General Privacy Statement of the Municipality of Heerlen
The municipality uses your personal information. We refer to this as personal data.
Why do we use your personal data?
The municipality uses your personal data to provide you with the best possible service and to perform our legal duties. The municipality must comply with the rules set out in the General Data Protection Regulation (GDPR) and the Police Data Act (Wpg).
The municipality has special investigating officers (BOAs). They supervise and ensure order and safety. A BOA may investigate criminal offenses and uses personal data for this purpose. We refer to this as police data. The Wpg applies to investigation and enforcement. If a BOA is supervising, the GDPR applies.
When are we allowed to use personal data?
The municipality may not use personal data without justification. It may only do so if there is a valid reason (basis). The most important reasons under the GDPR for the municipality to use personal data are: to fulfill a legal obligation and/or a task in the public interest. The municipality may also use personal data for:
- Your consent;
- The performance of an agreement;
- Representing a vital interest;
- Representing a legitimate interest.
A special investigating officer uses police data for detection and enforcement purposes. Under the Wpg, we use police data for various purposes. These purposes are set out in Articles 8, 9, and 13 of the Wpg.
What personal data do we use?
This may involve various types of personal data, particularly that of residents. For example, if you apply for a passport, benefits, or a permit, or if you move to the municipality. Examples of such data include your name, date of birth, and address. Sometimes this involves special and/or sensitive personal data. This includes, for example, your citizen service number (BSN) or data about your health, political preferences, or criminal record. We only use personal data that is truly necessary. This means that we use as little personal data as possible.
How long do we retain personal data?
The municipality does not retain your personal data longer than necessary. We delete personal data in a timely manner. The length of this period usually depends on the Public Records Act and the VNG Selection List. The Wpg determines how long police data may be retained.
Who do we share personal data with?
The municipality will only share your personal data with other (government) organizations if necessary. Sometimes this is mandatory, for example with the Tax and Customs Administration. The municipality may also collaborate with other organizations to perform our legal duties. We make agreements for this purpose. A special investigating officer may share police data with other organizations, such as the police and the judiciary. If the municipality shares personal data with an organization outside the European Economic Area (EEA), this will only be done in accordance with the law.
How do we protect personal data?
The municipality protects your personal data. We take appropriate technical and organizational measures to protect your data. We have an (information) security policy in place for this purpose.
How do we deal with data breaches?
If, despite strict security measures, personal data falls into the wrong hands or is lost, this is referred to as a data breach. If, for example, you have received a letter or email intended for someone else, please contact the municipality as soon as possible. This will enable the municipality to take immediate action.
What are your privacy rights?
The GDPR and the Wpg give you rights to control your personal data. Would you like more information about your privacy rights? Please refer to the Product: Submit a request regarding personal data based on the GDPR.
Do you have any questions or complaints?
Do you have a question, comment, or complaint? If so, please contact the Data Protection Officer (DPO). The DPO is the internal supervisor of personal data processing and oversees the municipal privacy policy. If you are not satisfied with the handling of your question or complaint, please contact the Dutch Data Protection Authority. This is the national supervisory authority for the processing of personal data.
Version dated: 17-11-2025
More information
Would you like to know more about privacy policy or the protection of your personal data? Or are you dissatisfied with the handling of your question or complaint? Please visit the website of the Dutch Data Protection Authority at .