Privacy statement

This privacy statement is a first version. Some aspects in this privacy statement might be changed in the future to be in line with the law and best practices

The Portal project is a project from the TU Delft. In this privacy statement, it will be explained what personal data Portal collects when using the website. In this document the term Labrador will also be mentioned. Labrador is a project of the TU Delft, which will include Portal.

Topics

• What data do we collect?
• How do we collect your data?
• How will we use your data?
• How will we store your data?
• Other matters

What data do we collect

To support your education at the TU Delft, the university has a legal ground to store your data. To be more specific, it is a contractual necessity: the data processing is necessary for the performance of the contract between the student and TU Delft. Because of this, Portal collects the following data:

• Name
• Email
• Student number
• NetID
• Affiliation (if the user is a student or teacher)
• Which department/faculty the user is part of

Furthermore, there exist multiple subgroups in the system. We will describe for each subgroup the extra data we store.

Student

We collect the following information about students:

• The mentor group they are enrolled in
• Courses they are enrolled in
• The groups the student is/was part of

Teacher

For a teacher, we collect the following data:

• All courses the teacher teaches

How do we collect your data

All data we collect is collected when using the Portal website.

How will we use your data

At this moment, we only use the data given to support the functionality Portal promises, giving staff an easy way of interacting with the Labrador database.

Data is being used on a need to know basis. This means that student-assistants only see, what they need to see to fulfil their duties as teaching assistant and the same for teachers. Only administrators have access to the database.

A teacher might export data to use for purposes to calculate final grades or import it into other tools, namely BrightSpace and Osiris.

How do we store your data

To comply with GDPR regulations, all data is stored on site at the TU Delft. The data stored on our servers will be deleted after 5 years.

Access to data is strictly regulated with only select admins having access to the database. All other entities need to use the website itself, where, as mentioned previously, information is provided on a need to know basis.

Other matters

For matters like:

• What are your data protection rights
• Which cookies we set and why

Please refer to the Privacy Statement of the TU Delft

If you have any questions about the privacy policy or want to make use of your rights, please contact the following email address