What are my rights

What rights do I have?

As a data subject, you have rights of access, rectification, forgetting, restriction of processing, transferability of data and the right to object and complain to a supervisory authority.

Right of access

The General Data Protection Regulation gives people more control over their personal data. They have the right to ask what data Tilburg University has about them. They are permitted to ask to see this data.

In the Tilburg University data register you can see which data we process for each category of data subjects, for what purposes this data is processed, how we have obtained this information and to whom we provide the data.

Tilburg University strives for greater transparency. Via our portals, more information is visible and can be updated by datasubjects themselves.

More information

For further information on the Tilburg University procedures, see the document Request to Access Personal Data.

Right to rectification

The General Data Protection Regulation gives people the right to have inaccurate personal data rectified or to add additional information to their personal data.

Every organization is responsible for ensuring that the personal data processed is accurate and that it is updated when necessary.

If, in view of the purpose for which it is being processed, personal data is incorrect, the organization concerned is obliged to take all reasonable measures to rectify or supplement this data. If an organization has provided third parties with inaccurate or incomplete personal data, it must also pass on the amended or additional data to these third parties.

Tilburg University strives for greater transparency. Via our portals, more information is visible and can be updated by datasubjects themselves.

More information

For more information about the procedures of Tilburg University, see the request to rectify personal data.

Right to be forgotten

Article 17 of the General Data Protection Regulation includes what is known as the right to be forgotten. According to this right, organizations must erase personal data in a certain number of cases if a data subject (the person whose data the organization is processing) requests this.

The right to be forgotten does not always apply. The right to be forgotten is applicable in a number of clearly-defined situations only.

The General Data Protection Regulation gives people the right to have inaccurate personal data rectified or to add additional information to their personal data.

More information

For more information about the procedures of Tilburg University, see the request to erase personal data.

Right to restriction of processing

In certain situations, the General Data Protection Regulation gives people the right to restrict the use of their data. The right to restriction of processing applies in situations that meet one of the following criteria:

  • The data may be inaccurate
  • The processing is unlawful
  • The data is no longer needed
  • The data subject has objected

More information

For more information about the procedures of Tilburg University, see the request to restrict processing of personal data.

Right to transfer data

The General Data Protection Regulation gives people in certain situations the right to receive the personal data in a structured, current and machine-readable form for the transfer to another controller. If technically possible, Tilburg University provides this transfer to the other organization itself. The right to data portability applies in situations that meet the following criteria:

  • Data is obtained on the basis of permission or agreement.
  • The processing is automated.

More information

For more information about the procedures of Tilburg University, see the request to transfer personal data.

Right to object

The General Data Protection Regulation gives people the right to object to the processing of their personal data. If an organization processes personal data for the purposes of performing a task in the public interest or on the grounds of a legitimate interest, data subjects have the right to object to the processing of this data. If someone objects to the processing of his or her personal data, the organization must refrain from processing the data.

If someone objects to the processing of his or her personal data, the organization must refrain from processing the data, unless there are grounds that outweigh the interest of the person concerned. This consideration does not apply to direct marketing.

More information

For more information about the procedures of Tilburg University, see the object to the processing of personal data.

Right to file a complaint with a supervisory authority

The General Data Protection Regulation gives people the right to file a complaint with a supervisory authority.

If you have followed the usual procedures of request and / or objection and you are not satisfied by the followed procedure of the answer, you can submit a complaint to a supervisory authority.
The first point of contact for complaints is the internal supervisor, the Data Protection Officer.
The contact details can be found here (see 'Data Protection Officer').

Based on article 36 UAVG you can also submit a complaint to the external supervisory authority, the Dutch Data Protection Authority.