Amsterdam University of Applied Sciences

What are my rights?

The GDPR provides additional rights to data subjects whose personal data are processed. Data subjects include students, staff, alumni, prospective students and research participants.

As a data subject, you have several rights which you can choose to exercise.

All employees, students, alumni, prospective students and visitors of the AUAS, along with participants in AUAS research, have the right to know what will be done with their personal data and why.

AUAS procedure

As a basic principle, the AUAS will inform you about any data processing activities when the AUAS collects or receives personal data from you. This can be done in the form of explanatory notes for fields on a form, for instance. The AUAS will additionally inform you via the privacy statement.

Data protection officer

The AUAS has appointed a data protection officer, who ensures that personal data is processed in accordance with the applicable regulations. The data protection officer is registered with the Dutch Data Protection Authority.

Read more about the data protection officer.

All employees, students, alumni, prospective students and visitors of the AUAS, along with participants in AUAS research, have the right to access their personal data which have been processed by or on behalf of the AUAS.

How do we obtain your data?

The AUAS receives the enrolment details of its students via the national application and registration portal Studielink. We store this data in the Student Information System (SIS), the source system for all student data. SIS is linked to several other systems which receive data from SIS for various purposes. One such example is the MyAUAS app (MijnHvApp). You can find an overview of the most important systems here (only in Dutch). This overview is updated regularly.

How can you access your data?

To a significant extent, you can exercise your right to access your personal data yourself via SIS .

If you would like to view other details, you can submit a request via

You can make changes to your details via Studielink. For details you are not able to change, you can submit a request via

Please note: When making such changes, the AUAS cannot deviate from the details registered in the Personal Records Database (Basisregistratie personen).

You also have the ‘right to erasure’ and the ‘right to be forgotten’. This allows you to ask the AUAS to delete your data. On top of that, you can ask the AUAS to delete all links to your personal data as well (‘right to be forgotten’).

Please note

Requests to delete personal data and requests to be forgotten may also be rejected, for example in connection with other regulations (such as the Dutch Higher Education Act or the Dutch Salaries Act) under which the AUAS remains obliged to retain certain data.

You can submit a request via

You can retrieve and inspect the data you have provided to the AUAS via Studielink. You can also use Studielink to send this data to another educational institution.

The right to restrict processing of personal data gives you the option to temporarily ‘freeze’ the processing of your personal data. The data may then be processed in the following cases only:

  • with your consent;
  • for the establishment, exercise or defence of a legal claim;
  • to protect the rights of other (legal) persons.

If you would like to temporarily suspend the processing of your personal data, you can submit a request via

The processing of your personal data is preceded by a consideration of interests, in which your right to privacy is weighed against the grounds for the processing. This consideration is general and abstract.

When a specific situation applies to you, you can make this situation known to the AUAS. This will allow the AUAS to reconsider the processing interests based on your new or specific situation.

Please note

It is not possible to object to a processing activity for which you have given your consent. In that case you can withdraw your consent.

If you would like to lodge an objection, you can submit a request via


The AUAS carefully processes all requests. You will receive a response as soon as possible, within a maximum of one month. The processing term for complex requests may be extended by up to two months. You will be informed of any such extension within one month of submitting your request.

Read more about your rights in the Frequently Asked Questions.

Published by  Legal Affairs 12 June 2018