Data Protection Declaration

The Municipality of The Hague handles your personal data carefully and confidentially. The municipality processes your personal data as described in the General Data Protection Regulation (GDPR) and specific legislation and regulations. The lawful basis for processing personal data may be: consent, contract, legal obligation, vital interests and public task.

The Dutch Data Protection Authority (DPA) is the national organisation which monitors the protection of your personal data. For more information about the DPA and information about the terms used in this declaration, the municipality refers you to the Begin external link: website of the Dutch personal data authority(External link), end external link..

The municipality only performs tasks which are important for its residents and visitors. For this purpose, the municipality sometimes uses personal data relating to its residents and visitors. If you live in The Hague, the municipality keeps a record of your name, date of birth, address and Citizen Service Number (BSN) in the Municipal Personal Records Database.

If you wish to arrange or request something via denhaag.nl, the municipality will often need contact details so that it can provide you with good service. This might include your phone number and email address.

For requests and support related to work, income, youth services, health care or security, the municipality may need special information, such as financial, medical or criminal record information. The municipality may also use your details to levy taxes and combat fraud, for example.

The municipality has the duty to handle your personal data carefully and confidentially and to optimally protect your personal data from unauthorised access (hackers) or unlawful use. Your personal data is not used for any other purposes than those described above.

In some cases, the municipality must inform you first and, if required, request your consent before your personal data may be processed. In addition, the municipality takes the necessary security measures and uses security procedures to protect your personal data. Besides technical security measures such as the encryption of personal data and access controls to computer systems, municipal employees have a duty of non-disclosure and access to personal data is only given to authorised employees.

The municipality does not retain your personal data for longer than necessary for the proper execution of its task and in compliance with its legal obligations.

To carry out its tasks and responsibilities the municipality works together with external partners. These could be other government agencies, but sometimes private parties as well. In certain cases the municipality shares personal data with these organisations. At the moment the municipality shares personal data with other parties, it obtains consent based on current legal provisions.

The municipality signs a processing contract with these organisations. The municipality remains responsible for processing your personal data.

You have various rights when the municipality uses your personal data:

• Right to be informed: you have the right to know why your personal data is required, what it will be used for and how long it will be retained.
• Right of access: you have the right to access your personal data which is registered with the municipality.
• Right to rectification: you have the right to add to or correct your personal data and to have your data erased or restricted if you wish.
• Right to be forgotten: you can ask the municipality to erase the data it uses for you. For example, because your personal data is no longer needed. Or because you no longer want the municipality to use your data. The municipality can refuse your request if it still needs your data.
• Right to data portability: you have the right to obtain all your personal data from the controller and to transfer this data in its entirety to another controller.
• Right to object: you may object to the processing of your data by the municipality. The municipality will comply with this, unless there are legitimate grounds for processing the data.

You can request access to your personal data in Begin external link: MijnDenHaag(External link), end external link.. You log in with your DigiD.

You will receive an email from the municipality in response to your request within 1 month. If your request is complicated, the municipality can take 2 months longer to respond. It can therefore take a maximum of 3 months before the municipality is ready with your request.

On 1 January 2015 the municipality was given several additional tasks in the field of work, health care and youth services. Some of these tasks are performed by staff from social district care teams or youth teams in the municipality. In these teams, different professionals work together. To provide you with optimal service, they need to share information. This might include personal data and your family and personal situation. In doing so, they comply with the municipality’s obligations to protect the personal data of its residents. Because it is vital that this is done carefully, the municipality and the various service organisations have also drawn up written work agreements in the form of a processor contract.

If you have any questions about data protection in the field of work, health care or youth services, you may always get in touch with your regular contact person, case director or family coach who wishes or is required to use your personal data.

The municipality is using parking enforcement vehicles to scan parked cars to check whether they paid for parking. If you did not pay for parking or if you did not pay enough for parking, you will get a fine.

Parking enforcement vehicles take photos of number plates and the area around the cars. The following data can be used: citizen service number (BSN), name, address, telephone number, number plate, situation scans, copy of disabled parking casrd or an indication (proof) that you need informal care (mantelzorg).

Is your car parked correctly? Then your data will be erased as quickly as possible and no later than 24 hours after the scan has been taken. Did you receive a parking fine unexpectedly? Then your data will be retained until they are no longer needed to complete the investigation.

You have various rights under the General Data Protection Regulation (GDPR). Begin link: Look at your rights, end link. . You can alsoBegin link: challenge a parking ticket, end link. . You can read the entire Privacy statement with parking enforcement vehicles in Dutch: Begin link: Privacyverklaring parkeercontrole met scanvoertuigen, end link. .

denhaag.nl can make links to websites of others. The Municipality of The Hague is not responsible for third party compliance with the privacy legislation and regulations.

In order to improve its services, the municipality may retain telephone, WhatsApp and chat conversations. Conversations will not be retained for longer than necessary.

If you want to know more about the protection of your personal data, visit the Begin external link: website of the Data Protection Authority(External link), end external link..

The municipality may amend this Data Protection Declaration without warning. Such amendments come into force from the moment they are published on denhaag.nl.

Do you have any questions or comments? Send an email to Begin link: expertisecentrumprivacy@denhaag.nl, end link. . A privacy expert at the municipality will try to answer your questions.

Would you like to view your personal data? You can make a request for this via Begin external link: MijnDenHaag(External link), end external link.. You log in with your DigiD.

Data Protection Officer

The Municipality of The Hague has appointed a Data Protection Officer. The Data Protection Officer ensures compliance with the privacy rules within the Municipality of The Hague. You can contact the Data Protection Officer by sending an email to Begin link: fg@denhaag.nl, end link. .