Privacy Policy

Condensed version LLInC Privacy Policy  

Everyone says that they take your privacy seriously. We think we don’t need more seriousness; we need more responsibility! As a part of the LLInC’s approach to Data Responsibility, we believe that any information about your privacy should be available in accessible and transparent language. 

In this condensed version of our Privacy policy, we will tell you what you need to know, the essential. Do you want to have more details about how we process personal data? In that case, we encourage you to read the full version (we promise it is not as complex as others you might have seen out there). 

When you use the LLInC website and some of the services we offer here (like our newsletter), we may access some information about you that can be classified as personal data. 

I thought this was a website. How can you get my personal data? 

Well, we collect information about you from three different sources:

1. Directly from you. This happens when you give us your email address and name for subscribing to our newsletter, when you send us an email with your information, when you apply for a job position, etc.
2. By automatic systems, we have in place. We use cookies and other similar technology to collect aggregated data about our website’s users’ interaction.
3. From outside sources. Like any other organisation, we use third-party services to help us with our daily tasks. We use tools for distributing our newsletter, hosting our website, open and reply to emails, etc. These tools may often supply information in the form of aggregated data linked to the user’s use.

This information is necessary for running and optimising our website and services. Believe us; we only collect and process what is strictly necessary. Nothing else—unlike others, data is not our business. If you are interested in seeing our specific purposes for processing, click here. 

Also, here are some important notes: 

• We process the personal data you directly provide to us only on the basis of your consent. This is good news, you know why? Because you can always withdraw your consent.
• We will never share your data with others unless it is strictly necessary for our services providers to work (e.g., our newsletter tool needs your email address to send you the email) or we are legally obliged to (in case the police knock on our office door with a judicial warrant). Otherwise, your data will not move from our servers.
• In case we need to process your data outside the EU (e.g., we have a service provider with servers in the USA), we will take all the necessary safeguards to protect your data and follow the latest guidance available from the EU.
• We will delete your personal data as soon as it is not necessary any more. This means that we will store it only if needed to provide you with our services or comply with legal or regulatory obligations.
• We want to protect your data. We aim to uphold appropriate technical, administrative, and physical precautions to secure your personal data.
• We will not voluntarily process personal data of children under the age of 13.
• The GDPR provides you with very important rights! Look at them here. If you have any questions or want to make use of them, do not hesitate to contact us at privacyandprotection@llinc.leidenuniv.nl.
• If you have ANY other doubt, don’t be shy and contact us also at
• privacyandprotection@llinc.leidenuniv.nl.
• Lastly, we remind you that this is just a summary of our Privacy Policy. Only the extended version has legal validity. 
  

Extended version LLInC Privacy Policy  

Welcome to Centre for Innovation (“LLInC”) website. The LLInC is part of Leiden University, The Netherlands (“Leiden University”). When we mention “LLInC”, “we”, “us” or “our” in this Privacy Policy, we are referring to the Leiden Learning & Innovation Centre of Leiden University. 

This privacy policy (“Privacy Policy”) applies to all personal data collected through and/or processed in connection with the website www.leidenlearningandinnovationcentre.org (the “Website“), and verbal, email, text and other electronic messages between you, our Website and/or LLinC’s personnel, including our newsletter (collectively referred to as the “LLInC Online Services“). 

If you are looking for the Privacy Policy of our community XR ERA, please follow this link. 

In this Privacy Policy, we inform you of our practices with respect to the collection and use of your personal data when using the LLInC Online Services. We may act as a data controller or data processor within the meaning of the General Data Protection Regulation (GDPR). 

This privacy policy explains, among other things, the following topics: 

Within the LLInC Online Services, you may come across links to other websites, apps and services, or applications that allow you to share information with other websites, apps and services. We are not responsible for the privacy practices of these other websites, apps and services and we therefore recommend that you review the privacy policies of those websites, apps or services before accessing or using them.  

If you do not agree to the provisions of this privacy policy, you should not use the LLInC Online Services. 

Our principles of privacy  

At the LLInC we strive to put people first in innovation, and hence we believe that you should know what information we collect about you, why we do it and how we use and share it. The Centre legally complies with the General Data Protection Regulation (GDPR) of the European Union (EU), but also aspires to uphold the principles of Data Responsibility That is why we have created this Privacy Policy to provide you with simple, clear, and actionable information about our privacy and data protection practices. 

