Privacy Policy

General

This privacy policy (“Privacy Policy”) governs the processing of your personal data as part of your use of our website (the “Website”) and the services associated with it (collectively referred to as the “Services”). This processing is carried out by Studentenraad KU Leuven as the controller, with its registered office at Minderbroedersstraat 10, 3000 Leuven (“we”, “us”), registered with the KBO under number 534.592.536, in accordance with the applicable legislation on the protection of personal data.
By using our Website and/or our Services, you acknowledge that you have carefully read this Privacy Policy and that you agree to it without reservation. We reserve the right to modify the Privacy Policy from time to time in our sole discretion. Any such changes will be communicated through the Website.

By clicking on the checkbox stating: “I have read and understood the Privacy Policy in full and agree to it without reservation. I consent to the processing of my personal data as set out in this Privacy Policy”, you declare that you have indeed read and consented to this Privacy Policy. You declare that you understand the purposes for which your personal data will be processed. You also agree that your continued use shall be construed as continued consent. You may withdraw your consent at any time by emailing info@stura.be.

Please note that we may use so-called “cookies” or similar technology as part of the Website and/or the Services. Cookies are small text files placed on a device’s hard drive containing certain information, sometimes including personal data. For more information on our use of cookies, please read our Cookie Policy sturakuleuven.be/about-stura/legal/cookie-policy.
This Privacy Policy was last updated on 15 March 2020.

What and why we process data

If and when your registration on the Website or use of the Website or Services may be considered (a) a breach of the terms or of the intellectual property rights or any other right of a third party, (b) a threat to the security or integrity of the Services, (c) a threat to the Website or Services or our or our subcontractors’ systems from viruses, Trojan horses, spyware, malware, or any other form of malicious code, or (d) in any way illegal or unlawful, discriminatory or offensive, we may process your data for the benefit of ourselves, our partners or third parties.

Who we share data with

  1. We do not transfer your personal data in an identifiable manner to third parties if this is not required to provide the Services, without your express consent.
  2. We may use third party processors to provide you with the Website and/or Services. We ensure that third party processors may only process your personal data on our behalf, and upon written instructions from us. We guarantee that all third party processors are selected with due care to ensure the security and integrity of your personal data.
  3. We may transfer anonymised and/or aggregated data to other organisations that can use this data to improve products and services and to organise the marketing, presentation and sale of products and services in a tailored way.
 

Where we process data

  1. We and our third party processors will only process your identifiable personal data in the EEA.
  2. We may transfer your anonymised and/or aggregated data to organisations outside the EEA. If such a transfer occurs, we will ensure that appropriate safeguards are in place to guarantee the security and integrity of your personal data, and that all rights in relation to personal data that you may enjoy under applicable mandatory law are guaranteed.
  3. If there is a transfer of your personal data and/or anonymised and/or aggregated data, the following legal protection mechanism will be implemented.
 

How we process data

  1. We will use our best efforts to process only the personal data that is necessary to achieve the purposes set out in this Privacy Policy. We will process your personal data in a lawful, fair and transparent manner. We will do our utmost to keep the personal data accurate and up to date.
  2. Your personal data will only be processed for as long as necessary to fulfil the purposes specified in this Privacy Policy or until you withdraw your consent to its processing. Please note that withdrawal of consent may imply that you are no longer able to use all or part of the Website and/or Services. If you have registered with our Website, we will delete your personal data when you delete your profile, unless a legal or regulatory obligation or a court or administrative order would prevent us from doing so.
  3. We will take appropriate technical and organisational measures to keep your personal data secure against unauthorised access or theft and against accidental loss, manipulation or destruction. Access by our staff or staff of our external processors is only possible on a need-to-know basis and is subject to strict confidentiality obligations. You understand, however, that the care for safety and security are only best efforts obligations that can never be guaranteed.
 

Your Rights

  1. You have the right to request access to all personal data that we process about you. However, requests for access which are manifestly made with the intention of causing inconvenience or damage to us will not be entertained.
  2. You have the right to request that any personal data about you that is incorrect or inaccurate be corrected free of charge. If you have registered on our Website, you can correct many of these details yourself via your profile. If such a request is made, you must also include with it evidence that the personal data for which correction is requested is incorrect.
  3. You have the right to withdraw your previously given consent to the processing of your personal data. You can withdraw your consent at any time by sending an e-mail to info@stura.be, or by deleting your profile (if applicable).
  4. You have the right to request that personal data relating to you be deleted if it is no longer necessary in view of the purposes set out in this Privacy Policy or if you withdraw your consent to its processing. However, you should note that a deletion request will be assessed by us in the light of legal or regulatory obligations or administrative or judicial orders which may prevent us from deleting the personal data in question.
  5. In lieu of deletion, you may also request that we restrict the processing of your personal data if (a) you dispute the accuracy of that data, (b) the processing is unlawful or (c) the data is no longer necessary for the stated purposes, but you need it to defend yourself in legal proceedings.
  6. You have the right to oppose the processing of personal data if you can demonstrate that there are serious and legitimate reasons relating to special circumstances that justify such an opposition. However, if the intended processing is classified as direct marketing, you have the right to object to such processing free of charge and without justification.
  7. If your personal data is processed on the basis of consent or on the basis of a contract and the processing is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and, if technically possible, you have the right to transfer this data directly to another service provider. The technical feasibility of this is exclusively assessed by us.
  8. If you wish to make a request to exercise one or more of the above rights, please send an e-mail to info@stura.be. This request must clearly state which right you wish to exercise and why. It must also be dated and signed, and be accompanied by a digitally scanned copy of your valid identity card proving your identity. We will immediately inform you of the receipt of such a request. If the request proves to be justified, we will comply with it as soon as reasonably possible and no later than thirty (30) days after receipt of the request.
  9. If you have a complaint about the processing of your personal data by us, you can always contact us at the e-mail address info@stura.be. If you are not satisfied with our response, you are free to file a complaint with the competent data protection authority, the Belgian Privacy Commission. For more information, please visit http://www.privacycommission.be.