Privacy Statement

Privacy statement ICAI

Date: 18/03/2024

Privacy is a highly important topic for the Innovation Center for Artificial Intelligence (ICAI), and therefore ICAI handles your personal data with care. In this Privacy Statement we describe how ICAI processes your personal data as part of the UvA. This Privacy Statement relates to personal data that you provide to us or that we obtain via our website(s).

Who is responsible for processing my personal data?

ICAI, as a project and as part of UvA, is the party responsible for processing your personal data within the meaning of the General Data Protection Regulation (‘GDPR’). This means that ICAI, as part of UvA (hereinafter: “ICAI”, “we” or “us”), decides which personal data are processed, for what purpose and how. ICAI is responsible for the careful and proper processing of your personal data.

ICAI is located at Science Park 900 in Amsterdam. Our postal address is PO Box 94323, 1090 GH Amsterdam. Any questions you might have can be emailed to

The UvA is located at Spui 21, 1012 WX Amsterdam. Our postal address is PO Box 19268, 1000 WX Amsterdam. Any questions you might have can be emailed to

The UvA has appointed a Data Protection Officer (‘DPO’). The DPO’s email address is

Which (categories) of personal data are processed?

After visiting our website and leaving data for mailing lists and events, the following personal data will be processed:

  • Name;
  • Email address;
  • Function;
  • Organisation;
  • Dietary requirements
  • Address data 

We also place functional cookies.

We process, among other things, the following personal data of visitors to our website:

website visits and click behaviour;

  • IP address;
  • Duration and time of the visit to the website;
  • Use of social media

For what purpose will my personal data be processed?

ICAI will process your personal data for the following purposes:

  • Organisation and communication of events;
  • Sending newsletters;
  • Compile user statistics;
  • Securing and improving our websites; and
  • Improve our services.

What is the legal basis for the processing of this data?

ICAI processes your personal data based on the principles of the GDPR. In the case of the newsletter, this is - depending on the specific personal data - on the basis of consent by leaving the email address. In the case of events, based on consent when entering data via the appropriate forms. 

You can withdraw your consent at any time by sending an e-mail to The withdrawal of consent does not affect the lawfulness of the processing up to the moment of withdrawal. 

Will my personal data be shared with third parties?

The basic principle is that your personal data will only be used by ICAI. ICAI will only share your personal data [provided by you] with third parties if this is necessary to support the performance of the ICAI’s tasks, such as for example a software supplier. The UvA has written agreements with ‘third parties’ about the processing and security of your personal data.

Will my personal data be transferred to countries outside the European Union?

ICAI will endeavour to process your data solely within the European Union (‘EU’) by saving your data on a server located in the EU wherever possible. Sometimes this will not be possible, e.g. if we supply data to a university outside of the EU after obtaining your consent. When we enlist the services of data processing firms, we stipulate that they must save personal data on servers located in the EU. To the extent that this is not possible, we take the requisite measures to provide a suitable level of protection to ensure that your personal data is secure.

How will my personal data be secured?

ICAI takes appropriate technical and organisational measures to protect your personal data against unauthorised access, loss and any form of unlawful processing. Your personal data can only be viewed by employees who are authorised to do so based on their position. And everything within the UvA systems is secured by means of authorization.

How long will my personal data be stored?

We will not keep your personal data for longer than is necessary for the purposes for which we use it. We are required by law to keep some data for a certain period of time. Where possible we will pseudonymised or anonymize the data.

How can I exercise my privacy rights?

On the basis of the GDPR, you have the right to access the personal data that we process, to correct your personal data if it contains factual inaccuracies, to have your personal data deleted, to limit the processing of your personal data, and – subject to certain conditions –  to object to the processing of your personal data and the right to data portability.

If you wish to exercise any of these privacy rights, you can contact

If you believe that your personal data is being processed in violation of the GDPR, you can file a complaint with the FG via The DPO is the link between the UvA and the external supervisory authority (the Dutch Data Protection Authority). The FG acts independently and can consult with you about your complaint or seek advice from the Dutch Data Protection Authority.

If you do not agree with the complaint handling by the FG, you can file a complaint directly with the Dutch Data Protection Authority. The Dutch Data Protection Authority handles the complaint or request and makes a decision on it.

Contact details

If you have questions regarding the way we process your personal dates, you can contact the organisation of ICAI via


Stay in the loop

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.