Privacy Statement

In addition to this Privacy Statement, ITB also has a privacy policy. The privacy policy describes how our employees should handle personal data. It provides our employees with instructions, so to speak, on personal data processing. We have drawn up a separate privacy statement for our relations with ITB alumni.

The Privacy Statement alumni and donors explains how and for what purposes personal data of ITB alumni are processed.

We may amend this Privacy Statement from time to time. This Privacy Statement was last amended in November 2024.

About ITB The Executive Board of ITB is the controller within the meaning of the General Data Protection Regulation (GDPR) in respect of the data processing discussed in this Privacy Statement. This means that the Board of ITB (hereinafter also ‘we’, ‘us’ or ‘our’) decides which personal data will be processed, for what purpose, and in which manner. ITB has the responsibility to ensure careful and fair processing of your personal data.

1. ITB has appointed a Data Protection Official (DPO). The DPO can be contacted at support@itbcollege.com.

2. What personal data do we process? This Privacy Statement provides information on the processing of personal data of prospective students, students, parents of students (or of prospective students), survey or study participants in cases where data are not obtained from the data subjects themselves, and visitors to our websites. ‘Prospective students’ means anyone who signs up for one of our orientation activities (such as an open day, workshop or degree programme orientation event) and anyone who has already enrolled in a programme but has not yet started their studies. Such personal data may include contact details, information on whether or not someone is enrolled in a programme, and clicking behaviour. We also place cookies (after obtaining your consent, if required). More information on this can be found in our Cookie Statement.

   Personal data we process in respect of current and prospective students includes, among other things:

   • name and residential address details;

   • telephone number, email address;

   • date of birth, sex;

   • bank and payment details of current or prospective students (or their parents);

   • choice of programme, study progress and other study-related data;

   • personal experiences, in case of a consultation with a study adviser;

   • complaints, objections and appeals;

   • login details (such as ITB ID and IP address).

   Personal data we process in respect of visitors to our websites includes, among other things:

   • website visits and clicking behaviour;

   • IP address;

   • duration and time of visit to the website;

   • use of social media.

   In addition, if you participate in any survey or scientific research, we may process additional personal data in each survey or study in which you participate, for the purposes of this survey or study. The nature and scope of the personal data may differ per survey or study. Further information on this will be provided during the survey or study.

3. For what purposes do we process personal data? We process personal data for the purposes of providing our services in the context of education and research, and in order to comply with legal obligations.

   Personal data provided by current or prospective students are processed for the following purposes:

   • to enrol students;

   • to provide education (including online education) and organise examinations (including online examinations);

   • to process requests for academic or other information or publications;

   • to support prospective students in choosing a degree programme;

   • student counselling;

   • to support education (including online education) and the organisation of examinations (including online examinations);

   • administrative processes relating to enrolment and the collection of tuition fees;

   • to protect ITB’s properties and the safety of everyone at ITB, including visitors;

   • to monitor, measure and supervise study progress;

   • to provide information on study-related conferences, seminars, etc.;

   • to enable ITB to send newsletters, invitations to student and other surveys, information on your account, your study progress and other (necessary) information by email;

   • to insure students;

   • to prevent plagiarism and fraud and investigate suspicions of plagiarism and fraud, and to take action (including legal action) in the event of any identified misconduct;

   • to handle complaints, notices of objections and notices of appeal;

   • for continuous improvement of the quality and accessibility of education, including by conducting (statistical) research and administering and processing surveys and the results thereof; and

   • to enable recommendations for a membership, a prize or a nomination.

   The personal data provided by visitors to our websites is processed for the following purposes:

   • to compile user statistics;

   • to secure and improve our websites; and

   • to improve our services.

   In the context of surveys and scientific research, personal data is processed for the performance of the relevant surveys or scientific research. Further information on the manner of and the basis for the processing of personal data in the context of this survey or scientific research will be provided in the relevant survey or study.

4. Basis for processing In order for us to be allowed to process your personal data, the processing must be based on one of the lawful bases set out in the GDPR. In the case of ITB, this basis for processing will be one of the following, depending on the specific personal data: a legal obligation, a contract, a task carried out in the public interest, a legitimate interest, consent, or a vital interest. If you do not provide certain personal data, you may not be able to attend education, conduct research or experience all the functionalities of the website.

5. To whom does ITB issue personal data? The basic principle is that your personal data will only be used by ITB. In a number of cases, we share your personal data with other parties, which may include government agencies, other educational and research institutions, and third-party service providers.

6. Processing personal data outside the EU ITB will endeavour to process your data solely within the European Union (‘EU’) by storing your data on a server located in the EU wherever possible. When this is not possible, we will take the necessary measures to provide an appropriate level of security for the protection of your personal data.

7. Your rights with regard to personal data If we process your personal data, you have the right to access, rectify, delete, or restrict your data. To make a request, please contact us at support@itbcollege.com. In case of doubt about your identity, we may ask for identification.

8. How do we protect your personal data? ITB follows strict security policies to protect data. If an incident occurs, we will address it promptly and report any data breaches that may risk individuals’ rights to the Dutch Data Protection Authority.

9. How long do we retain your personal data? We retain your data only as long as necessary for the purposes for which we use them. By law, we are required to retain certain data for specific periods.

10. Questions and complaints If you have any questions about our data processing practices, please email support@itbcollege.com. If you believe your data is processed in breach of the GDPR, you can submit a complaint to our DPO via support@itbcollege.com or contact the Dutch Data Protection Authority directly.

​