processes personal data. In this Privacy Statement we inform you about the purposes for which personal data are processed, how you can exercise your privacy rights and other information that may be of interest to you.

This Privacy Statement applies to all activities of, hereafter referred to as Space for Business. This Privacy Statement gives the most relevant information about the relevant topics.

Space for Businesshandles personal data in a careful manner and acts within the limits of the law, including the Dutch Personal Data Protection Act (Wbp) and, after May 25 2018, the General Data Protection Regulation (GDPR).

Responsible party and responsibility

Space for Business is within the terms of the Wbp and GDPR the responsible party. Space for Business considers it essential that the personal details of its students, employees and visitors are handled and secured with the utmost care. We also want to be open about the way in which your data is processed by us. That is why we give the undermentioned explanation. Most importantly, we always comply with the requirements set by the Wbp and GDPR.

For what purposes does Space for Business process your personal data?

The personal data collected from you will be used by Space for Business used for business operations and for the proper performance of (legal) tasks and duties for education and research. The most important processes for which Space for Business personal data are processed are:

  1. Education administration and educational support: recruitment, recruitment & selection of new participants, participant administration, internal and external information provision, recording of results, issuing certificates, formation and execution of agreements with participants, customer involvement, relationship management and marketing, health, safety and security, organization analysis, development and management reporting, substantiation for accreditation studies, advice and guidance, handling of disputes, being able to perform an audit.
  2. Personnel matters: salary entitlements, execution of the employment contract, settlement of claims for benefits in connection with the termination of employment, internal and auditing and in connection with the company medical care.
  3. Operational management and finances: financial administration, managing purchasing systems and payment systems, executing and managing procedures aimed at IT, legal affairs and other business operations. Recruitment, recruitment and selection of new employees and candidates, personnel management, internal and external information provision, realization and execution of agreements with employees, customers, consumers, suppliers and business partners, customer engagement, relationship management, marketing and market research, health, safety and security, organization analysis, development and management reporting, complaint handling.
  4. Facility processes: access and management systems.
  5. General processes: (Web/Online) content management, physical and digital archiving, complaints procedure and appeal and objection.
  6. (Scientific) research.

Space for Business processes personal data by means of the various websites of Space for Business , such as personal data obtained via contact forms. This is based on permission by the subject involved or because of the legitimate interest of Space for Business . All processes in which personal data are processed are recorded in a register of processing activities. Space for Business thus has a complete and up-to-date overview of all data processing processes.

From whom does Space for Business collect personal data?

In the processes mentioned above, Space for Business collects data from different categories of data subjects. These are:

  • Programme participants / Students
  • Prospective programme participants / students
  • Alumni
  • Employees, including PhD students and applicants
  • External parties, including temporary staff
  • Visitors of the website(s)
  • Research subjects

Which personal data does Space for Business collect?

In each process, other personal data is collected. The most common data are:

  • Name and address details (name, address, place of residence);
  • Bank account number (IBAN);
  • Phone number;
  • Date of birth;
  • E-mail address;
  • Interaction data (e.g. cookie or information received when you contact us)
  • Images (photos and videos)
  • Study information, study progress and study results
  • Web browsing and click behavior
  • Research data

Space for Business collects (personal) data directly from you, but in some cases Space for Business also receives personal data via third parties to the extent that this is in accordance with the law.

Giving and revoking of consent

Space for Business offers various activities that can only be carried out by using your personal details. For example of your e-mail address for sending a newsletter, or your study characteristics for conducting research. Your data will only be used if you give explicit permission for this. You will always be informed of the purposes for which your data will be used, which data it concerns and to whom it is provided. If you give Space for Business permission for the use of personal data, you can always revoke this consent at a later date.

How does Space for Business ensure confidential handling of personal data?

Space for Business deals confidentially with personal data. Space for Business takes appropriate technical and organizational measures to protect personal data. Space for Business only shares personal data in accordance with this Privacy Statement and only with third parties if this is permitted and is done carefully.

Data sharing with third parties

By order of Space for Business, third parties can provide services needed to execute an agreement. Space for Businessmakes agreements with these service providers to ensure confidential and careful handling of personal data. These agreements are contractually laid down in so-called ‘processor agreements’.

Your personal data will not be rented, sold or otherwise shared with or provided to third parties. Space for Business may share your (personal) data with third parties if, for example, you have given your consent or if this is necessary for the execution of the agreement.

Space for Business provides personal data to enforcement authorities or anti-fraud organizations when this is necessary to comply with a legal obligation.

If you do not agree with the processing of your personal data where this is necessary to comply with a legal obligation or if this is necessary for the execution of the agreement, this may result in the execution of the agreement being discontinued.

Transfer of your data outside the European Union

Space for Business provides in some cases personal data to countries outside the European Union. This occurs in the following situations: for communication with foreign programme participants who will follow a study programme at Space for Business, and in the context of scientific research.

How long will data be stored?

Space for Business will keep your personal data in accordance with the Wbp / GDPR. The data is not stored longer than is strictly necessary to achieve the purposes for which the data were collected.

How can you view, correct or delete your data?

You can direct a request for inspection or correction to Space for Business. Please indicate clearly that this is a request for inspection or correction under the GDPR. You can also request that your data be deleted, however this is only possible if Space for Business can still fulfill its legal obligations, such as the statutory retention periods. Please note that providing a copy of a proof of identity may be necessary to check your identity. You can easily create a secure copy of your identity card with the ‘Kopie ID’ app from the Dutch government that you can download in the app store.

Send your request to the following email address: and write down the request in the subject.

You are also entitled to submit a complaint about the use of your data with the Autoriteit Persoonsgegevens.

Technical security

In order to optimally protect your personal data against unauthorized access or unauthorized use, Space for Business applies appropriate security technology. We will reports (attempts of) abuse to the police. Space for Business also takes organizational measures to protect personal data against unauthorized access.

Cookies and click behavior

General visitor data is kept on our website, such as the most requested pages. The purpose of collecting these general visitor data is to optimize the layout of the website for you. Space for Business uses various tools to make the website function optimally and to improve the user-friendliness and to actively retrieve feedback from users.

Third party privacy policy

On the website of Space for Business links are included to other websites that do not belong to the Space for Business. We cannot accept responsibility for the way in which these parties deal with personal data. We therefore advise you to always inform yourself of the privacy policy of these parties or to contact them for further information on their policy regarding the use of personal data.


Do you have any specific questions or comments about our privacy statement as a result of this information? Please feel free to contact us. You can send an e-mail to The Data Protection Officer (FG) of Space for Business can be contacted via the email address

Our Terms and Conditions are applicable to all of the agreements made with Space for Business.  

Space for Business is initiated by Rotterdam School of Management, University of St. Gallen, Nova School of Business and Economics, The Erasmus Centre for Entrepreneurship and European Space Agency.