How we handle your data

Who processes your data

AI Proeflokaal is an initiative of Hogeschool Utrecht, Institute for ICT. Hogeschool Utrecht acts as data controller for the processing of personal data.

• Visiting address: Padualaan 97, 7th floor, 3584 CS Utrecht, the Netherlands.
• Postal address: Postbus 85029, 3508 AA Utrecht, the Netherlands.
• Questions about this statement? Email info@agenticstaffaugmentation.nl.

What data we collect

• On intake or contact form: name, email address, phone number, organisation and the content of your message.
• On enrolment in a workshop or training: name, email address, organisation, billing address and any dietary or accessibility needs.
• Technical data on site visits: IP address, browser type and pages visited, for security and debugging.

Why we process this data

• To respond to and act on your request or enrolment.
• To organise a workshop, trajectory or assignment and send invoices.
• To keep the site secure and functioning.
• To send a newsletter — only with your explicit consent.

Legal basis

We process personal data on one of the following grounds under article 6 of the GDPR:

• Performance of a contract (article 6(1)(b) GDPR) — for workshops, trainings and assignments.
• Legitimate interest (article 6(1)(f) GDPR) — for security, debugging and improving our services.
• Consent (article 6(1)(a) GDPR) — for non-essential processing such as newsletters and analytics cookies.
• Legal obligation (article 6(1)(c) GDPR) — for the statutory retention of invoices.

How long we keep data

• Enrolment and intake data: up to 2 years after the last contact moment.
• Invoice data: 7 years (statutory tax retention).
• Server logs: 30 days maximum.
• Newsletter subscriptions: until you unsubscribe.

Who we share data with

• With service providers acting on our behalf (hosting, email, payment provider). We have data processing agreements with them.
• With Hogeschool Utrecht insofar as needed to organise the workshop or training.
• Not with third parties for commercial purposes.
• We do not transfer data outside the EU without appropriate safeguards (e.g. the European Commission's standard contractual clauses).

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, data portability and objection.

• Email info@agenticstaffaugmentation.nl to exercise a right. We respond within four weeks.
• Have a complaint? You can file it with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl.

Changes

We may update this statement when regulation or our practice requires. The latest version is always on this page, with the date of the last change at the top.