you have complaints about the processing of your personal data. You can contact us via info@leeuwardenstudentcity.nl. Under privacy legislation, you also have the right to file a complaint with the Dutch Data Protection Authority.