Privacy
statement

SintLucas processes different types of personal data, for different purposes. The following explains what personal data and purposes these are.

Education

SintLucas provides education to vmbo pupils and mbo students. In order to be able to provide education, SintLucas processes various categories of personal data, such as contact details, gender, nationality, BSN details of parents and carers, date of birth, place of birth, education number, study progress, financial data, passport photo, absenteeism details and, if necessary, health data.

Videos
Our website automatically plays videos. The videos are played directly through our website using cookies.

Visitor administration
Visitors to any of our branches should report to reception. There they are registered as visitors and receive a pass for the duration of the visit. We register your name, organisation and arrival time.

Newsletter
If you have given permission, SintLucas may send you a newsletter. By means of our newsletter, we inform you about upcoming activities, projects and other news. To send our newsletter, we process your name, e-mail address and the given permission. An opt-out option is offered under every newsletter, so you can unsubscribe from the newsletter yourself.

Social media
SintLucas can be found on various social media, such as Facebook, X, Instagram, LinkedIn and Youtube. SintLucas uses social media plugins on its website. If you click on one of the social media buttons (and possibly register with your own account, information is shared with the social media website. In addition, we may process your personal data if you click on features such as a Facebook like or leave a comment. If you use such a function, we obtain the data through the social media website in question.

Camera surveillance
SintLucas uses camera surveillance to the extent necessary to protect property, employees, pupils, students and guests. Camera surveillance is part of a package of measures around security and social safety at SintLucas. Images are only made in publicly accessible places. The recordings are kept for a limited time and can be accessed by a limited number of employees.

Vacancies
SintLucas collects and processes data from applicants through personal contact, by post, by e-mail and/or by telephone calls. Among other things, we collect the applicant’s name, gender, contact details, motivation letters, information on educational level and employment history. This data is relevant for going through the application procedure and will be deleted no later than 4 weeks after the end of the procedure. If you give your consent, SintLucas may store your personal data longer in its administration, so that you can be contacted again in the future if necessary.

Contact
You can contact us by sending us an e-mail or calling us. To provide you with the best possible service, we ask for your name, e-mail address, address, telephone number and the question you asked us.

Trial days and trial lessons
Via our website, you can register for a trial lesson or an open day. In order to process your application, we require the following information: name, e-mail address, name and city name of your current school, current year of study, telephone number.

Open days
You can register for an open day via our website. This registration is not obligatory, but by registering we can send you more information about the open day by e-mail. To do this, we need the following details: name, e-mail address, level of current study and year of study, preferred study programme.

Brochure request
You can request a brochure (mbo/vmbo) via our website. In order to process your request, we need the following information from you: first name, middle name, surname, e-mail address, telephone number, street, house number, postal code, town name, current course level, current educational institution.

Project application
Through our website, you can register a project with our project office. To process your request, we need the following information from you: company name, industry, company street name, company house number, company postal code, company phone number, company website, gender, first name, middle name, last name, position, mobile, e-mail address, project description, desired start date, project deadline, completion date, available budget.

Training application
Through our website you can apply for a course. In order to process your application, we require the following information: school year application, choice of study programme, social security number, contact details, name, date of birth, address, nationality and details of previous education. If necessary, we will also ask you to upload a portfolio.

Club-S
You are SintLucas alumnus, or you have signed up for Club-S, the SintLucas alumni network. We will use your data to keep you informed about relevant developments and events within your chosen field or theme, aimed at knowledge sharing and increasing your career opportunities.

SintLucas does not sell your data to third parties. Nor does SintLucas transfer personal data outside the European Economic Area.

We do not share personal data with other companies or organisations, unless this is necessary in one of the following situations. With companies that process your data on our behalf, we conclude a processing agreement to ensure the same level of security and confidentiality of your data. SintLucas remains responsible for this processing.

Execution of an agreement
If necessary to fulfil our obligations towards you, we may share your personal data with other organisations. This includes, for example, sharing your personal data with other educational institutions if you take an elective course at another educational institution.

In addition, we may use anonymised data for research and analysis purposes. We make these anonymous data available to a third party for research purposes.

We may also share your personal data with supervisory bodies, healthcare institutions, partnerships and other educational institutions in connection with a transfer or further education.

Finally, we may pass on personal data if necessary for the provision and operation of digital educational resources. For example, for making backups.

Permission
With consent, we may transfer your personal data to other parties. Consent only applies if it is clear what you consent to and what the consequences are.

For external processing
We provide personal data to our partners so that they can process data for us, based on our instructions and in accordance with our privacy policy and other appropriate confidentiality and security measures. Our partners include our IT suppliers and administrator of the CRM system.

For legal reasons
We share personal data if we believe that disclosure of the data is necessary to comply with applicable laws, regulations, legal procedures or requests from governmental authorities.