 This information will be accessible to you, either online through our Privacy Policy or direct request to the Data Protection Officer of the Centre. 

Information We Collect  

The personal data we collect is related to the provision of the LLInC Online Services and its functions and falls under three general categories:  

• Information provided by you;
• Information We collect automatically;
• Information we obtain from outside sources. 

In keeping with the principle of data minimisation, we aim to collect as little personal data as possible and only that data which is necessary for us to carry out our work. 

Information provided by you  

When you use or intend to use some of the LLInC Online Services, we request and collect the personal data mentioned below. These data are necessary for the adequate performance of the services provided to you and for compliance with our obligations arising from our Terms of Service. 

We may also process this data in the context of our legitimate interest to improve the LLInC Online Services and provide our users with the best experience. Without this information, we may not be able to provide you with all the requested services and functions on the LLInC Online Services. 

Despite you do not need to provide us with your personal data in order to visit or use the Website, some of our services require do so: 

• Newsletter subscription – If you subscribe to the LLInC’s newsletter, we will collect personal information, such us:
  • your email address;
  • your name (optional);
  • your organisation (optional).
• Messages – When you communicate with LLInC by email, telephone, or other means, we collect data about your communications and any information you provide.
• Job Applications – If you apply for a job with us, we may collect personal data such us your name, address and contact details, including email address and telephone number, details of your qualifications, skills, experience and employment history, information about your current level of remuneration, including benefit entitlements and all the information included in the CV you send us.
• Survey Information – If you participate in a survey or complete forms provided by us, you may provide certain personal information as part of your response unless you respond anonymously.  

Information we collect automatically  

We collect certain data automatically when you use the LLInC Online Services. This data typically includes:  

• Website Usage Data – We use cookies and other similar technology to collect aggregated data about the users’ interaction with the Website, such us the pages they visit, source where they have come from, the links they click, approximated location based on IP address, frequency and duration of their visits to the Website. 

Information from outside sources  

• Service providers – We may also receive information about you through our service providers, including companies that assist with analytics, data processing and management, hosting, and technical services, and other services that we use to provide the LLInC Online Services. Below we explain in detail how we use this data and who our third-party providers are. 

How we use your data  

We use the personal data we collect from you, automatically or from outside sources, for different purposes based on different legal bases for processing.  

• To provide you with the LLInC Online Services
  We use your name, email address and organisation (optional) when you subscribe to our newsletter to send you our newsletter and other important communications. We process this data on the basis of your consent. You can unsubscribe from our newsletter at any time you want. 

• To maintain, protect and improve the LLInC Online Services
  We may process personal data with the purpose of maintaining, protecting, and improving the LLInC Online Services. In addition, we may process this data out of our legitimate interest, to improve the LLInC Online Services and to provide our users with the best experience; and based on a legal obligation. The main purposes for this processing are:
  • We may test features that are being developed and analyse the data we have to review and improve our services, develop new features, and troubleshoot problems. 
  • Detecting and preventing fraud, spam, abuse, security incidents and other suspicious activities. 
  • Improving the safety and security of our services. 
  • Preventing or taking action against activities that may or may not violate our Terms of Service, or applicable law.
  • Complying with our legal obligations;
  • Protecting the rights and property of the LLInC and Leiden University;
  • Providing technical support.
• To communicate with you 
  For example, by emailing you to respond to your questions, get more information in case you report any problem of the website, or keep you up to date on LLInC Online Services. If you do not want to hear from us, you can opt out of our communications at any time.
• Other purposes
  In addition, we may use your data for other purposes, provided that we disclose the purpose and use to you in a timely manner and that you consent to the proposed use of your personal data. Which of your data we process based on your consent, depends on the purpose of your consent. 

Sharing your data  

This section describes how the information collected or generated as a result of your use of the LLInC Online Services may be shared by you or by us.  

