Your rights regarding personal data

The law stipulates that you have several rights concerning your personal data. Here you can read which rights these are and what we have arranged for this purpose at the CJIB.

By law, you have the following rights regarding your personal data:

Right of access
Right to rectification
Right to object
Right to restriction of processing
Right to be forgotten

Below, we explain exactly what these rights mean.

1. Right of access

You can ask us whether we process your personal data. If we do, we will inform you which data we process, why, and how long we may retain your data.

Yes, I want to know if CJIB processes my personal data.

2. Right to rectification

If you think the data we process about you is incorrect or incomplete, you can ask us to update or supplement your data. If we do so, we will also forward the updated data to our chain partners with whom we have shared your data.

Yes, I want you to update or supplement my data.

3. Right to object

You can object if an organisation processes your data for a task carried out in the public interest. If you object, we will assess whether your personal interest outweighs the public interest.

Yes, I want to object.

4. Right to restriction of processing

If you have objected to processing and are waiting for a response, you can ask us to temporarily stop using your personal data.

Yes, I want you to stop using my personal data until there is a response to my objection.

5. Right to be forgotten

If you believe your data is being processed in violation of GDPR principles, you can request to have your personal data erased. However, we are subject to certain rules regarding data retention, as outlined in the Police Data Act, the Judicial Data and Criminal Records Act and the selection list of the Ministry of Justice and Security. More information about the selection document can be found in the Government Gazette of 12 April 2021, no. 17848.

Yes, I want my personal data erased.

How can I exercise these rights?

You can submit a request to the organisation that is the controller. You can do this in two ways:

By using this web form
By sending a letter
If you choose to send a letter, include a copy of your ID (passport, driving licence or ID card) and address it to:

Central Judicial Collection Agency
stating: Request for access
PO Box 1794
8901 CB Leeuwarden

Requests submitted in any other way will not be processed.

What is a controller?

We may process your personal data in two different roles – as a controller or a processor:

We are the controller when we process your data as part of our statutory tasks.
We are the processor when we process your personal data on behalf of another party. The other party is then the controller.

The section What personal data do we process? describes why we process your data for each task and whether we are the controller.

You must always submit your request to the controller.

Can someone else submit a request on my behalf?

Yes, that is possible. The person submitting the request for you must enclose two documents:

a copy of your ID (passport, driving licence or ID card)
a signed authorisation that you have specifically drawn up for submitting this request.

If this person uses the web form, they can upload the relevant documents. The option to do this is shown in the form.

We will send our response to the request to the address of the person you have authorised.

If your lawyer submits a request for you, the authorisation is not necessary.

What can I do if I disagree with how CJIB handles my personal data?

The law stipulates that we must have a Data Protection Officer (DPO). This person monitors whether the CJIB complies with privacy rules. Contact this officer if you have questions about how we handle your personal data.

There are two ways to contact the DPO.

By sending a letter
Send your letter to:

Ministry of Justice and Security
Attn: Data Protection Officer
PO Box 20301
2500 EH The Hague

Write the word ‘CONFIDENTIAL’ in large letters on the envelope. This ensures that only the DPO reads your post.

By sending an email
Send your email to fg@minjenv.nl.

Do you want to file a complaint with the Dutch Data Protection Authority?

If you believe we are violating privacy rules in processing your personal data, you can file a complaint with the Dutch Data Protection Authority. You can read more about this on the Dutch Data Protection Authority’s website.

More information

How do I make a secure copy of my ID document using the KopieID app?