Privacy Statement

Thank you for your interest in StartupUtrecht (SUU). This privacy statement sets out which personal data we collect and use, and for what purpose.

Who we are

SUU is a foundation under Dutch law, registered with the Chamber of Commerce under number 67874606. Our contact details are:

If you have any questions about this privacy statement, you can contact SUU on working days between 9 am and 5 pm on the telephone number +31 (0)30 - 238 2858. You can also get in touch with us via email. Our email address is given above.

Processing personal data

For what purposes and on what grounds does SUU process personal data?

SUU processes your data for the following purposes:

  • storing personal data in our CRM system;
  • sending out our newsletter, if you have indicated that you wish to receive it;
  • sending invitations for meetings or events that we think might interest you, which are either organised by SUU or in which SUU is involved;
  • to keep you informed regarding activities SUU is involved in that might interest you;
  • to improve personalised mailings and invitations, based on your preferences and areas of interest that match the SUU agenda.

On what grounds are your personal data processed?

SUU processes your personal data:

  • based on the permission of the data subject for the processing of their personal data, to send out newsletters, send invitations or respond to a question, complaint or other communication;

or

  • because this is necessary for the performance of an agreement to which you are a party;
  • because this is necessary to protect the legitimate interests of SUU. This relates to the specific interest of SUU in being able to handle questions, complaints or other communications at your request, the practical interest of SUU in being able to organise an event or the interest of SUU in being able to perform and optimise our service delivery.

If personal data are processed on the basis of permission, this permission may be revoked at any time.

 

Below, SUU describes all the data processing operations that take place under its responsibility. We are always careful in handling your data. SUU will store your data carefully (using digital means where appropriate) and protect it using the necessary security measures. Your personal data will not be resold. Nor will SUU purchase any data.

Processing of personal data via the website

Use of the contact form

Our website features a contact form. By filling in the contact form, you indicate that you are interested in SUU’s network; it enables you to submit a question and you can also indicate whether you wish to receive the newsletter. If you wish to use this form, SUU will ask you to provide the following personal data:

  • company name;
  • position;
  • first name;
  • surname;
  • email address;
  • whether or not you wish to receive the newsletter.

SUU processes your personal data in order to handle requests, complaints and other communications you may send us, and to include you in the SUU network. Your data are stored in SUU’s CRM file. If you indicate that you wish to receive our newsletter, we use your data to send you the newsletter. You therefore have to provide us with your personal data. SUU processes your personal data based on your permission for the processing of your personal data for the purposes listed above. These personal data are retained until you instruct us to change or delete the data.

Signing up for an event

You can register for events or meetings via our website. In doing so, you are entering into an agreement with SUU from a legal point of view. To that end, you must provide the following personal data in the designated form:

  • company name;

  • position;
  • first name;
  • surname;
  • email address;
  • telephone number (optional).

If you do not provide the above personal data, you cannot sign up for the event.

The personal data are used to maintain a list of participants for the event. Your data are stored in SUU’s CRM file. This list of participants is used for practical purposes, such as to determine whether or not an event should go ahead based on the level of interest expressed. The legal basis for this processing is that this data processing is necessary to protect your and SUU’s legitimate interest. Specifically, this interest consists of the practical interest of SUU in being able to organise an event.

SUU determines which visitors have attended its events/meetings, in order to improve our activities, services and provision of information. Once you have entered into the agreement, your personal data may also be used to contact you about similar events, or for the purpose of network-related activities that fit in with SUU’s services, which SUU thinks may be relevant for you or to which you could make a relevant contribution. The legal basis for this processing is that this data processing is necessary to protect our legitimate interest. Please note that you can at any time exercise your rights to object, to view your data or, if you wish, to amend or ask us to delete your data. SUU will readily comply with such a request and will not contact you again afterwards. The right to object is covered later in this privacy policy.

Your personal data will not be passed on to third parties for commercial purposes. If we organise an event with a partner who contributes to the event, your data may be shared with this partner in the context of organising the event.

Please note that photos may be taken during the event. This is discussed in more detail later in this privacy policy.

Processing that relates to other business processes

Introduction

We would like to take this opportunity to inform you about a number of processing operations involving personal data that relate to other business processes within SUU. We have included this information in this public privacy policy because we refer to this information in our confirmation of assignment.

