Privacy
What is personal data?
Personal data is information that directly relates to an identified or identifiable natural person or information that can be traced back to that person. Examples of personal data are a residential address, telephone number and email address, but also details that are related to a person, such as which information a person seeks or information about a person's education.
Sensitive personal data
Some personal data is extra sensitive because the processing of this can have a considerable impact on somebody's life. Data that reveal somebody's ethnicity, religion or health are examples of special personal data. These data enjoy extra protection in law. Personal data about children and about criminal record information are always sensitive, and so these always receive extra protection.
You can find more information about personal data on the Dutch Data Protection Authority's website.
Why does ZonMw process your personal data?
ZonMw collects, uses, archives and deletes personal data of contact persons, grant applicants and applicants within other programmes of ZonMw. The processing of this data is necessary to be able to fulfil our mission of using knowledge to realise a good health for everybody. Personal data is also collected via forms for meetings and sharing project results.
Practice-oriented/academic research
On behalf of its contractors (Ministry of Health, Welfare and Sport (VWS) and the Dutch Research Council (NWO)), ZonMw regularly commissions practice-oriented and academic research. We always try to do that using anonymised data. However, should it be necessary to process non-anonymised personal data, we will ask permission from the person involved or a declaration of consent. In all cases, we will process personal details that can be traced back to a person as little as possible and will ensure that the results of the research cannot be traced back to people.
How does ZonMw deal with your personal data?
When it processes personal data, ZonMw adheres to a number of basic principles and it takes measures to ensure a reliable, thorough and careful handling of personal data.
Data Protection Officer
ZonMw has appointed a Data Protection Officer (DPO). The DPO is independent and checks whether ZonMw correctly applies and complies with the General Data Protection Regulation (GDPR). The Dutch Data Protection Authority supervises the application of privacy legislation.
What are ZonMw's basic principles for the processing of personal data?
For a legal reason and for a purpose
ZonMw only processes personal data if there is a legal reason to be allowed to process these, or on the basis of consent from the person whose personal data are involved. Furthermore, we ensure that personal data are only processed for the specific purpose for which they have been collected. In the case of consent, you can always withdraw the consent later.
Using as little data as possible
ZonMw processes no more personal data than is necessary. Where possible, we process fewer or no personal data.
Minimising the infringement of privacy
ZonMw ensures that the infringement of privacy is in proportion to the purpose that the collection of data serves. In such instances, we choose for the processing of personal data that causes the least infringement of privacy if there is a choice between collecting numerous personal data to achieve a goal.
Storing data for the shortest time possible
We store your personal data at the Ministry of VWS:
- for as long as is needed for the purpose for which the data was collected,
- or for as long as the Dutch Public Records Act requires, and
- never longer than is permitted by law.
Which measures does ZonMw take in dealing with personal data?
Reliability, integrity and confidentiality
ZonMw takes measures for a reliable, thorough and meticulous handling of personal data:
- Personal data is treated confidentially. This means that ZonMw ensures that only people with the right competencies and a duty of confidentiality can process your data;
- Personal data is protected in an appropriate manner. In doing so, we follow at least the requirements and standards of the Dutch government for information security;
- ZonMw enters into agreements about measures with external parties such as software suppliers and data centres. And ZonMw checks whether external parties comply with these agreements.
When are your personal data shared?
In a few cases, ZonMw is authorised and sometimes required to request or supply data and information to other organisations. This requires that the objectives are compatible with the original purpose of collection.
Which rights do you have?
You have a number of rights, such as the right to inspect and to rectification. If you want to know which of your personal data ZonMw processes, you can request to inspect this. ZonMw will process your request within 4 weeks.
If you submit an appeal based on one or more of your privacy rights, then please do not forget to send proof of your identity. Valid proofs of identity are, for example, a passport or driving licence. With the KopieID app, you can use your smartphone to make a safe copy of your proof of identity. The app has been made by the Ministry of the Interior and Kingdom Relations. You can read how to download the KopieID app via this link.
If you want to inspect sensitive personal data or data of juveniles, we will ask you to identify yourself when you come to collect the information from us. This is because we want to be certain that we provide the information to the correct person.
What if your data proves to be incorrect, incomplete or not relevant? Then you can make an additional request for your data to be changed, deleted or rectified.
Submitting requests, questions and comments
The Data Protection Officer is your point of contact for questions and comments about the processing of your personal data. You can submit requests digitally or in writing.
Digitally via: privacy@zonmw.nl
In writing to:
ZonMw
Data Protection Officer
Laan van Nieuw Oost Indiƫ 334 |
PO Box 93245 2509 AE The Hague The Netherlands |
For questions about your rights or for submitting a complaint, please contact the Information and Privacy Desk of the Dutch Data Protection Authority.