Privacy Statement

TU Delft processes the following types of personal data of current and prospective students:

• Identification details (such as name and address, date and place of birth, student number, NetID);
• Contact details and e-data (such as e-mail address, telephone number, logging, IP addresses);
• Health data (such as physical and psychological data in the context of study facilities and study support);
• Citizen Service Number (BSN);
• Nationality;
• Financial data (such as bank account number and tuition fee payments);
• Personal characteristics (gender);
• Education (e.g. marks, academic progress, student career guidance, internship company, diplomas);
• Performance data (e.g. personal feedback, reports);
• Image and sound recordings (e.g. photo, video);
• Licence plate.

TU Delft uses the personal data of current and prospective students for the following purposes in particular:

• Proper progress of the orientation for the programme choice;
• Application, selection and enrolment in a degree programme;
• Good organisation and progress of the education and examinations;
• Tracking and measuring academic progress;
• Handling complaints, objection and appeals;
• Dealing with data breaches and requests in respect of the rights of data subjects;
• Providing effective student career guidance;
• Assessing and implementing a request for special facilities for a student with a (physical) disability;
• Preventing and investigating suspicions of plagiarism and fraud and taking (legal) measures in case of detected wrongdoing;
• Nomination for membership, award or nomination;
• Evaluation of the quality and accessibility of education and the organisation of TU Delft;
• Conducting surveys on student satisfaction by TU Delft or organisations other than TU Delft;
• Monitoring the safety of people, goods and buildings on the campus, including access control and camera surveillance;
• Protecting company assets, (personal) data and the intellectual property rights of TU Delft;
• Controlling availability, improving and securing capacity of ICT facilities;
• Securing TU Delft's ICT facilities, including the prevention of wrongful use;
• Controlling the availability of parking facilities;
• Reporting domestic violence and sex offences.

TU Delft processes the following types of personal data of alumni:

• Name and address details;
• Gender;
• Contact details (such as e-mail address and telephone number);
• Details of the degree programme followed;
• Financial data.

TU Delft uses alumni's personal data for the following purposes in particular:

• Inviting alumni to TU Delft events;
• Approaching alumni for guest lectures;
• Fundraising;
• Dealing with data breaches and requests in respect of the rights of data subjects.

In this context TU Delft staff members are understood to be: employees with an employment contract, temporary employees, student teaching assistants, seconded staff members, persons who perform work in the context of an assignment, prospective staff members (applicants), former staff members and trainees.

TU Delft processes the following types of personal data of staff:

• Identification details (such as name and address, date and place of birth, personnel number, NetID);
• Contact details and e-data (such as e-mail address, telephone number, logging, IP addresses);
• Health data (as far as necessary in case of incapacity for work);
• Copy of identification document and Citizen Service Number;
• Nationality;
• Trade union membership (for the tax settlement of trade union dues);
• Financial data (e.g. bank account number, (salary) payments and expense claims);
• Personal characteristics (such as gender and marital status);
• Education and training (such as diplomas, work-related training);
• Profession and occupation (e.g. CV, type of employment, additional positions);
• Performance data (e.g. personal feedback, reports);
• Image and sound recordings (such as photo, video);
• Licence plate;
• Location data (such as teaching timetable, workplace, room reservation).

TU Delft uses the personal data of staff members for the following purposes in particular:

• Well-organised recruitment and selection of staff members;
• Ensuring good opportunities for staff members to develop themselves;
• Correct and efficient staff and salary administration;
• Balanced and orderly deployment planning of staff members;
• Ensuring a proper staff evaluation system;
• Support in case of sickness and absenteeism of staff members;
• Consulting the confidential adviser;
• Works Council elections;
• Handling complaints, objections and appeals from staff members;
• Dealing with data breaches and requests in respect of the rights of data subjects;
• Conducting surveys by TU Delft or organisations other than TU Delft, for example on equal treatment and staff satisfaction;
• Monitoring the safety of people, goods and buildings on the campus, including access control and camera surveillance;
• Protecting company assets, (personal) data and the intellectual property rights of TU Delft;
• Controlling availability, improving and securing capacity of ICT facilities;
• Securing TU Delft's ICT facilities, including the prevention of wrongful use;
• Controlling the availability of parking facilities;
• Reporting domestic violence and sex offences.

For more information about the personal data that is collected when visiting TU Delft websites, please see the TU Delft cookie policy.

When someone accesses the TU Delft online environment as a visitor or guest (for example, in a Microsoft Teams environment), TU Delft will process the following personal data:

• User name;
• Log data;
• IP address.

TU Delft uses these personal data for the following purposes in particular:

• Securing TU Delft's ICT facilities, including the prevention of wrongful use.

TU Delft processes the following personal data of visitors to the campus:

• Name and company;
• E-mail address;
• Camera images;
• Licence plate.

TU Delft uses the personal data of visitors for the following purposes in particular:

• Visitor reception at the Service Points;
• Providing a visitor account for WiFi access;
• Monitoring the safety of people, goods and buildings on the campus, including access control and camera surveillance;
• Protecting company assets, (personal) data and the intellectual property rights of TU Delft;
• Controlling availability, improving and securing capacity of ICT facilities;
• Securing TU Delft's ICT facilities, including the prevention of wrongful use;
• Controlling the availability of parking facilities.

TU Delft processes the following personal data of participants in scientific research:

• Personal data in the informed consent form;
• Personal data in research data (exactly which personal data in research data is processed is explained in the informed consent information).

TU Delft uses the personal data of research participants to carry out scientific research.

TU Delft offers some activities that require your consent. This may, for example, include using your e-mail address to send a newsletter, promotional e-mails or for conducting research. Your personal data will only be used if you have given consent for us to do so. In this regard you will always be notified of the purposes for which your data will be used, which data is involved and to whom it will be provided. If you give TU Delft permission to use this personal data, you will also be entitled to withdraw this consent at a later stage. Withdrawal cannot apply retrospectively. The information you receive before you give your consent will tell you how to withdraw your consent. If you no longer have that information, you can also send an e-mail to the Privacy Team. The contact details can be found at the end of this Privacy Statement.

The requirement for permission does not apply if you are sent newsletters or e-mails within the context of your degree programme or employment.

TU Delft can process personal data to perform a contract to which the data subject is a party, for example an employment contract for staff members or purchasing contracts.

TU Delft may process personal data because this is required on the basis of legislation. This is the case, for example, when passing on student data to the Education Executive Agency (DUO) or salary data to the Tax and Customs Administration.

TU Delft may process personal data to carry out a task of public interest or public authority of TU Delft. Under the Higher Education Act, for example, TU Delft has the task of providing academic education and conducting academic research. These are tasks of public interest.

TU Delft may process personal data to serve a legitimate interest (a compelling interest of TU Delft or a third party). One example is the use of security cameras on the campus to protect people, property and buildings.

TU Delft may process personal data to protect the vital interests of individuals. An example of this may be a situation where care providers need personal data in order to provide urgently needed medical assistance to the data subject.