Privacy Statement HKU Culture Pass

The HKU Culture Pass is an initiative of HKU, powered by We Are Public. For this collaboration, all personal data is processed in accordance with the General Data Protection Regulation (GDPR).


We Are Public is an initiative by De Nieuwe Cultuur Stichting, a cultural Public Benefit Organisation (ANBI: Algemeen Nut Beogende Instelling). De Nieuwe Cultuur Stichting is responsible for the processing of your personal data. HKU is jointly responsible for the processing of the personal data of HKU students by De Nieuwe Cultuur Stichting, and has therefore made agreements with We Are Public about the processing and protection of this data.


We Are Public takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your data is not properly secured or there are indications of abuse, please contact us at

What data is stored when registering for the HKU Culture Pass?

Personal data
Data that We Are Public stores: first and last name, address details, the student e-mail address you received from the HKU. We use this information to create and send your Culture Pass and to be able to contact you by e-mail about our services and to create a profile on our website.

You will periodically receive information about the contents of your Culture Pass and incidental information about the status of your free membership by e-mail. You can manage your email preferences yourself.

Visiting (online) programs
As an HKU student member you can log in to the We Are Public website. Logged in, you can save your favorite programs and make reservations. When you visit a program, you have your HKU Culture Pass scanned. With these actions you provide additional information to We Are Public. The data is stored for the purpose of providing the service and to personalize the programme.

When visiting an online program via We Are Public, the relevant cultural institution shares your email address with us. This way we know that you have visited that program and we can pay a compensation for your visit.

How long do we keep your data?
We Are Public stores your personal data as long as you are entitled to an HKU Culture Pass through your studies. As soon as you stop your studies or graduate, your HKU Culture Pass also stops. You will receive a message about this. We store your personal and profile data for a maximum of 3 years, so that we can reactivate your profile when you register for the regular We Are Public membership. After this period, we only keep irreversibly anonymized data for analysis and product improvement. However, it is also possible to remove your data from the database earlier. Please contact us at

Who do we share your data with?
Your data will not be sold to third parties and the data will only be provided if this is necessary for the execution of our agreement with you or the HKU, or to comply with a legal obligation. We conclude a processing agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data.

Data exchange with HKU
We Are Public shares the email address of students with an HKU Culture Pass with HKU. This is done to verify whether you are a registered student at HKU. Only registered students are entitled to the free pass.

If you use the HKU Culture Pass, HKU will share the following information about you with We Are Public: school and study programme. This is done so that We Are Public can report on the use of the HKU Culture Pass. This reporting is done at group level and cannot be traced back to you. HKU therefore knows that you have an HKU Culture Pass, but knows nothing about how to use it.

Which resources, services and organisations are involved in the operation of my data?

Development and management of the online platform We Are Public
The HKU Culture Pass runs on the online platform of We Are Public. The development and management of the website and associated services is done by Digital Natives. They outsource some of the services, such as web hosting, to sub-processors. They have concluded agreements with all these processors.

Customer database management: Oasys
Newsletters and direct mailings: Hellobar, Mailchimp and Mandrill
Member service and contact: HelpScout and Google G Suite
Analytics: Collected (visitor) data is used to make analyzes on an aggregated level (not traceable to a specific person) about the visits of partners and events. These analyzes are shared with the cultural institutions with which We Are Public collaborates.

What kind of cookies does We Are Public use?

We Are Public uses functional, analytical and tracking cookies. Read more about cookies

Functional cookies |We use cookies with technical functionality. These ensure that the website works properly. For example, your preferred settings are remembered.

Analytical cookies |We use cookies to analyse visitor behaviour on the website for platform optimization.

Tracking cookies |If you give permission, we also place cookies that track your surfing behaviour so that we can offer customised content and advertisements.

Third-party cookies:

  • Google Analytics – analytical cookie that measures your website visit
  • Google Tag Manager – used to manage cookies and online tools
  • Google Ads / DoubleClick – tracking cookie that allows targeted advertising on Google’s websites
  • Facebook – tracking cookie that allows targeted advertising on Facebook and Instagram
  • Twitter – tracking cookie that allows targeted advertising on Twitter
  • Vimeo – tracking cookie that makes it possible to watch Vimeo videos on this site

Consent to place cookies
On your first visit to, We Are Public informed you about the above cookies and we asked for your permission to place them. If you do not want to allow cookies, you can set your browser not to store cookies (note: important functionality on the website will no longer work). In addition, you can also delete all information that was previously stored via the settings of your browser.

How can I view, adjust or delete the data from my HKU Culture Pass?

If your HKU Culture Pass is active, you can change your name and address details via your profile page. You have the right to view, correct or delete your personal data. You also have the right to withdraw your consent to data processing or to object to the processing of your personal data.

Data portability
You can submit a request to We Are Public to send the personal data we have about you in a computer file to you or another organization mentioned by you.

A request for access, correction, deletion or data transfer – or notification of withdrawal of your consent / objection to the processing of your personal data can be sent to We will respond to your request as soon as we can with a maximum of four weeks.

We may ask for additional information when making a request to make sure it is you. If you withdraw your permission for processing, we can no longer provide you with services and your HKU Culture Pass will no longer be effective.

File a complaint
Any complaints regarding your privacy can be submitted to the national supervisory authority, the Dutch Data Protection Authority. This can be done via this link.

For what purpose are data of interested parties (non-members) stored?

Newsletters | For sending newsletters about the HKU campaign and/or We Are Public Releases, we only store your name and e-mail address.

Improving our website | We collect data about your activity on our website in order to improve the We Are Public platform and the HKU Cultuurpas. For this we use Google Analytics (see also ‘Cookies’).

Contact information

De Nieuwe Cultuur Stichting
Dr. Jan van Breemenstraat 3
1056AB Amsterdam
tel. 085 – 064 04 33

De Nieuwe Cultuur Stichting reserves the right to make changes to this privacy statement without prior notice at any time. Any changes will be published on this page.

Current version: February 2022

This website uses cookies to optimize your user experience. By accepting cookies you’ll help us to improve We Are Public. More information about our cookie- and privacy policy can be found here.