ULLA Online Courses

1. Who is responsible for the processing of my personal data?

Stichting ULLA (a Dutch foundation) is responsible for the data processing operations described in this privacy statement. Third parties might process data on behalf of ULLA. ULLA has data processing agreements with third parties to ensure safe handling of personal data.

2. What (categories of) personal data will be processed?

We will process the following personal data:

1. Name;
2. E-mail address;
3. Institution details;
4. Relevant prior experiences for ULLA online courses;
5. Technical browser information;
6. Course contributions (including but not limited to contributions to discussion forms, uploaded files, assignments);
7. Attendance.

3. For which purposes are my personal data processed, and on the basis of which legal grounds?

The personal data will only be used for the following purposes:

1. Facilitating and providing online courses;
2. Course enrolment;
3. The use of software necessary for courses (including but not limited to LMS software);
4. Following online courses;
5. Viewing and/or grading submissions;
6. Evaluating the courses and services of ULLA.

We process your personal data on the basis of the following legal grounds:

• The processing is necessary for the performance of an agreement to which you are a party. For example, your enrolment for an online course.
• The processing is necessary for the purpose of pursuing our legitimate interests. These legitimate interests consist of the mentioned purposes.

4. Who has access to my personal data?

The personal data will only be accessed by employees of the partner institutes of ULLA who by reason of their function have a role in the processing of your personal data for the abovementioned purposes and for whom it is necessary that they have access to the personal data.

5. Will my personal data be shared with third parties?

When processing your personal data, we may use service providers (processors) who process your personal data on behalf of and under the responsibility of ULLA. ULLA concludes processing agreements with these service providers to ensure that your personal data is processed carefully, securely and in accordance with the General Data Protection Regulation (GDPR). We remain solely responsible for these processing activities.

Your personal data will not be shared with other parties. Should this be the case at any time, we will inform you of this. We only disclose personal data to third parties to the extent permitted by privacy law, for example because you have given your prior consent or we are legally obliged to do so.

6. Will my personal data be transferred to countries outside of the European Economic Area?

Yes, your personal data might be transferred to international organisations or countries outside the European Economic Area (EEA). The EEA includes all EU countries plus Norway, Liechtenstein and Iceland. Transfers of personal data between these countries are not subject to additional rules under the GDPR. These transfers take place to countries that have been labelled safe by the European Commission.

7. For how long will my personal data be retained?

We will not retain your personal data for longer than is necessary to achieve the predetermined purposes stated in this privacy statement or as long as required by law. The personal data shall not be kept for longer than is necessary for the purposes as stated in this Privacy Policy, in accordance with the applicable data protection laws, unless you have submitted a reasonable and valid request to delete your personal data.

Categories of personal data	Retention period
Name	5 years
E-mail address	5 years
Institution details	5 years
Registration survey data	2 months after finishing the course
Technical browser information	Depends on browser settings
Course contributions	5 years
Attendance	5 years

8. How will my personal data be secured?

ULLA takes appropriate technical and organizational measures to protect your personal data against loss and any form of unlawful processing. These measures include, among others:

1. measures to ensure that only authorized personnel have access to the personal data;
2. measures to protect the personal data against unintentional or unlawful destruction, unintentional loss or revision and unauthorized or unlawful storage, processing, access or disclosure.

9. Who can I contact with questions about the processing of my personal data?

You can ask questions about how we process your personal data via onlinecourses@ullapharmsci.org.

10. How can I exercise my privacy rights?

On the basis of the GDPR you have the right – under certain conditions – to access your personal data that we process, to correct your personal data if it contains factual inaccuracies, to delete your personal data, to limit the processing of your personal data, to portability of your personal data and to object to the processing of your personal data.

If you wish to exercise any of these privacy rights, you can contact the Management Assistant Executive Committee of ULLA via:

     onlinecourses@ullapharmsci.org

To be able to deal with your request, you may be asked to identify yourself on the basis of additional personal data that ULLA has of you. If this method of identification is not possible, you may be asked to identify yourself with an identification card. In this way it will be verified that the request has been made by the right person. If you are not satisfied with the way in which we deal with your personal data, you always have the right to submit a complaint with a supervisory authority.

***