Privacy Statement Migration U-Drive Onedrive

Version 4/30/2024

In this privacy statement, we explain what happens to your personal data when it is transfered from the U-drive to Onedrive.

Who is responsible for data processing?

Utrecht University, located at Heidelberglaan 8, 3584 CS Utrecht, is responsible for the processing described in this privacy statement.

For what purposes will my personal data be processed?

The goal is to copy the involved data so that you can seamlessly work from OneDrive.

Which personal data are processed?

All personal data you have on your U-drive will be copied. These are placed in a separate folder within OneDrive.

How long will this personal data be stored?

Your personal data will remain within the U-drive and will be linked to your account on OneDrive. During the process, your data will be stored for a maximum of 24 hours to ensure the smooth running of the process.

Will my data be shared with third parties?

The transfer of data and OneDrive are both services that Microsoft offers. Agreements have been concluded with Microsoft that guarantee data protection.

Will my data be transferred to third countries?

No, there will be no transfer of data to third countries outside the European Economic Area.

What is the legal basis for this data processing?

The legitimate interest behind this processing by UU is that it considers it important that data is properly moved, without having to make concessions in terms of security or data protection. This interest must be weighed against the interest of employees, with their data protection interests at the core. Given that data protection and information security are expertly safeguarded in this process, it can be concluded that the balance of interests is in favor of the UU and that this basis is therefore legit.

What rights do I have under the GDPR and how can I exercise them?

As a data subject, you have certain rights. Namely, the right of access, the right to rectification of personal data, the right to erasure, the right to restriction of processing, the right to object. If you wish to exercise these rights, you can submit your request via this form.

Is there automated decision-making or profiling?

There is no automated decision-making. That is to say, decisions are never made without human intervention. There is also no profiling.

Ask

If you have any questions about this privacy statement, please contact privacy@uu.nl. Would you like to file a complaint? If so, you can contact Utrecht University’s Data Protection Officer, who can be reached on fg@uu.nl. You are also always free to file a complaint with the Dutch Data Protection Authority, the data protection authority of the Netherlands.