Thank you for your interest in StartupUtrecht (SUU). This privacy statement sets out which personal data we collect and use, and for what purpose.
SUU is a foundation under Dutch law, registered with the Chamber of Commerce under number 67874606. Our contact details are:
If you have any questions about this privacy statement, you can contact SUU on working days between 9 am and 5 pm on the telephone number +31 (0)30 - 238 2858. You can also get in touch with us via email. Our email address is given above.
For what purposes and on what grounds does SUU process personal data?
SUU processes your data for the following purposes:
On what grounds are your personal data processed?
SUU processes your personal data:
If personal data are processed on the basis of permission, this permission may be revoked at any time.
Below, SUU describes all the data processing operations that take place under its responsibility. We are always careful in handling your data. SUU will store your data carefully (using digital means where appropriate) and protect it using the necessary security measures. Your personal data will not be resold. Nor will SUU purchase any data.
Our website features a contact form. By filling in the contact form, you indicate that you are interested in SUU’s network; it enables you to submit a question and you can also indicate whether you wish to receive the newsletter. If you wish to use this form, SUU will ask you to provide the following personal data:
SUU processes your personal data in order to handle requests, complaints and other communications you may send us, and to include you in the SUU network. Your data are stored in SUU’s CRM file. If you indicate that you wish to receive our newsletter, we use your data to send you the newsletter. You therefore have to provide us with your personal data. SUU processes your personal data based on your permission for the processing of your personal data for the purposes listed above. These personal data are retained until you instruct us to change or delete the data.
You can register for events or meetings via our website. In doing so, you are entering into an agreement with SUU from a legal point of view. To that end, you must provide the following personal data in the designated form:
If you do not provide the above personal data, you cannot sign up for the event.
The personal data are used to maintain a list of participants for the event. Your data are stored in SUU’s CRM file. This list of participants is used for practical purposes, such as to determine whether or not an event should go ahead based on the level of interest expressed. The legal basis for this processing is that this data processing is necessary to protect your and SUU’s legitimate interest. Specifically, this interest consists of the practical interest of SUU in being able to organise an event.
Your personal data will not be passed on to third parties for commercial purposes. If we organise an event with a partner who contributes to the event, your data may be shared with this partner in the context of organising the event.
Existing network members receive regular emails informing them about our services and meetings. Under the law (in particular the General Data Protection Regulation in conjunction with Section 11.7(3) of the Telecommunications Act), it is permitted to send communications about your own similar services or meetings to existing network members without permission. At the bottom of such emails, you will find a link allowing you to easily opt out of receiving any communications from SUU. SUU makes a distinction between sending newsletters and sending invitations. In the confirmation of assignment, you can indicate whether you wish to receive each type of product.
SUU regularly organises events and meetings. It is possible that photos will be taken during these events. SUU may publish these photos, for instance in a newsletter or other communication. SUU will also communicate this at the time of the event and ask whether anyone objects to such publication. If possible, we will immediately respond to any objection by not taking photos of the person concerned or ensuring that they are not recognisable in the photos.
The legal basis for this processing is that this data processing is necessary to protect our legitimate interest. We think the above processing is reasonable and warranted in exchange for organising and allowing people to attend an event. Its purpose is to provide evidence that SUU is actively investing in its customers and relationships.
You can visit the website www.startuputrecht.com anonymously. We place analytical cookies using Google Analytics. These are functional cookies that do not store any personal data. Google may supply this information to third parties if it is obliged to do so by law, or insofar as third parties process the information on Google’s behalf. This is beyond our control. The legal basis for this processing is that this data processing is necessary to protect our legitimate interest. This interest consists of our interest in improving the functionality of the website and identifying how many users the website receives.
SUU retains your personal data until you instruct us to change or delete the data. You can view, change or delete your data at any time. If you want to unsubscribe completely, your personal data will immediately be deleted.
We process only personal data that you have personally provided to us via the form on our website, by signing up for an event organised by SUU or of which SUU was an organising partner or in contact with a member of our staff. We do not obtain personal data from third parties.
Personal data may be processed on SUU’s behalf by processors and sub-processors. In SUU’s case, these are the Economic Board of Utrecht, which carries out the majority of SUU’s marketing and communication activities; the hosting company Insiders; and Spotler, the company responsible for the Mailplus email software that is used to process data and send emails, including automatic confirmation emails. The processors and sub-processors operate under the responsibility of SUU and are not permitted to perform any processing of personal data on their own account. Your personal data are not provided to other parties. However, your personal data will be shared with other parties if we are required to do so by the law or a court decision.
Under the General Data Protection Regulation (GDPR), you have a number of rights. You have the right to request SUU to let you view (Art. 15 GDPR) or to correct (Art. 16 GDPR) or erase your personal data (Art. 17 GDPR). You also have the right to request SUU to restrict the processing of your personal data (Art. 18 GDPR). In certain circumstances, you have a right to portability of your data (Art. 20 GDPR) and a right to object (Art. 21 GDPR). You can find out more about when it is possible to exercise one or more of these rights on the website of the Dutch Data Protection Authority.
If you wish to exercise one or more of these rights, you can get in touch with us at firstname.lastname@example.org or by calling +31 (0)30 - 238 2858.
In addition to the above rights, you always have the right to make a complaint to the Dutch Data Protection Authority.
If you are unsatisfied with the way in which SUU handles your personal data, please let us know. You are of course entitled at any time to complain about our handling of your privacy-sensitive data to the Dutch Data Protection Authority.
On SUU’s website, you can click on links that take you to our partners’ websites. These websites may collect information about you. You can check their websites to find out what information they collect, or ask them to tell you.
If you access our website using Google, Google will collect your data. The data that Google collects about you are described in its privacy statement.