• Service Providers – We use and share your information, including personal data with some of our service providers in order to ensure that the LLInC Online Services are properly performed. For example, we work with service providers of cloud storage (that help us to store data), postal and email delivery (that help us stay in touch with you), hosting providers (for hosting our website),analytics providers (that help us understand and enhance our Services), programs that help us with task management, scheduling, word processing, email and other communications, and collaboration among our team. Some of service providers may be located outside the European Economic Area (“EEA”), to provide services to us or to our users on our behalf. These service providers have access to information about you only to provide their services on our behalf and are contractually obligated to take appropriate organisational and technical security measures to protect personal data from unauthorised disclosure and to only process personal data in accordance with our instructions and to the extent that this necessary to provide their services to us. These service providers are usually only allowed to process your data on our behalf under special conditions.  
• Compliance with Laws – We may provide your information to courts, law enforcement agencies and government authorities (i) to comply with our legal obligations, (ii) to comply with legal process and in response to claims against LLInC or Leiden University, (iii) in response to verified request in connection with a criminal investigation or any suspected or suspected illegal activity or any other activity that places us, you or any of our other users legally liable, (iv) for performing or applying our Terms of Service and other agreements with users or ( v) to protect the rights, property or personal safety of LLInC and Leiden University, its employees and outsiders.  

You can request our authorised partners and service providers (data processors) here. 

Information security  

We take appropriate technical, administrative and physical precautions designed to prevent unauthorised access, use or disclosure of the personal data collected or stored by us and ensures an appropriate level of security for risks to the rights and freedoms of natural persons who may be involved in our processing activities. We regularly check our systems for possible vulnerabilities and attacks. However, it is not possible to guarantee the security of information transmitted over the Internet. You use the LLInC Online Services and provide us with information at your own discretion and risk. 

International data transfers  

Some of our service providers may be located outside the European Economic Area (“EEA”), and we share your information with them for the purposes described in this privacy policy. We use appropriate safeguards, such as the standard contractual clauses approved by the European Commission or, if required, additional measures to ensure the lawful transfer of your personal data outside the EEA. 

Children  

The LLInC Online Services are not intended for use by children. Persons under the age of 16 in the EEA or 13 years of age in the United States and the rest of the world should not use the LLInC Online Services or provide personal information to us. We never knowingly collect personal information from anyone under the age of 16 or 13, as the case may be, nor do we authorise them to use the LLInC Online Services. If we learn that we have collected personal information from a person under the age of 16 or 13, as the case may be, we will delete that information as soon as possible. If you think we may have collected such personal data, please let us know immediately at privacyandprotection@llinc.leidenuniv.nl.   

Exercising your privacy rights  

You can exercise the rights described in this article by contacting us at privacyandprotection@llinc.leidenuniv.nl. Please note that if you have reasonable doubts about your identity, we may ask you to verify your identity before taking any further action on your request.  

• Access and transferability of data 
  • You have the right to find out whether or not your personal data is being processed by us and, if that is indeed the case, to inspect that personal data. You may also have the right to request copies of your personal data held by us. 
• Change or correct data 
  • You have the right to ask us to correct, change, update or rectify your data. 
• Retain and delete data 
  • We usually keep data for as long as is strictly necessary to provide you with the LLInC Online Services. 
  • You have the right to ask us to erase all or part of the personal data we hold about you.
  • We may also need to keep certain personal data after you describe from our newsletter if this is reasonably necessary to comply with our legal obligations (for example, under applicable tax or commercial law or to prevent fraud or abuse and improve security). After that, we will delete the data immediately, unless we have to keep the data until the expiry of the statutory limitation period to be able to provide evidence in civil claims or due to legal storage obligations (for example for accounting reasons). 
• Objection to processing 
  • You have the right to object at any time to the processing of your personal data for reasons related to your specific situation (in particular when the data processing is not necessary to comply with a contractual or other legal requirement or when we transfer the data use based on our legitimate interest). 
• Restricting Processing 
  • Under certain circumstances, you may have the right to limit the way we use your personal data. 
• Revoke consent 
  • If you grant us permission to process your personal data, you can withdraw your consent at any time by sending us a notice stating the specific consent you are withdrawing.
• File complaints 
  • You have the right to complain to a competent data protection authority about our data processing activities. We are under the supervision of the Dutch Data Protection Office.  

Contact information  

If you have any questions or complaints about this Privacy Policy or our practices, please contact our Officer by email at privacyandprotection@llinc.leidenuniv.nl. 

Changes to this Privacy Policy  

We may update this privacy policy from time to time and at our sole discretion. If we change this Privacy Policy, we will post the revised Privacy Policy on the Website and update the “Last Modified” date below. Please check this page periodically to make sure you are aware of any changes to this Privacy Policy. Newsletter subscribers will be notified of substantial changes to this Privacy Policy by means of a notice to their emails / or by posting a notice of the change on the website. Your visits to the Website or use of the LLInC Online Services after the effective date of those changes are subject to the revised Privacy Policy.  

Last modified: January 23, 2023.