Your rights and the GDPR

If you want detailed information about all GDPR rights, go to Chapter 3 (Art. 12-23) Archives - GDPR.eu or go directly to the request form.

In principle, you have the right to inspect all your personal data. But this can be a lot. For example, it includes:

• personal data from e-mails;
• any correspondence that Nuffic has had about you, both internally and with other organizations.

Therefore, consider in advance exactly for what purpose you want access. For example:

• You want to check whether the organization has not recorded unnecessary information in your personal file.
• You just want more information about what the organization does with your data.

This helps us to process your request faster and more specifically. If you do not indicate which data you want to view, the Privacy Officer will contact you to ask what exactly you want to view.

You have the right to ask us to temporarily stop using your personal data. For example, if you have asked us or our client to amend your data, but your request has not yet been assessed. This is called the right to restriction of processing.

• You can expect restriction of processing in the following situations, among others:
• You have submitted a request to delete your data at Nuffic;
• You have requested a correction to your data from Nuffic and this request has not yet been assessed;
• You intend to withdraw your consent for (a certain) processing;
• You have objected to processing;
• …

In general, this right automatically comes into effect in connection with the exercise of the other GDPR rights and the process behind executing a request.

According to the GDPR privacy law, you have the 'right to erasure of data' or the 'right to be forgotten'. Is there no good reason (anymore) for Nuffic to process for any longer? Then it is important that this data is deleted. You cannot have your data deleted as long as we need this data to execute an agreement with you, or your data is still necessary to store for another reason. For example, if you apply for a subsidy. If you apply for a job with us, we will store your information for the duration of the application procedure.
In the following situations, Nuffic is obligated to delete your data:

• Nuffic is legally obliged to delete the data after a certain time.
• Nuffic no longer needs your personal data for the purpose for which it was collected or processed.
• Nuffic does not adhere to the privacy rules when using personal data. For example, because there is no legal basis for the processing.
• You have previously given Nuffic permission to use the data, but are now withdrawing that permission.
• You (rightly) object to the use of the data.

The right to erasure does not apply in these situations:

• Nuffic processes your data because there is a legal obligation to do so.
• Nuffic processes your data to perform a (legally established) task of general interest.
• Nuffic must archive the data in the public interest.

In addition, the GDPR contains some general exceptions to privacy rights. This means that Nuffic can also reject someone's request in special cases. We will process your request within 4 weeks.