Legal obligation
If a legal obligation requires us to do so, we will provide personal data. For example, the police may request data from us as part of fraud investigations. Another example is that the tax inspector may demand all data necessary to levy tax pursuant to Article 47 of the General Act on State Taxes.

SintLucas makes arrangements with the recipients of your personal data to ensure that the personal data are treated confidentially and secured.

SintLucas will not keep your personal data longer than strictly necessary to realise the purposes for which your data are collected. Legal requirements apply to our retention period(s). Thus we observe the statutory retention periods.

To ensure that the website functions properly, SintLucas uses cookies. A cookie is a small text file that is stored on the website visitor’s electronic device when they first visit the website. The purpose of cookies is to collect information about a person, the website or statistics. Some cookies also have the purpose of improving the user experience of the website.

Types of cookies
SintLucas distinguishes between functional and non-functional cookies. We always place functional cookies. They are necessary for the website to function properly. Functional cookies do not process personal data other than for the purpose for which they are entered. These cookies track, for instance, how you surf through our website. With this information, SintLucas can improve the functioning of the website. The data are not used to compile a profile of the internet use of website visitors, for example.

Non-functional cookies are not necessary for the functioning of the website. Such as, for example, analytical cookies. Analytical cookies allow SintLucas to know which parts of the website we can improve. Also, through analytical cookies the popularity of certain pages can be measured, for example.

SintLucas uses the following non-functional cookies:

Marketing cookies
SintLucas uses marketing cookies, which are advertising cookies. The cookies enable SintLucas to “follow” the website visitor. This means that the pages used by the visitor are tracked. This makes it possible to select advertisements that are relevant to the website visitor.

Statistical cookies
Statistical cookies are used by SintLucas to keep statistics, such as visitor statistics. This way, SintLucas has a better insight into the functioning of the website. The use of the website is, as it were, charted by these analytical or statistical cookies.

Tracking cookies
Tracking cookies are cookies which can also be read when you visit another website. These cookies allow Saint Lucas to track the internet behaviour of website visitors over time. Personal interests can be derived from this information.

Information about specific cookies on sintlucas.nl can be found at the bottom of this page*.

Under the AVG and its Dutch implementing law, data subjects (including website visitors) have a number of privacy rights, namely the right to: inspection, correction or addition, data erasure, restriction of processing, transfer of digital data and the right to object.

Right of inspection
You can request SintLucas to allow you to inspect the personal data we process about you. We ask you to identify yourself with the request by providing a copy of your driving licence or identity document. We will then process the request. In our response, we will explain what personal data we process about you and provide you with a copy. We will also explain for which purposes the data have been or are being processed, with whom the data are shared, how long they are expected to be stored, and what other rights you can assert.

Improvement or supplementation
Once we have granted you access to the personal data we process about you, you may also request us to correct or supplement incomplete data. We will consider the request and justify our response. In doing so, we will indicate whether we will correct and/or supplement.

Removal of personal data

You can also request us to delete your personal data in our systems in one or more of the following cases:

• the personal data are no longer needed for the purposes for which we process them
• you withdraw your consent for (further) processing and there is no longer any other basis for processing;
• you make a reasoned objection and there are no compelling reasons not to honour the objection;
• the personal data have been processed unlawfully by us;
• we have to delete the personal data on the basis of a legal obligation.

Restriction of processing
In addition, you have the right to request us to restrict data processing. If the following criteria are met, we will proceed with the restriction:

• the personal data may be inaccurate;
• the processing is unlawful;
• the personal data are no longer needed;
• you object to the processing of the data, and there are no other overriding interests that make processing necessary.

Transfer of digital data
If you have provided personal data to us and we have processed your data, you have the right to ask us for a copy of this data. In such cases, you can also ask us to transfer your data directly to another service provider.

Objection
You may object to the processing of personal data relating to you at any time. This applies in particular to profiles created on the basis of your personal data. We will stop processing your data upon receipt of the objection, unless we can provide compelling legitimate reasons which outweigh your interests, rights and freedoms.

Do we process your personal data for direct marketing purposes? If so, you may object at any time and we will cease processing immediately.

Complaints
Finally, it is possible to file a complaint with the Personal Data Authority about the processing of your personal data. More information about the complaints procedure can be found on the website www.autoriteitpersoonsgegevens.nl.

Exercising your rights
If you wish to exercise one or more of your rights listed above, please contact our data protection officer via the e-mail address privacy@sintlucas.nl SintLucas will decide on your request within 4 weeks, unless we inform you within that period that we need even more time.

Are your personal data being processed on the basis of consent given? Then you have the right to withdraw the permission. Any withdrawal of consent is without prejudice to any previous processing on that basis.

If you have any questions about the above, please contact Pascal Marcelis, data protection officer, at the e-mail address: privacy@sintlucas.nl

This privacy statement has been prepared in accordance with the (U)AVG. SintLucas reserves the right to periodically update the privacy statement. The latest version is always published on this page.