diff --git a/site/index.html b/site/index.html new file mode 100644 index 0000000..3c98073 --- /dev/null +++ b/site/index.html @@ -0,0 +1,407 @@ +::: page +::: menu__content +[](https://www.utwente.nl/en/){.menu__logo} + +[]{.menu__searchicon .UT-icon-UT_icon_70_search-16px} + +::: {#menu__eventrelay .menu__eventrelay} +::: {.menu__items .menu__items--init data-href="https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/policies/"} +[[]{.menu__itemicon--back +.UT-icon-UT_icon_65_arrow-up-small-16px}Up](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/){.menu__item +.menu__item--back}[Canvas +Policies](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/policies/){.menu__item}[Acceptable +Use +Policy](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/policies/terms-of-use/){.menu__item}[Cookie +Policy](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/policies/cookie-policy/){.menu__item}[Privacy +Statement](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/policies/privacy-statement/){.menu__item +.menu__item--current} +::: +::: + +::: menu__language +::: menu__items +[EN]{.menu__item--lang .menu__item--currentlang}\| +[NL](https://www.utwente.nl/nl/onderwijssystemen/onderwijssystemen/){.menu__item--lang}\| +[DE](https://www.utwente.nl/de/websiteexistiertnicht/){.menu__item--lang} +::: +::: +::: + +::: page__withoutmenu +::: header__backgrounduniverse +::: header__universe-container +::: +::: + +::: header +::: menuheader__header +[[](https://www.utwente.nl/en/){.sitetitle__logo}]{.sitetitle__logo-container} + +::: sitetitle__container +::: sitetitle__container__titles +::: sitetitle__break +[Educational +Systems](https://www.utwente.nl/en/educational-systems/){.sitetitle__link} +::: +::: +::: +::: + +::: {#menuheader__hamburger .menuheader__hamburger} +::: menuheader__hamburger__content +[]{.menuheader__hamburger--open +.UT-icon-UT_icon_103_menu-16px}[]{.menuheader__hamburger--close +.UT-icon-UT_icon_47_cross-16px} +::: +::: + +::: {.header__universe .header__content .header__container--reducedheight} +::: header__titleholder +::: {.header__titleholder__contents .header__titleholder__contents--8col} +#### [[]{.header__arrow .header__arrow--universe}Canvas Policies](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/policies/) {#canvas-policies .header__prevtitle} + +# Privacy Statement {#privacy-statement .header__title fontfit-height="50%" fontfit-width="90%" fontfit-wrapper=".header__container, .header__universe"} +::: +::: +::: +::: + +::: {#main .main role="main"} +::: main__contents +**Privacy Statement -- UT Learning Management System** + +Version 1.6, last update: 19 October 2018 + +*The UT Learning Management System (LMS) is provided for free by the +University of Twente (also referred to as **UT, we/us/our**). The LMS +facilitates and enriches UT educational processes, allows you to +co-operate and communicate with other users and to access and share +(course) content. The LMS is designed to make teaching and/or learning +easier for you. You can read more about your rights and obligations with +regard to your use of the LMS in our *[*Acceptable Use +Policy.*](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/policies/terms-of-use/) + +*When you make use of our LMS, we will process various personal data of +you. UT is the data controller for the processing of your personal data +under the applicable Dutch data protection law.* + +*This Privacy Statement applies to all users of the LMS and informs you +on our privacy practices and security measures concerning the personal +data we may collect from you when you make use of the LMS. This Privacy +Statement does not see to the processing of personal data that is not +related to your use of the LMS. We may change this Privacy Statement +from time to time.* + +## []{#1-what-kind-of-personal-data-do-we-process-from-you .wh-rtd__anchor}1. What kind of personal data do we process from you? {#what-kind-of-personal-data-do-we-process-from-you .heading2} + +1.1. Your personal data is any data that is directly or indirectly +attributable to you. The personal data we collect from you when you +register and use the LMS is used for the basic working of Canvas, but is +also used for product development and security of the environment +(including fraud detection).