info@predictaya.eu

Privacy Statement

Website: predictaya.eu
Email: info@predictaya.eu 

1. General Information

A. Privacy

i. The PredictAYA website is managed by the Netherlands Cancer Institute (NKI). The NKI takes your privacy seriously. We process personal data about you when you use our website, participate in PredictAYA project activities or because you provide this information to us yourself.

ii. Following the General Data Protection Regulation (GDPR), the NKI is considered the data controller. Karolinska Institutet is the coordinator of the PredictAYA project and thus a separate controller. For questions or for exercising your rights under the GDPR, the NKI/Karolinska Institutet is your point of contact.

Please note that for PredictAYA both the NKI and the Karolinska Institutet process personal data in accordance with their privacy statements. Both can be found here respectively:

  1. NKI: Privacy statement | Netherlands Cancer Institute
  2. Karolinska Institutet: Data protection policy | Staff Portal

B. Summary

We make every effort to process your personal data with careful handling. With this privacy statement we offer you a transparent and clear overview of:

a. Which personal data we can process from you;
b. For what purpose we process your personal data;
c. How long we will keep your personal data;
d. Which (sub-)processors we use when processing your personal data;
e. What rights you have under the GDPR with regard to the processing by the Netherlands Cancer Institute and,
f. What are the measures we take to protect your personal data.

2. An Overview of the Personal Data We Process

A. Personal data processed when using our website

When you use our website we process the following personal data:

i. Personal data that you actively provide when contacting us, including name and E-mail,
ii. Website usage data, such as IP address, website activity, internet browser and device type.

The above information applies to the following website (or its respective domains):

https://predictaya.eu   

The legal basis for this is our legitimate interest in providing a functioning website and a possibility to contact us (Art. 6 (1) (f) GDPR).

3. Special and/or Sensitive Personal Data That We May Process

A. Minors on our website

Our website and services do not intend to collect data about website visitors who are younger than 16 years, with the exception of written parental or guardian consent. The Netherlands Cancer Institute cannot check whether a visitor is over the age of 16, so we advise parents to be involved in their children’s online activities. Together we can prevent information collection about children without parental consent.

If you suspect an error, please contact us.

If you are convinced that we have collected personal information about a minor without the aforementioned consent, please contact us via info@predictaya.eu. We will remove this information immediately.

4. Processing Purposes

The purposes for processing your personal data on our website are:

i. To be able to e-mail you if this is necessary to perform our project activities;
ii. To send you information on request in response to the contact form; and
iii. Analyse your behaviour on the website in order to improve our website and tailor it to your preferences.

We do not process any website data for third party marketing purposes. More information can be found in our Cookie Statement here: https://predictaya.eu/cookie-statement/ 

5. Retention Periods

The Netherlands Cancer Institute will not retain your personal data longer than is strictly necessary to achieve the purposes for which your data is collected. If you would like information about our retention periods in your specific case, please do not hesitate to contact us contact us at info@predictaya.eu. If you wish to contact our Data Protection Officer directly, you can contact privacy@nki.nl

6. Third Party Processing

Apart from any cookies used by us, as explained in our Cookie Statement, the data that we process from you on this website will not be processed by third parties.

7. Your Rights

i. You have the following right with regard to your personal data:

a. Right to access;
b. Right of rectification;
c. Right to erasure;
d. Right to restriction of processing;
e. Right to data portability;
f. Right to object;
g. Right to make a complaint to a data protection authority.

ii. If you have any questions or comments about the data processing of the Netherlands Cancer Institute, please send a request to info@predictaya.eu. If – by your judgment – an issue cannot be resolved, you can make your complaint to the Dutch Data Protection Authority ‘Autoriteit Persoonsgegevens’ here: Home | Autoriteit Persoonsgegevens.

iii. The Netherlands Cancer Institute wants to make sure that the request for access is made by you. We therefore kindly ask you, together with your request for access, correction or deletion of your data, to enclose a copy of your proof of identity.

iv. The Netherlands Cancer Institute will respond to your request as soon as possible, but in any case within four (4) weeks of receipt of the request. Under circumstances, this period may be extended with an additional four (4) weeks.

v. Please note that some of these rights may be subject to limitations in line with the GDPR.

9. Technical Measures

A. Security of Communications by SSL Encryption

i. To protect you as a website visitor, the Netherlands Cancer Institute uses safe encryption technologies. With SSL (Secure Socket Layer) your personal encrypted data used on our site is not visible to third parties, so you can ensure that your data will only be visible to you and our server.

ii. With all parts of our site where your data is used, such as the contact form, we use SSL encryption. You can check and recognise this yourself: When you are on an encrypted part of our site, the URL changes from http:// to https:// which indicates that the page is.

B. We take security seriously

The Netherlands Cancer Institute takes the protection of your data very seriously and therefore takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you believe your data is not properly secured or there are indications of abuse, please contact us directly via info@predictaya.eu.

10. Changes to this Privacy Statement

A. Changes

The Netherlands Cancer Institute will continue to review its own privacy statement and to evaluate and possibly add new processing purposes on our website(s). As such, changes may occur to this privacy statement.

B. Version

The current version is: November 2025.

11. Questions

Do you have any comments regarding this privacy statement or if you have general questions about the GDPR in the context of PredictAYA, please contact us via info@predictaya.eu.

Please note that this privacy statement applies only to the use of the PredictAYA public website. Information about how PredictAYA research sites process personal data of study participants is provided separately as part of the participant information materials and local privacy notices at each research site.