Privacy Policy

‍

This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use our Service and explains your privacy rights and how the law protects you.

We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

‍

1. Who We Are
International Student Consulting
Legal form: Volledig rechtsbevoegde vereniging (fully authorized association)
Address: Grote Gracht 64, 6211 SZ Maastricht, The Netherlands
Email: info@icmaastricht.com
KVK (Commercial Register) number: 92310451
VAT number: NL865993361B01
Responsible person: Benjamin Mäder

International Student Consulting is the data controller responsible for processing your personal data under the General Data Protection Regulation (GDPR).

‍

2. What Data We Collect
We collect and process personal data that you provide or that is generated automatically when you use our website. This includes:
- Contact and application data: name, email address, phone number, and documents or information you provide (e.g., CV, motivation letter).
- Usage data: IP address, device type, browser type and version, operating system, pages visited, time and date of visit, and similar diagnostic information.

‍

3. Why We Process Your Data (Lawful Bases)
We process personal data only when we have a lawful basis under Article 6 GDPR:
- Consent (Art. 6(1)(a)) – when you explicitly opt in, e.g., to receive email updates.
- Contract / pre-contractual steps (Art. 6(1)(b)) – to review and process your application or respond to your enquiry.
- Legal obligation (Art. 6(1)(c)) – where we must retain data to comply with applicable law.
- Legitimate interests (Art. 6(1)(f)) – Our legitimate interests are to ensure the security and integrity of the Service (including prevention of misuse and fraud), to measure and improve performance and user experience, and to manage our internal administration.

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

‍

4. How We Use Your Data
We use your personal data for the following purposes:
- To provide and maintain the Service and handle enquiries or applications – contract / pre-contractual basis.
- To communicate with you about your enquiry or application – contract / legitimate interests.
- To send internal updates or invitations related to International Student Consulting – consent.
- To keep our Service secure and analyse performance – legitimate interests.
- To comply with legal obligations – legal obligation.

‍

5. Data Retention
We retain personal data only as long as necessary for the purposes described above:
- Applications: deleted within 6 months after the recruitment process ends, unless you consent to longer storage.
- Contact enquiries: deleted 30 days after the enquiry is resolved.
- Usage / diagnostic logs: retained for up to 90 days for security and performance purposes, or longer only where required for an active security investigation or legal obligation.

We may retain limited data where required to establish, exercise, or defend legal claims.

‍

6. Sharing of Data
We do not sell or trade personal data.
We may share your information with:
- Service providers who process data on our behalf (e.g., website hosting, IT support) under GDPR-compliant data processing agreements; and
- Public authorities when legally required to do so.

‍

7. International Transfers & Security
Your data is stored and processed within the European Economic Area (EEA) where possible.
Where transfers outside the EEA occur, we rely on adequacy decisions or the EU Standard Contractual Clauses (SCCs) together with supplementary safeguards.

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or loss, and we regularly review these measures for effectiveness.

‍

8. Your GDPR Rights
You have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”).
- Restrict or object to processing, including for communications based on legitimate interests.
- Data portability – receive your data in a machine-readable format.
- Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@icmaastricht.com.
You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

‍

9. Cookies and Similar Technologies
We use cookies or similar technologies to operate the site and understand usage.
- If we only use essential cookies: We use only necessary cookies required for basic functionality; no analytics or marketing cookies are set.
- If analytics or other cookies are used: Details of cookie types, purposes, and durations are available in our Cookie Notice (link in website footer).

You can disable cookies in your browser settings, but some website features may not function correctly.

‍

10. Third-Party Content (delete if not applicable)
If our website embeds content from external services (e.g., Google Maps or Google Tag Manager):
- Google Maps. When a map is displayed, Google Ireland Ltd. may process your IP address and device data to deliver the map under its Privacy Policy (https://policies.google.com/privacy).
- Google Tag Manager / Analytics. These tools may set cookies or similar technologies for performance analysis; see Google’s Privacy Policy (https://policies.google.com/privacy) for details.

If no such services are used, this section does not apply.

‍

11. Children’s Privacy
Our Service is not directed to children under 13.
If you believe a child has provided personal data to us, please contact us so we can delete it promptly.

‍

12. Changes to This Privacy Policy
We may update this Privacy Policy periodically.
The most recent version will always appear on this page, with the updated “Last updated” date.
If we make significant changes, we will notify you by email or a prominent notice on our website.

‍

13. Contact
Questions or requests regarding this Privacy Policy:
International Consulting Maastricht
Legal form: Volledig rechtsbevoegde vereniging (fully authorized association)
Address: Grote Gracht 64, 6211 SZ Maastricht, The Netherlands
Email: info@icmaastricht.com
KVK (Commercial Register) number: 92310451
VAT number: NL865993361B01
Responsible person: Benjamin Mäder

‍