Privacy Statement, Cookies and Cookielaw

The AUAS/HvA websites use 'cookies'; small files stored on your computer.

Privacy Statement

Amsterdam University of Applied Sciences (AUAS) respects your privacy and will handle your personal data with care, acting in conformity with the General Data Protection Regulation (GDPR). AUAS has set out in this Privacy Statement how your personal data will be used and what your rights are.

Contact details of the controller:

Stichting Hogeschool van Amsterdam is the controller for the purposes of processing the personal data and special personal data of students1 and employees2 currently associated with Amsterdam University of Applied Sciences, but also future or former students or employees, persons participating in research, and visitors. Contact details:

Stichting Hogeschool van Amsterdam
Wibautstraat 3b
1091 GB Amsterdam
(Postbus 1025, 1000 BA Amsterdam)

Data protection officer

Amsterdam University of Applied Sciences has appointed a data protection officer, who ensures that personal data is processed in accordance with the applicable regulations. The data protection officer is registered with the Dutch Data Protection Authority.

The data protection officer can be reached at:

Types of personal data

The following personal data and special personal data may be processed by Amsterdam University of Applied Sciences.

  • Name and address details, place and date of birth, passport photo, student ID number, Ministry of Education, Culture and Science correspondence number, citizen service number, IBAN, copy of proof of ID, diplomas from (preliminary) training;
  • Details of studies and academic progress;
  • Other personal data required by law;
  • Individual data or special personal data required to successfully support students and employees in terms of health and well-being;
  • Insurance details for employees, and for students but only in cases where students are living abroad;
  • Other statutory personal data required pursuant to specific legislation (for example, the Dutch Higher Education and Research Act, tax legislation, the Dutch Compulsory Identification Act, Eligibility for Permanent Incapacity Benefit (Restrictions) Act, etc.).

Purposes of processing

Personal data may be processed for the purposes of teaching activities, operational management and research, including:

  • Enrolment for a degree programme or a course, or employment as a member of staff;
  • Processing academic results, academic progress and other related information;
  • Handling requests for information;
  • Conducting and improving the provision of services to (prospective) students, employees and alumni;
  • Providing further information about various matters relating to the AUAS; choosing a degree programma, studying or alumni;
  • Organising elections;
  • Staff recruitment and selection;
  • Security and improvement of our websites;
  • Scientific or historical research or statistical purposes;
  • Monitoring employee performance;
  • Internal address books.

Personal data will only be used for the purposes specified above. Your consent will be required if AUAS wishes to process personal data for other purposes and there is no other basis for processing this information. In this case, you will be informed of the specific purpose and the retention period. You can withdraw your consent again at any time.

Bases for processing

AUAS will usually process your personal data on the basis of the following:

  • Implementing an agreement concluded with you;
  • Statutory obligations;
  • Legitimate interests;
  • Your consent to processing in specific situations;
  • Public interest of scientific research.

AUAS will only process personal data for the purposes for which it has been obtained.

Recipients of personal data:

AUAS may instruct other organisations to process personal data on its behalf. In this case, a processing agreement will be concluded which will contain provisions to protect your privacy rights.
AUAS may pass your personal data on to other bodies including the following:

  • Government institutions (e.g. Dienst Uitvoering Onderwijs (DUO, government body for the implementation of education), Ministry of Education, Culture and Science, Employee Insurance Agency, Immigration and Naturalisation Service, Tax and Customs Administration);
  • The accountant;
  • Municipalities;
  • NUFFIC (Dutch organisation for internationalisation in education), study choice 123;
  • Partner institutions in the Netherlands and abroad (e.g. for the purposes of sharing information).

AUAS will only pass personal data on to organisations outside of the European Union if:

  • There is an appropriate level of data protection in the country concerned in the opinion of the European Commission, or there is an EU US Privacy Shield for companies in the US; or
  • An agreement is in place governing the protection of your rights in accordance with the GDPR.

Retention periods:

Careful handling of personal data also includes AUAS not retaining this data for longer than is necessary. AUAS observes the relevant statutory obligations and, if the rules are not set down in law, will abide by the 'Universities of Applied Sciences Selection List' of the Netherlands Association of Universities of Applied Sciences.

Camera surveillance:

AUAS uses camera surveillance to ensure your safety and that of others, and the safety of your personal property. Images are deleted after four weeks, or once an incident has been dealt with if a longer retention period is required for this.

