Privacy
How CIIIC handles personal data.
1. Data controller
CIIIC is responsible for processing personal data. The organisation is a four-year programme funded by the National Growth Fund, involving the Ministry of Education, Culture and Science, CLICKNL and four delivery partners (NWO/Regieorgaan SIA, RVO, TNO and Creative Industries Fund NL).
2. Contact details
For privacy-related questions: info@ciiic.nl
3. Data subjects
CIIIC processes data about people who are in direct or indirect contact with the organisation, including professionals from the creative and knowledge sectors, prospective contacts, company representatives, suppliers and people who are interested in our activities.
4. Categories of personal data
Identifying contact details (name, gender, date of birth, address, telephone, email) Professional background (company, role, specialisation, LinkedIn) CIIIC involvement (project participation, event attendance, newsletter subscription) Correspondence (emails, social media messages) Website and social media activity (IP addresses, cookies, device information) Job application data (CV, covering letter) Service provider data (invoices, payment information)
5. How we collect data
Data is obtained when people provide it directly, through website forms, event participation, proactive outreach to interested parties, cookies, social media interactions and publicly available social media profiles.
6. Processing purposes and legal basis
Purpose Legal basis Establishing relationships Legitimate interest, consent Relationship management Legitimate interest, consent Running events Performance of a contract Processing job applications Contract, consent Improving our services Legitimate interest Fraud prevention Legal obligation Protecting our position Legitimate interest IT systems security Legitimate interest Supplier contracts Performance of a contract
7. Sharing data
CIIIC shares data with third parties working under data processing agreements, with event co-organisers where necessary, with supervisory authorities where legally required, and with service providers that support CIIIC's activities.
8. International transfers
Data is only transferred outside the European Economic Area where the European Commission recognises an adequate level of protection or appropriate safeguards are in place.
9. Retention periods
Retention periods vary depending on the processing purpose and the category of data. Historical data may be kept for archival, legal or research purposes.
10. Cookies
CIIIC uses functional and analytical cookies: Functional cookies: CIIIC cookies (29 days) Em_cdn_uid/Embedly (1 year) — displaying interactive content VISITOR_INFO1_LIVE/YouTube (179 days) — video playback Analytical cookies: _ga/Google Analytics (2 years) — visitor registration _gat/Google Analytics (1 day) — request throttling _gid/Google Analytics (1 day) — visitor analysis YSC/YouTube (session) — video viewing history
11. Business transfers
If CIIIC assets are transferred or the organisation merges, personal data may be transferred to the acquiring party. We will give advance notice.
12. Data subject rights
Data subjects have the following rights: The right to withdraw consent The right of access The right to rectification The right to erasure The right to restrict processing The right to data portability The right to object to processing or direct marketing The right to object to automated decision-making The right to lodge a complaint with CIIIC or the Dutch Data Protection Authority
13. Data security
CIIIC implements appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, disclosure and unlawful modification. Only authorised staff have access to personal data, subject to confidentiality obligations.
14. Changes
This privacy statement may be updated to reflect new processing activities, regulatory changes or technological developments. Substantial changes will be notified and, where necessary, will be accompanied by requests for consent.
Questions about your data?
Do you have questions about how we handle your data, or do you want to exercise your rights? Please contact us.