Privacy Statement H5P

In this privacy statement, we explain what happens to your personal data when they are processed by the tool H5P.

Who is responsible for data processing?

Utrecht University is responsible for the data processing described in this privacy statement.

For what purposes are my personal data processed?

Your personal data will be processed in order to offer various functionalities within Brightspace. For example the option to offer an interactive document or to create an e-learning module.

What personal data is processed?

The name, solisID, and UU email of students is processed. Besides that, the tool processes data that is necessary for specific functionalities, such as audio recordings or video footage.

How long is this personal data kept?

All data will be deleted 7 years after the college year in which you’ve used the tool.

Is my data shared with third parties?

Your data will be shared with the supplier of this service (H5P Group AS).

Will my data be transferred to third countries?

No, your data will not be transferred to third countries outside the European Economic Area.

What is the legal basis for this data processing?

The legal basis for this data processing is 6 lid 1 sub e GDPR, ‘the performance of a task in the public interest’. That public interest is offering education to students.

What rights do I have under the GDPR and how can I exercise them?

The GDPR gives you a number of rights with regard to your personal data. You have the right to access your data and to have it corrected or deleted. In this processing, you also have the right to temporarily freeze (‘restrict’) the processing of your data, the right to object to the processing and the right to have your dataset transferred to another organisation.

How can I exercise these rights?

If you want to exercise one or more of the above rights, you can submit a request using the privacy request form. We will then have one month to respond to your request. For very complex requests (or if a lot of requests come in at the same time), we sometimes need more time (up to two months extra). We will let you know within that first month.

Is there automated decision-making or profiling?

There is no automated decision-making. This means that decisions are never made without human intervention. There is also no profiling.

Questions? Complaints?

Do you have any specific questions regarding the above information or do you have any comments regarding  this privacy statement? Feel free to contact us. You can send a message to privacy@uu.nl.

The UU has appointed a Data Protection Officer (DPO). This is an internal advisor and supervisor who may also be important to you, namely if you want information about our processing of personal data or if you want to file a complaint about it. You can contact our DPO via fg@uu.nl.

We would like to point out that you also have the right to file a complaint with the supervisory authority, the Dutch Data Protection Authority.

Contact details Utrecht University

Heidelberglaan 8

3584 CS Utrecht

Tel. (030) 253 35 50

Privacy Statement: Version and Policy Document

This Privacy Statement was last modified on 17 June 2025. From time to time, we will make changes to this Privacy Statement.