Privacy statement SURF B.V.

If you register for an event via our website, we shall ask you to provide the following personal details:

• first name and surname (mandatory)
• e-mail address (mandatory)
• organisation in which you work (mandatory)
• sector of the organisation in which you work
• job
• payment details
• dietary preferences
• any other information you voluntarily provide 

Why do we ask for this information?

We need your details in order to process your registration (legal basis for processing: performance of an agreement). In addition, we can carry out statistical research using this information in order to improve our services (legal basis for processing: SURF's legitimate interest) 

How long do we retain these details?

SURF may retain your details for up to 18 months after the event for the purpose of research. This research is aimed at improving the events we offer the target group. SURF pseudonymises the data for this research so that they are no longer directly traceable to individuals. To this end, SURF removes your name and e-mail address. After 18 months, your details are completely anonymised so that they are untraceable, either directly or indirectly. SURF may use the anonymised details only for statistical research.

If you register for a SURF online event, we process your personal data in order to process your registration. Under the heading 'Registration for events' you will find what personal data we process and why we do this.  

Videoconferencing online events

For online events, SURF makes use of parties with whom it has concluded a processing agreement. A SURF event can always be followed via your browser. It is therefore not necessary to download applications. However, downloading the desktop version of the tools can improve the viewing experience.

You may submit a session proposal for a SURF event via our website. If you register via our website to present a session at an event, SURF may process your following details:

• first name and surname (mandatory)
• mobile telephone number (mandatory)
• e-mail address (mandatory)
• gender
• job
• organisation or institution in which you work
• address
• sector of the organisation in which you work
• fellow speakers

Why do we ask for these details?

SURF has to process your details so that your session proposal can be processed. By sending us an e-mail, you consent to the processing of your details (legal basis for processing: consent).

How long do we retain these details?

If you submit a session proposal via our website, SURF will retain these details until the event takes place and then for a further 2 months for any follow-up questions and in order to send you the evaluation of your session.

Image and sound recordings of plenary and/or parallel sessions may be made during SURF events for the purpose of knowledge transfer. Speakers will be clearly visible in these videos; visitors will generally not be recognisable and will only be visible from the rear. However, we cannot guarantee this. If you do not wish to be recognisable in the video, you may take a seat at the back of the room. Usually only the front rows of visitors will be visible from the rear. As there are also sound recordings, any questions and comments will also be recorded. We shall publish the videos on the review page of our website for the period set out below.

Why do we ask for this information?

The processing of speakers’ details occurs in consultation on the basis of consent or on the basis of performance of the contract. The processing of details of visitors who may be visible in the video is based on the legitimate interest of SURF and its target group (legal basis for processing: legitimate interest). SURF and its target group have an interest in the transfer of knowledge that takes place through the publication of these videos. Before each session, it is clearly mentioned that image and sound recordings will be made and how to ensure that you do not appear in the video.

The videos fall under ‘journalistic/academic expression’ in the applicable privacy legislation (Article 85 GDPR) and are published on the Internet only as long as they have journalistic or academic value. Consequently, it is generally not possible to submit a removal request as long as the images still have journalistic or academic value. 

How long do we retain these details?

We retain the videos as long as they are of journalistic, academic or scientific value; SURF checks this every year. This value can be demonstrated, for example, by the fact that videos are frequently viewed.

During SURF events, professional photographers, camera people and SURF may take photos and record videos and/or vlogs. We may use these atmospheric images on our social media accounts, on our website, in the newsletter or a mailing from SURF about the event in question. We may also retain a small and carefully selected part of the visual material in an archive for the purpose of historical awareness.  

Why do we ask for these details?

We process these images on the basis of the legitimate interest of SURF. SURF has an interest in recording visual material of its events to raise awareness for the event.

You may indicate that you would rather not be visible in the images. We use a colour system for this. Based on your preference, you will receive a lanyard in a specific colour at the event. That way photographers, camera people and SURF can take your preference into account. SURF always takes the privacy of its visitors into account and carefully assesses the visual material to be used in publicity for the event.