Your rights in relation to the processing of your personal data

As the owner of your personal data (the 'data subject'), you have the following rights under the GDPR:

  • The right to access your personal data:
    You can exercise this right by consulting the SIS (Student Information System) or DSPM (Digital Servicepoint for Employees). If you would like to receive further information on this, please submit a request via
    Future or former students or employees, persons participating in research, and visitors can submit a request via
  • The right to correct incorrect data (rectification):
    You can also exercise this right yourself directly by amending your information in the SIS or DSPM. If you want to have other data amended, please submit a request via
    AUAS cannot deviate from the relevant information recorded at DUO or in the Municipal Personal Records Database (GBA).
  • The right to be forgotten (erasure of personal data):
    You can submit a request via to have your (surplus) personal data deleted from AUAS systems. Such a request cannot be granted if AUAS has an obligation to retain this data.
    If the personal data was being processed on the basis of your consent, you can withdraw your consent at any time.
  • The right to object to processing:
    You can submit an objection via if you believe the processing of your personal data is not legitimate.
  • The right to restrict processing:
    If you have submitted a request to have data corrected or erased, or have lodged an objection, you can request a temporary suspension of processing.
  • The right to data portability:
    You can submit a request via to receive your personal data in a machine-readable format, or to have it transferred by AUAS to another institution. This is only possible if processing has taken place on the basis of consent or pursuant to an agreement.


If you believe that AUAS has failed to observe privacy regulations and/or its privacy policy correctly, you can submit a complaint to the data protection officer. You can also do this if you are not satisfied with how your request or objection has been handled. Please submit your complaint by email to:

You can also submit a complaint to the Dutch DPA via its website .

1This also includes participants in training courses.

2This also includes non-salaried staff (self-employed persons) and/or persons carrying out work for AUAS on another basis.


Since the new Telecom Act went into effect on 1 June 2012, every website is required by law to inform the user about the nature of the cookies provided, and to request permission for their use. Amsterdam University of Applied Sciences (AUAS) is currently working on meeting this requirement.

Google Analytics

Our website uses a cookie from the American company Google as part of its Google Analytics service. We use this service in order to monitor how our visitors use our website. Google may provide this information to third parties if Google is legally required to do so or if the third party is responsible for processing the information on the behalf of Google. AUAS/HvA has no influence on such provision. We have not given permission to Google to use the analytics information provided for any other Google services.

The information collected by Google is made as anonymous as possible.Your IP address is explicitly not included in the information provided. The information is stored on Google servers in the United States. Google adheres to the Safe Harbor principles and has joined the American Department of Commerce's Safe Harbor programme. Among other issues, this guarantees a sufficient level of protection for the processing of any personal data present.

Facebook, LinkedIn and Twitter

The AUAS websites also feature buttons to promote pages or share on the social networks Facebook, LinkedIn and Twitter. These social media buttons work with cookies provided by third parties (Facebook, LinkedIn, Twitter and ShareThis). Clicking on these buttons will install the cookies.


The AUAS websites also feature links to publish online documents, brochures, annual reports, flyers and other online publications via online publishing service - Clicking on these links will install the cookies. Read the privacy policy of ISSUU to see what they do with information acquired by this code.

These documents are also available as standard PDF file. Downloading or viewing PDF files will not install the cookies.

Personal data while choosing a degree programme

To enable us to provide you with targeted information and help you choose the right degree programme, we need a few details from you. Personal data are handled and secured with all due care. We only save and use personal data that we receive from you directly or of which we can be certain that you are the party providing them to us. All personal data are handled in accordance with the Dutch Personal Data Protection Act (Algemene verordening gegevensbescherming (AVG) or General Data Protection Regulation (GDPR)). From one year after our final communication with you about choosing a degree programme, your data will only be used in anonymised form.

AUAS chatbot

We use a chatbot on some pages of the AUAS. The chat conversations can be held anonymously and are an addition to the frequently asked questions on the website. For this purpose, a session cookie (oda-chat-user # -messages) is set to be able to follow the chat during the chat session. We use the content of the conversations to further optimize the chatbot.

Turning cookies on and off and deleting them

You can shut off these cookies via the browser. For instructions, see this explanation at .

Please note: If you refuse to use cookies and/or delete them, you may not be able to take full advantage of the options offered by the website. Refusing or deleting cookies also only has consequences for the computer and browser for which you have chosen these settings. If you use more than one computer and/or browser, then you must repeat the process described above as often as necessary.

Our cookies

Amsterdam University of Applied Sciences

We retain the right to amend this privacy statement at any time. Any amendments will be published on this website.

Published by  Communication 6 July 2023