How does Eindhoven University of Technology process personal data in relation to Digital
Exhibition Website

1. Introduction

In this Privacy Statement we provide you with information concerning the collection of your personal data
by by Eindhoven University of Technology in relation to Digital Exhibition Website.
We have tried to provide all information to you in clear and plain language. If you have any questions concerning our use of your personal data after reading this Privacy Statement, you may contact us via the address data at the foot of the Privacy Statement.
This Privacy Statement is valid since since May 2026.

2. Who is responsible for your personal data?

TU/e is Controller as described in the General Data Protection Regulation (GDPR), for the processing that are mentioned in this Privacy Statement. This means that digitalexhibition.arch@tue.nl is responsible for a careful and proper processing of your personal data.

3. What personal data do we process?

In relation to Digital Exhibition Website we process among other the following personal data:

● Online Identifiers: We use Google Analytics 4, which processes pseudonymous identifiers (such as “Client IDs” stored in cookies) to distinguish unique visitors without identifying them personally.
● Approximate Location Data: Derived from your IP address at the time of the visit (e.g., City, Country), though the full IP address is not stored or logged.
● Technical Data: Browser type, device type, and operating system.

4. For what purposes do we process your personal data?

The personal data are processed in relation to the Digital Exhibition Website’s visitor analytics for the following purposes:

1. Website Optimization: To analyze how visitors navigate the exhibition, which helps us improve the user interface and ensure the digital content is displaying correctly.
2. Performance Monitoring: To track high-level metrics such as the number of visitors, average time spent on specific exhibits, and the types of devices used to access the site.
3. Regional Reach Analysis: To understand the geographical distribution of our audience (at a city or country level) to measure the exhibition’s impact.

5. What is the basis for processing your personal data?

To be permitted to process your personal data, the processing must be based on one of the legal grounds of the GDPR. In the case of Digital Exhibition Website we rely on consent, for processing the personal data for the above-mentioned purpose.

6. Who will have access to your personal data?

6.1 Access to your personal data within the Eindhoven University of Technology All relevant employees who are involved with Digital Exhibition Website will have access to your personal data, but only as far as is required to fulfil their respective tasks. These employees are from Built Environment department.

6.2 Access to your personal data by third parties
We will not share the data we process in relation to Digital Exhibition Website with third parties, unless this is a legal obligation.

7. For how long will your personal data be kept?

The Digital Exhibition Website will keep your personal data in accordance with the GDPR. The data are not kept for longer than is necessary to reach the goals for which the data have been collected, and will be erased when you withdraw your consent and there is no other basis to process your data lawfully.

8. Will my data be processed outside the European Economic Area (‘EEA’)?

TU/e endeavors to process your data only within the European Economic Area (“EEA”) by storing your data on a server in the EEA wherever possible. Sometimes this is not possible, for example when we transfer data to a university outside the EEA for which you have given permission.
If we engage processors, we require them to store personal data on servers in the EEA. When this is not possible, we take the necessary measures to provide an adequate level of protection for your personal data.

9. How are your personal data protected?

Eindhoven University of Technology has implemented appropriate technical and organizational measures to protect the personal data against unintended or unlawful destruction of the data, unintended damage, loss, alteration or unauthorized disclosure or access, and against all other forms of unlawful processing (including, but not limited to, unnecessary collection of data) or further processing. These appropriate technical and organizational measures include, approximate Location Data (derived from IP address at the time of the visit, though the full IP address is not stored or logged), and technical data (browser type, device type, and operating system)]

10. How can you exercise your privacy rights?

You have the right of access to your personal data and, under certain conditions, rectification and/or erasure of your personal data. Furthermore, in certain cases you also have the right to restriction of processing of your personal data, the right to object to the processing and the right to data portability.
To exercise your right of access, rectification, erasure, restriction, objection or data portability, please contact us via the address data at the foot of this Privacy Statement. Note however that we may ask for additional information to verify your identity when exercising these rights.
If you have given consent to process your personal data for a certain purpose, you may always withdraw this consent. Note however that withdrawal of your consent is not retroactive. You can contact us about this via digitalexhibition.arch@tue.nl.

11. Whom can you contact?

If you have questions about how we process your personal data, please let us know via privacy@tue.nl.
We will be happy to assist you.
If you believe that the processing of your personal data is not in line with the GDPR, for example if you believe we are not processing your personal data with due care, or if your request for access or rectification has not been answered in time, you may via privacy@tue.nl lodge a complaint with the Data Protection Officer (hereafter: DPO) via dataprotectionofficer@tue.nl. The DPO serves as the link between the Eindhoven University of Technology and the Dutch Data Protection Authority. The DPO acts independently and can discuss your complaint or ask for advice from the Data Protection Authority.
If you do not agree with the handling of your complaint by the DPO, you may lodge a complaint directly to the Data Protection Authority. The Data Protection Authority will handle the complaint or the request and decide upon it.

Versie 1.0 – may 2022