How long do we retain these details?

In principle, SURF does not store visual material for longer than 2 years after the event. After 2 years at the latest, the visual material is permanently deleted.

In exceptional cases, SURF may retain a small and carefully selected part of the visual material for a longer period of time for the purpose of historical awareness. This visual material can be used later, such as for an anniversary. To the extent possible, we select visual material in which visitors are not clearly visible.

SURF may interview visitors during events. A video is made of the interview, which may be published on the website, for example.  

Why do we ask for these details?

SURF may ask visitors whether they wish to participate in an interview (legal basis for processing: consent). The interview will be made into a video, which SURF may use for public relations purposes (for example by publishing the video on the website or incorporating it in a review video). 

How long do we retain these details?

If you agree to processing of the interview, we do not retain the video of the interview for longer than 2 years after the event in question. In exceptional cases, SURF may apply a different time limit. If this is the case, we will clearly indicate this in a written statement of consent which we will submit to you before the interview is conducted. 

The interviews may fall under ‘journalistic/academic expression’ in the applicable privacy legislation (Article 85 GDPR). In that case, it is generally not possible to submit a removal request as long as the legal retention period has not yet expired.

If you contact us by e-mail for questions or support, SURF may process the following details you provide:

• name
• e-mail address
• any other personal data you send us by e-mail

Why do we ask for this information?

We need to process these details to be able to deal with and answer your question (legal basis for processing: consent). By sending us an e-mail, you consent to the processing of your details.

How long do we retain these details?

If you contact us by e-mail, we will retain your details for as long as necessary, based on the content of the e-mail, in order to deal with and answer your question and for any follow-up questions.

If you subscribe to the quarterly SURF Magazine via our website, we ask you for the following personal details:

• first name and surname;
• gender;
• address;
• email address;
• telephone number;
• organization for which you work;
• sector of the organization where you work; and
• job-title.

Why do we ask for this information?

We need your details in order to process your subscription to SURF Magazine (legal basis for processing: performance of an agreement). In every SURF Magazine there are instructions on how to unsubscribe. You unsubscribe by sending an email to communicatie@surf.nl

How long do we retain these details?

We retain your details for as long as you are a subscriber to SURF Magazine. Once you unsubscribe, we immediately delete your details. 

On our website, you can fill out forms for a variety of reasons. For example, you may register as a speaker for an event or fill out a feedback form. When you fill out a web form, SURF may ask you for the following details:

• first name and surname;
• address;
• email address;
• telephone number;
• area of interest;
• organization for which you work;
• sector of the organization where you work;
• job-title; and
• other information that you can provide optionally.

Why do we ask for this information?

We need your details in order to process your registration or request (legal basis for processing: performance of an agreement).

How long do we retain your details?

We retain your data up to 1 month after your request or registration has been fully processed, so that we can still answer any follow-up questions. 

If you subscribe to our SURF News online newsletter, we ask you for the following personal details:

• first name and surname;
• email address;
• organization for which you work; and
• area of interest.
• Every newsletter from SURF includes a link at the foot of the newsletter to allow you to unsubscribe.

Why do we ask for this information?

We need your details in order to process your registration (legal basis for processing: performance of an agreement).

How long do we retain your details?

Directly after you have signed out of SURF News, you will not receive the newsletter anymore.

We process personal data in the context of our customer relationship management, in order to fulfil our obligations under the agreements with our relations. For example, we can record data of contact persons of institutions, suppliers and other business relations in the SURF-wide CRM system. For the purpose of relationship management, we may process the following data:

• first name and surname; 
• gender;
• address;
• telephone number;
• cell number;
• role or job-title;
• department;
• institution or organization with which you are affiliated;
• email address; and
• short business visit report, if our relationship manager has visited you

Why do we process this information?

We need this information for the purposes of our customer relationship management (legal basis for processing: SURF's legitimate interest).