Sending emails about our similar services or meetings

Existing network members receive regular emails informing them about our services and meetings. Under the law (in particular the General Data Protection Regulation in conjunction with Section 11.7(3) of the Telecommunications Act), it is permitted to send communications about your own similar services or meetings to existing network members without permission. At the bottom of such emails, you will find a link allowing you to easily opt out of receiving any communications from SUU. SUU makes a distinction between sending newsletters and sending invitations. In the confirmation of assignment, you can indicate whether you wish to receive each type of product.

Photos of events

SUU regularly organises events and meetings. It is possible that photos will be taken during these events. SUU may publish these photos, for instance in a newsletter or other communication. SUU will also communicate this at the time of the event and ask whether anyone objects to such publication. If possible, we will immediately respond to any objection by not taking photos of the person concerned or ensuring that they are not recognisable in the photos.

The legal basis for this processing is that this data processing is necessary to protect our legitimate interest. We think the above processing is reasonable and warranted in exchange for organising and allowing people to attend an event. Its purpose is to provide evidence that SUU is actively investing in its customers and relationships.

Please note that you can exercise your right to object at any time, including before we publish any photos. SUU will readily comply with such an objection and will not publish any photos in which you appear. The right to object is covered later in this privacy policy.

Cookies

You can visit the website www.startuputrecht.com anonymously. We place analytical cookies using Google Analytics. These are functional cookies that do not store any personal data. Google may supply this information to third parties if it is obliged to do so by law, or insofar as third parties process the information on Google’s behalf. This is beyond our control. The legal basis for this processing is that this data processing is necessary to protect our legitimate interest. This interest consists of our interest in improving the functionality of the website and identifying how many users the website receives.

Retention period

SUU retains your personal data until you instruct us to change or delete the data. You can view, change or delete your data at any time. If you want to unsubscribe completely, your personal data will immediately be deleted.

Source of personal data

We process only personal data that you have personally provided to us via the form on our website, by signing up for an event organised by SUU or of which SUU was an organising partner or in contact with a member of our staff. We do not obtain personal data from third parties.

Processors and sub-processors

Personal data may be processed on SUU’s behalf by processors and sub-processors. In SUU’s case, these are the Economic Board of Utrecht, which carries out the majority of SUU’s marketing and communication activities; the hosting company Insiders; and Spotler, the company responsible for the Mailplus email software that is used to process data and send emails, including automatic confirmation emails. The processors and sub-processors operate under the responsibility of SUU and are not permitted to perform any processing of personal data on their own account. Your personal data are not provided to other parties. However, your personal data will be shared with other parties if we are required to do so by the law or a court decision.

Your privacy rights

Under the General Data Protection Regulation (GDPR), you have a number of rights. You have the right to request SUU to let you view (Art. 15 GDPR) or to correct (Art. 16 GDPR) or erase your personal data (Art. 17 GDPR). You also have the right to request SUU to restrict the processing of your personal data (Art. 18 GDPR). In certain circumstances, you have a right to portability of your data (Art. 20 GDPR) and a right to object (Art. 21 GDPR). You can find out more about when it is possible to exercise one or more of these rights on the website of the Dutch Data Protection Authority.

If you wish to exercise one or more of these rights, you can get in touch with us at info@startuputrecht.com or by calling +31 (0)30 - 238 2858.

In addition to the above rights, you always have the right to make a complaint to the Dutch Data Protection Authority.

Complaints

If you are unsatisfied with the way in which SUU handles your personal data, please let us know. You are of course entitled at any time to complain about our handling of your privacy-sensitive data to the Dutch Data Protection Authority.

LinkedIn

SUU’s website has links to a range of media channels, including LinkedIn. LinkedIn collects information about you, for example through the use of cookies. How LinkedIn does this is described in its privacy statement.

Links to other websites

On SUU’s website, you can click on links that take you to our partners’ websites. These websites may collect information about you. You can check their websites to find out what information they collect, or ask them to tell you.

Google

If you access our website using Google, Google will collect your data. The data that Google collects about you are described in its privacy statement.

Changes

This privacy policy may be amended. If any amendments are made, we will inform you of this. The current version of the privacy policy was last amended on 15 March 2019.