Privacy Notice – Processing of Personal Data by Uppsala University within The Baltic University Programme
Uppsala University, through The Baltic University Programme (BUP), processes the personal data you provide in this form in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
Uppsala University (Org. no. 202100-2932), Box 256, 751 05 Uppsala, Sweden, www.uu.se, https://www.uu.se/en/about-uu/data-protection-policy/
2. Categories of personal data
We process the personal data you submit in this form, which may include:
First name, last name, Email address, Date of birth, Affiliation and role, Photos, Dietary or accessibility information (if provided), Other information you choose to include.
3. Purposes and legal basis
Your personal data will be processed for the following purposes:
1. BUP research profile administration, including communication before, during, and after publication.
– Legal basis: Performance of a task in the public interest and performance of a contract
2. Providing information and promoting the submitted research profile on the BUP website.
– Legal basis: Performance of a task in the public interest and performance of a contract
3. Subscription to BUP newsletters (only if you actively choose this option).
– Legal basis: Performance of a task in the public interest and performance of a contract
Providing the requested personal data is necessary in order to register a research profile.
4. Data recipients
Your personal data will be shared with:
• Visitors to the BUP website for the purpose of promoting the research profile.
• No third parties will receive your personal data unless required by law and following an assessment in accordance with the Swedish Public Access to Information and Secrecy Act (Offentlighets- och sekretesslagen 2009:400).
5. Storage period
• Your personal data will be stored until you ask for it to be removed.
• If you have signed up for BUP’s email newsletters, your email address will be stored until you ask to be removed from the mailing list.
• Information may be retained longer if required for archiving purposes in the public interest as set out in applicable laws including the Swedish Archives Act (Arkivlagen 1990:782).
6. Your rights as a data subject
Under GDPR, you have the right to:
• Request access to your personal data
• Request rectification of inaccurate or incomplete data
• Request deletion of your personal data
• Request restriction of processing
• Withdraw your consent at any time (this does not affect the lawfulness of processing based on consent before its withdrawal)
To exercise your rights, please the BUP at info@balticuniv.uu.se
7. Contact the University’s Data Protection Officer
If you have general questions about data protection at Uppsala University, you may contact the Data Protection Officer at dataskyddsombud@uu.se.
8. Complaints
If you believe that the processing of your personal data violates GDPR, you have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY):
www.imy.se