How long do we retain your details?

Data that are required to be retained by law will be retained for the period the law requires. We therefore retain the data included in the legal basic administration for up to 10 years after the end of the contract. In all other cases, we retain your data for up to 1 year from the end of the agreement. 

SURF offers a SURF Events app (“SURF Events”) with information about all SURF events. The SURF app, which you can download from the Google Playstore and the Apple ITunes Store, can be used without having to create a profile. In that case, you can view general information in the app, such as the programme of the event and the speakers. It is also possible to create a profile in the app, which gives you access to all functions. You can choose to keep your profile private or to make it public. Creating a profile allows you to place messages on the bulletin board, complete polls, receive push messages and see the profiles of other users, who have indicated that they wish to make their profiles public in the app.

When using the app, SURF may process the following personal data about you:

Use of the app without a profile

• IP address

Use of the app with a profile

• E-mail address (mandatory)
• Personal profile
  • first name and surname (mandatory)
  • business pitch (free field) (optional)
  • social media profiles (optional)
• DM messages sent (optional)
• Programme favourites (optional)
• Active and past events
• Likes and comments on bulletin board (optional)
• Polling choices (optional)
• IP address
• User ID

Why do we ask for or process these details?

We apply different principles for processing this information:

• E-mail address and personal profile. This information is necessary to create a personal profile for you in the app (basis: performance of contract).
• You may choose to make your personal profile public so that it is visible to all users of the SURF events app. This is not the default setting. By default, the app is set to keep your profile private. Your profile will only be made public if you actively choose this option (legal basis: consent).
• IP address and User ID. We process these data to ensure the security and stability of the system (legal basis: legitimate interest of SURF).
• All messages you send, the messages that you post on the bulletin board and any polls you complete will be processed on the basis of your consent (legal basis: consent).
• We may process your User ID, IP address and e-mail address to detect error messages in the app and to improve the app (legal basis: legitimate interest of SURF). You can read more about this under ‘Cookies and similar technologies’.

How long do we retain these details?

Transfer of data outside the EEA

A small part of your personal data may be transferred to IT service providers based in the USA. These parties operate under the Privacy Shield and must comply with European privacy legislation. 

Cookies and similar technologies

We use cookies when offering our app. A cookie is a simple, small text file that is stored on your device to make it recognisable. When we talk about cookies in this Privacy Statement, we also mean similar (tracking) techniques, such as scripts.

Our application uses the following cookies or similar technologies:

Functional: Sentry

Sentry is a script that we use to detect error messages in the app and to improve the app. The following personal data may be processed:

• User ID
• IP address
• E-mail address

These details are stored for a period of 31 days.

Third party: Google Maps

The app uses the Google Maps service, which makes it possible to display a geographical map. It can also be used to generate directions.

The information collected by Google is anonymised as much as possible. Google transfers the information to and stores it on servers in the United States. Google is Privacy Shield certified. This means there is an adequate level of protection for the processing of any personal data.

Delete profile

Steps to follow in order to delete your account and associated data.

What will be deleted?

• Data associated with your profile (e.g. name, email address, 'about you’ text, profile picture, job title, company, etc.)
• Associated sessions/meetings

1. Open the Van Lanschot Kempen Events App and click the profile icon (log in first if you’re not logged in already).
2. You land on the profile page, click the settings icon at the bottom left corner.
3. In the settings page, scroll down to the delete profile button, and click it

After confirming this action your profile data and all associated data will be removed. It will take up to 30 days for your data to be removed from our backups too.

SURF monitort het imago en de (online) reputatie van SURF. Hiervoor maakt SURF gebruik van de tool OBI Engage. OBI Engage wordt geleverd door OBI4wan en wordt naast (online en offline) monitoring ook gebruikt voor webcare en publishing. Voor deze doeleinden worden de volgende persoonsgegevens verwerkt:

• (Bedrijfs)naam, woon/vestigingsplaats
• E-mailadres
• Profielfoto
• Geboortedatum/leeftijd
• Geslacht
• Beroep
• Lifestyle kenmerken (o.a. gezinssamenstelling, woonsituatie, interesses, demografische kenmerken
• Data verkregen uit social media profiel (Facebook-, twitteraccount, etc.)

