Privacy statement for information events

Your privacy is important to Maastricht University (UM), and we therefore exercise caution in making use of your data. UM is the data controller for your personal data. This privacy statement sets out how UM safeguards your privacy.

This document specifically concerns the processing of personal data in the context of open days, experience days and other information events at UM. UM also has a general privacy statement, available at, which we refer you to for more information.

Contact details

If you have questions about this privacy statement, want to know more about how UM handles personal data or wish to make a complaint, please contact:

Attn: Data protection officer
Maastricht University
PO Box 616
6200 MD Maastricht

You can also send an email directly to the UM data protection officer via

Which personal data does UM process?

UM may process the following personal data in the context of its open days and other information events:

  • name
  • email address
  • date of birth
  • nationality
  • country of origin
  • post code
  • relationship with UM
  • prior education
  • expected starting year
  • name accompanying person (no mandatory field)
  • email address accompanying person

UM obtains these personal data directly from you.


UM processes the abovementioned personal data in order to:

  • organise open days, experience days and other information events
  • evaluate information events
  • improve the quality of events to align them more closely with visitors’ wishes
  • organise marketing activities.

Legal grounds

For UM to process your personal data, there needs to be a legal basis for doing so. The legal grounds provide the justification for processing your personal data.

UM processes your personal data as a matter of public interest. After all, UM’s role is to provide university education, and it can only do so when enough students wish to take part in that education.

Marketing activities are only carried out with your consent. You have the right to withdraw your consent at any time, although you cannot do so with retroactive effect.

Retention periods

UM retains personal data no longer than is necessary to achieve the purpose of the data processing or to meet a legal obligation. Your personal data are deleted from our systems one year after your expected starting date, unless you enrol at UM; in that case your data are transferred to our student database.

If the data are processed on the basis of your consent, they will be deleted within six months of you withdrawing your consent.


Third-party access

UM has taken measures to ensure that only those people involved in processing your data have access to them. Your personal data are not shared with third parties, with the exception of parties providing services to UM. UM has entered into written agreements with these parties on the processing and security of personal data.

Your rights

Privacy legislation gives you a number of rights with regard to your personal data. These rights are outlined below. You can find more information about these rights and how to exercise them in the general privacy statement at

You have the right to access your personal data and to have those data corrected or deleted. In addition, you have the right to restrict the processing of your data, to transfer your data to another party, and to object when they are processed on the basis of a legitimate interest.

If you wish to exercise one of the above rights, please send an email to or directly to the data protection officer at

If you have a complaint about the processing of your personal data at UM, please contact us using the above contact details. You also have the right to file a complaint with the Dutch Data Protection Authority. You can find out how to do so on the website of the Data Protection Authority.