\ +For the basic working of Canvas and safeguarding of the environment we +collect your name, e-mail address, unique identification number (UT +'ICT-account' number), IP address, browser details, and any information +included in your communication with us or uploaded by you through the +LMS (including but not limited to inquiries and input on the discussion +forum and documents provided).\ +In Canvas it is optional to add multiple mail addresses, title(s), +gender, phone number or other information or links which you are able to +add and remove in your own Canvas profile. It is not necessary to add +this information in your Canvas profile for a proper working of Canvas, +but it can improve your communication experience with other UT Canvas +user + +1.2 We may also process certain personal data of you by the use of +(third party) cookies. More information on the cookies used in relation +to the LMS can be found in our [Cookie +Policy.](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/policies/cookie-policy/) + +1.3 Your personal data in Canvas will not be used for automatic decision +making (study-performance) purposes. All final decisions will be made by +a person. + +1.4 For product development purposes we also collect Canvas search +history, Canvas click patterns and logging information which is +anonymous and can't never be connected to a person.  + +1.5 We use Google Analytics for several purposes as described in +[paragraph 3.4 of our Cookie +Policy.](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/policies/cookie-policy/#3-cookies-on-our-website) + +## []{#2-for-what-purposes-do-we-process-your-personal-data .wh-rtd__anchor}2. For what purposes do we process your personal data? {#for-what-purposes-do-we-process-your-personal-data .heading2} + +2.1. UT and Instructure (supplier of Canvas) will only process your +personal data, as described in paragraph 1, for the basic working of +Canvas and security of the environment in the context of the use of the +LMS, more specifically for the following purposes: + +- Access control and safeguarding of your account and the Canvas + environment, including fraud detection. +- Enabling you to use the features and services of the LMS; +- For maintaining contact with you in relation to your use of the LMS + and - if you are a student - for your course program with UT; +- For the handling of your requests reported via Canvas or the app, + any complaints or disputes, and the investigation in this respect; +- For performance of audits; +- To meet with our statutory obligations. + +We don't use your personal data to follow you as an individual. + +## []{#3-who-has-access-to-your-personal-data .wh-rtd__anchor}3. Who has access to your personal data? {#who-has-access-to-your-personal-data .heading2} + +3.1. Your personal data may be accessed by our employees or other +persons engaged on our behalf on a need-to-know basis only, such as +lecturers, study counsellors, policy makers and administrative +personnel. Also, you may make certain information available within the +LMS and for certain participants, for example by participating in group +discussions. Next to that, we may also instruct trusted third parties to +perform services in respect of processing your personal data on our +behalf. With such service providers we have concluded data processing +agreements in order to secure the processing of your personal data. + +3.2. As one of our data processors, we have involved Instructure Global +LTD, located in London, United Kingdom, being the hosting provider of +the LMS. As Instructure is also located outside the European Economic +Area (EEA), in Salt Lake City, Utah, United States of America, we have +not only concluded a data processing agreement with Instructure, but +also a data transfer agreement based on the Standard Contractual +Clauses  (controller / processor) validated by the European Commission, +to safeguard the transfer of your personal data to Instructure. For the +delivery of the LMS, Instructure may involve its affiliates or third +parties as sub-data processors in accordance with the data processing +agreement that has been concluded between UT and Instructure. These +subcontractors also have to process your personal data under the same +data processing agreement and Standard Contractual Clauses as +Instructure and may only use your personal data for the service they +deliver to Canvas. + +  + +::: {.wh-rtd__tablewrap .zebra} ++---------------------------------+-----------------------------------+ +| **Permitted Key Subcontractor** | **Description of Key | +| | Subcontract** | ++---------------------------------+-----------------------------------+ +| AWS | AWS is Contractor's data hosting | +| | and storage provider. The | +| (Seattle, USA) | objective of this | +| | subprocessing/subcontracting is | +| | the performance of the Services | +| | pursuant to the Agreement or in | +| | connection with instructions from | +| | the Client (UT), the extent of | +| | which is determined and | +| | controlled by the Client (UT) in | +| | its sole | +| | dis | +| | cretion. This uses S3 in their EU | +| | (Ireland) Region. ISO 27001. | ++---------------------------------+-----------------------------------+ +| Box/Crocodoc | Box provides a third-party | +| | integrated tool (Crocodoc) that | +| (Redwood City, USA) | enables document preview (mainly | +| | for '.pdfs') within the Service. | +| | The objective of this | +| | subprocessing/subcontracting is | +| | the performance of the Services | +| | pursuant to the Agreement or in | +| | connection with instructions from | +| | the Client (UT), the extent of | +| | which is determined and | +| | controlled by the Client (UT)in | +| | its sole discretion. | ++---------------------------------+-----------------------------------+ +| Twilio | Twilio is a provider of cloud | +| | based telephony and messaging | +| (San Francisco, USA) | services. The objective of this | +| | subprocessing/subcontracting is | +| | the performance of the Services | +| | pursuant to the Agreement or in | +| | connection with instructions from | +| | the Client (UT), the extent of | +| | which is determined and | +| | controlled by the Client (UT) in | +| | its sole discretion. | ++---------------------------------+-----------------------------------+ +::: + +  + +3.3. When you make use of our external plug-ins or social media buttons +within the LMS environment, your personal data may be shared with the +respective provider of such plug- in. You may find an overview of +possible plug-in providers [here.](http://www.eduappcenter.com/) Please +note that the plug- in providers may process your personal data for +their own purposes and may therefore qualify as data controllers. +Neither UT nor Instructure is responsible for the data processing +activities carried out by these parties when acting as a data +controller. We advise you to check out their respective privacy +policies. + +Currently installed Canvas plug-ins on the UT Canvas instance are: + +- YouTube (no personal data is transmitted, only a search option to + embed YouTube video's) +- Vimeo (no personal data is transmitted, only a search option to + embed Vimeo video's) +- MyTimeTable (Internal UT, and only available in Canvas if you + already use the MyTimeTable application at the UT) +- Urkund (plagiarism detection, the UT has a processor agreement with + Urkund) +- Google Drive (only available if you login with your personal Google + drive account and the terms you accepted by creating this account) +- Office 365 (only available if you login with your personal Office + 365 account and the terms you accepted by creating this account) + +\ + +## []{#4-how-is-your-personal-data-secured .wh-rtd__anchor}4. How is your personal data secured? {#how-is-your-personal-data-secured .heading2} + +4.1. Appropriate technical and organizational measures to secure +Personal Data against loss or any form of unlawful processing are taken. +Taking into account the state of the art and the costs of the +implementation, these measures guarantee an appropriate security level +given the risks associated with Processing and the nature of the +Personal Data to be protected. The measures are, in part, aimed at +preventing unnecessary collection and further Processing. The Processor +shall record the measures in writing and shall ensure that the security +as referred to in this paragraph meets with the security requirements +under the Personal Data Protection Act. + +## []{#5-how-long-will-your-personal-data-be-retained .wh-rtd__anchor}5. How long will your personal data be retained? {#how-long-will-your-personal-data-be-retained .heading2} + +5.1. We will process your personal data for as long as this is necessary +for the purposes as stated in this Privacy Statement. Once you will no +longer be connected to the UT, either as a student or as a lecturer, +student counsellor or policy maker, we may retain your personal up to +two years in accordance with the applicable data protection laws, unless +you have submitted a reasonable and valid request to delete your +personal data. + +## []{#6-your-rights-and-contact .wh-rtd__anchor}6. Your rights and contact {#your-rights-and-contact .heading2} + +6.1. If you have any questions on the processing and protection of your +personal data, please contact us. You also have the right to do a +request to review, correct or change any personal data we may process of +you. If you want to make use of this right, please contact us using the +following contact details: + +University of Twente\ +Attn: Functionaris van de Gegevensbescherming\ +P.O. Box 217\ +7500 AE  Enschede\ +The Netherlands\ +E-mail:  + +6.2 File a complaint\ +If you are not satisfied with the way we handle your personal data and +you do not agree with the Data Protection Officer, you can file a +complaint to the supervisory authority. This is the Dutch Data +Protection Supervisor (in Dutch: Autoriteit Persoonsgegevens). On the +website you can find how to +submit a complaint. + +::: {#main__measure-element} +::: +::: +::: + +::: {.footer__crumb-share .footer__crumb-share--sharelinks} +::: footer__breadcrumb +[[]{.footer__breadcrumbicon +.UT-icon-UT_icon_48_plus-16px}](#){#footer__breadcrumbmore +.footer__breadcrumbmore}[[]{.footer__homeicon +.UT-icon-UT_icon_123_home-16px}](https://www.utwente.nl/en/educational-systems/){.footer__breadcrumblink}[[]{.footer__breadcrumbicon +.UT-icon-UT_icon_64_arrow-right-small-16px}\...[]{.footer__breadcrumbicon +.UT-icon-UT_icon_64_arrow-right-small-16px}](#){#footer__breadcrumbellipsis +.footer__breadcrumbellipsis} + +::: footer__breadcrumblinks +[]{.footer__breadcrumbicon .footer__breadcrumbhidden +.UT-icon-UT_icon_64_arrow-right-small-16px}[About the +applications](https://www.utwente.nl/en/educational-systems/about_the_applications/){.footer__breadcrumblink +.footer__breadcrumbhidden}\ +[]{.footer__breadcrumbicon .footer__breadcrumbhidden +.UT-icon-UT_icon_64_arrow-right-small-16px}[Canvas](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/){.footer__breadcrumblink +.footer__breadcrumbhidden}\ +[]{.footer__breadcrumbicon .footer__breadcrumbhidden +.UT-icon-UT_icon_64_arrow-right-small-16px}[Canvas +Policies](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/policies/){.footer__breadcrumblink +.footer__breadcrumbhidden}\ +[]{.footer__breadcrumbicon .footer__breadcrumbhidden +.UT-icon-UT_icon_64_arrow-right-small-16px}[Privacy +Statement](https://www.utwente.nl/en/educational-systems/about_the_applications/canvas/policies/privacy-statement/){.footer__breadcrumblink}\ +::: +::: + +::: footer__sharepage +[[]{.footer__sharepageicon .UT-icon-UT_icon_86_upload-16px}[Share this +page]{.footer__sharepagetext}](#){#footer__sharepagelink +.footer__sharepagelink} + +::: {#footer__sharebuttons .footer__sharebuttons .footer__sharebuttons--slideleft} +::: {.addthis_toolbox .addthis_default_style .addthis_32x32_style} +[]{.footer__addthis .addthis_button_linkedin}[]{.footer__addthis +.addthis_button_facebook}[]{.footer__addthis +.addthis_button_twitter}[]{.footer__addthis +.addthis_button_google_plusone_share}[]{.footer__addthis +.addthis_button_compact} +::: +::: +::: +::: + +::: footer__image +::: footer__addressblock +::: footer__address +[University of Twente]{dir="ltr"}\ +[Drienerlolaan 5]{dir="ltr"}\ +[7522 NB Enschede]{dir="ltr"}\ +::: + +::: footer__contact +[0031 53 489 9111]{dir="ltr"}\ +\ +[Route](http://www.utwente.nl/en/contact/) +::: +::: +::: + +::: footer__links +- [Follow us[]{.footer__sectionicon .footer__sectionicon--open + .UT-icon-UT_icon_48_plus-16px}[]{.footer__sectionicon + .footer__sectionicon--close + .UT-icon-UT_icon_49_min-16px}]{.footer__sectiontitle} + + ::: {.footer__sectionlinks .footer__sectionlinks--init} + [[]{.footer__sectionlinkicon + .UT-icon-UT_icon_36_facebook-24px}Facebook](http://www.facebook.com/OsirisUTwente){.footer__sectionlink}\ + [[]{.footer__sectionlinkicon + .UT-icon-UT_icon_38_linkedin-24px}LinkedIn](http://www.linkedin.com/groups?gid=4760248&trk=myg_ugrp_ovr){.footer__sectionlink}\ + [[]{.footer__sectionlinkicon + .UT-icon-UT_icon_37_twitter-24px}Twitter](https://twitter.com/osirisutwente){.footer__sectionlink} + ::: +::: + +::: footer__footer +::: footer__footerlinks +[Disclaimer & +Copyright](https://www.utwente.nl/en/about-our-website/disclaimer/){.footer__footerlink}[Privacy +& +Cookies](https://www.utwente.nl/en/about-our-website/){.footer__footerlink}[Last +Update 19/10/2018]{.footer__footerlink dir="ltr"} + +::: footer__logo +[](https://www.utwente.nl/en/){.footer__logo__ut} +::: +::: +::: +::: + +::: page__menumodal +::: +::: + +::: docstate +:::