Waarom vragen we deze gegevens?

We verwerken deze persoonsgegevens om het imago en de (online) reputatie van SURF te monitoren (rechtsgrond verwerking: gerechtvaardigd belang).

Hoe lang bewaren we deze gegevens?

SURF kan zelfstandig binnen de door OBI4wan geleverde applicatie de bewaartermijn van persoonsgegevens instellen en aanpassen. De persoonsgegevens die verwerkt worden maximaal twee jaar na het verzamelen van de gegevens verwijderd uit de tool.

Doorgifte gegevens buiten de EER

Een klein gedeelte van jouw persoonsgegevens kan worden doorgegeven naar een verwerker die door OBI4wan wordt ingeschakeld die is gevestigd in de VS. Deze partij zal slechts sporadisch worden ingeschakeld en hierbij worden persoonsgegevens alleen op zeer kleine schaal worden verwerkt.  

Afmelden voor verwerking OBI Engage

Als je niet wilt dat deze persoonsgegevens van jou worden verwerkt door SURF, kun je je hiervoor afmelden. Afmelden kan via het adres online@surf.nl. Ook kan je tegen deze verwerking in bezwaar gaan volgens de gebruikelijke manier (zie onderstaand).

This involves the processing of your data for the purpose of:

• Nominating potential participants
• Participating in SURF Education Awards or SURF Research Champions
• Online publication by SURF of the winners' details after the event

Nomination

You can nominate yourself or someone else for the SURF Education Awards or SURF Research Support Champions via our website. To do so, it is necessary to process a limited set of personal data from both the nominee and the nominee. The following data of the nominee may be processed:

• First name (mandatory field)
• Family name (mandatory field)
• Institution (mandatory field)
• Function (mandatory field)
• E-mail address (mandatory field)
• Questions about the nominee (mandatory field)

If the nominee is nominated by another person, the following data of the nominator will be processed:

• Name
• Educational institution
• Position
• E-mail address

Participation

After the organisation has made a selection on the basis of the participant conditions, you can receive an invitation to officially register for the awards. If you participate, we will process the following personal data:

• Name
• Institution
• Function
• E-mail address

Online publication of winners

If you are among the winners of a SURF Education Award or SURF Research Support Champion, SURF will process and publish your data after the awards to report on, and publicise, the event and the winners via the website. SURF may publish the following data online for this purpose:

• Name
• Photo
• Institution
• Visual material in retrospective video
• Video of winners
• Interview with winners

Why do we ask for this data?

We need your details to process your nomination (legal basis for processing: legitimate interest). The legitimate interest of SURF and the education sector is to organise the SURF Education Awards and the research sector the SURF Research Support Champions. One of the aims of the awards is to encourage innovation and change in education and research. Without this information, it is not possible to nominate someone for awards. The interest of the nominee is to be able to participate in these awards.

In order to participate in the awards, your data will be processed on the basis of your consent (legal basis for processing: consent). Upon registration, you will be asked to agree to the processing of your personal data.

As regards the online publication of data on the winners, the basis for this data processing is the legitimate interest of SURF (and that of the education/research sector). SURF has an interest in reporting on the event and the winners via, for example, its website, newsletter and social media.

How long does SURF retain this data?

When you nominate or participate, SURF retains your data for up to 1 month after the SURF Education Awards or SURF Research Support Champions.

SURF applies the following retention periods for data concerning winners of the SURF Awards:

Which parties obtain this personal data?

Various tools can be used to organise the SURF Education Awards or SURF Research Support Champions. The data you provide will only be made available to third parties if this is necessary for organising the awards.