Södertörn University has converted to distance education – no teaching on university premises from Wednesday 18 March

The Swedish Government's recommendation is that all higher education institutions move to distance education from 18 March. Södertörn University has followed this recommendation and there is no teaching on university premises. Students are asked to stay updated about their course or programme via SH-StudyWeb. Staff and students can access the university premises with their keycards and both Infocenter and the library are open.

Updated:

2020-03-25

11:04

Close message
Student

Personal data processing

This page contains information about how Södertörn University processes personal data. The university is obliged to comply with the Regulation (EU) 2016/678 of the European Parliament and of the Council of 27 April 2016. This regulation is referred to below as the General Data Protection Regulation, or GDPR.

What does the university do with personal data?

Södertörn University must process personal data to do its duty as a public authority and higher education institution, i.e. to provide research, education, and collaborate with the surrounding community. We also do it to evaluate and develop our activities and to follow Swedish law.

All processing of personal data at the university must have a legal basis. As part of our activities we only process personal data as part of our duties as a public agency or to perform a task of general interest. Personal data is only processed during the time required for a particular purpose.

If you are a member of staff, student or external party, you can obtain more detailed information about how your personal data is processed via your contact person, course coordinator, manager or project manager at the university. If you feel you have not received adequate information, please contact Södertörn University’s data protection officer using the contact details at the bottom of the page.

Essay writing - how should students deal with GDPR?

The university has produced a student guide on essay writing and GDPR. The guide is linked below.

Essay writing and GDPRPDF

What personal data does the university collect?

The university has numerous reasons for processing your personal data. If you are a student, researcher, employee, participating in a conference or other event, applying for a job, or if you have contacted the university or are cooperating with it in some way, we usually collect your personal data. We collect your personal data either through you providing the information yourself, but in some cases we collect information from other sources, such as the Swedish Tax Agency or CSN.

Depending on the reason for processing the personal data, the type of data may vary. At Södertörn University, this may include:

  • Contact details such as name, address, telephone number and e-mail.
  • Your personal ID number or coordination number may only be processed without your consent when this is clearly motivated due to the purpose of the processing, the importance of definite identification or another noteworthy reason.
  • Contact details you provide when applying for a library card at the university library. This information is necessary for loaning out library materials and administering loans and purchases.
  • Banking and other financial information for making payments or invoicing.
  • Personal data that is collected as part of participation in a research study, for which you have provided consent.
  • Information about credits awarded and other information about your studies at Södertörn University.
  • Information about how you use our websites, for improving user experience, such as via cookies.
  • Information when participating in conferences or courses.
  • Personal data necessary for employment or if you apply for a job.

How is your personal data protected?

Södertörn University must ensure that personal data processing is protected by the appropriate technical and organisational measures. These measures must guarantee an appropriate level of security in relation to the processing risk. Aspects of security must include confidentiality, accuracy and accessibility, as well as a satisfying level of technical protection. For example, there may only be one person authorised to access the data, data must be encrypted, data must be stored in specially protected areas and there are backups of the personal data.

Who can access your personal data?

Some documents at Södertörn University are official documents. If your personal data is in an official document, anyone who requests this document can access your personal data, unless confidentiality pursuant to Public Access to Information and Secrecy Act (2009:400) prevents it being issued.
In some cases, Södertörn University will transfer your personal data to Södertörn University’s research project partners, to suppliers or to other parties that require them. A transfer to external parties will only occur if

  • it is a consequence of an agreement between you and Södertörn University,
  • it is due to information in the public interest as part of the exercise of public authority,
  • the university is legally obliged to do so,
  • you have provided your consent for this personal data processing.

Södertörn University will provide you with information about whether your personal data will be transferred.

When transferring personal data to another party, we take the appropriate organisational and technical measures that may be required to protect your personal data.

Södertörn University will not give personal data to other parties without a legal basis for doing so.

How long does the university save personal data?

We save your personal data for the period necessary for the purpose of the personal data processing or, in other cases, what is legally necessary.

  1. If, for example, you are an employee, we process your personal data during the entire period of your employment so that we can perform administrative routines linked to your employment.
  2. If you are a student, we process your personal data during the period that you are a student at the university.
  3. If you are a participant in a study, we process your personal data during the period that research is being conducted to ensure the quality of the research.

The personal data in official documents is processed in accordance with the Freedom of the Press Act (1949:105), Archives Act (1990:782) and the regulations of the Swedish National Archives. In some cases, this means that your personal data may be saved in Södertörn University’s archive for periods from five years to indefinitely.

Data to countries outside the EU/EEA (third countries)

Södertörn University may transfer personal data to a third country outside the EU/EEA, especially regarding international research projects or student exchanges. The university will take adequate organisational and technical measures necessary to achieve the appropriate level of security for your personal data.

As a data subject, you are entitled to information if your personal data will be transferred ta country outside the EU/EEA.

Your rights

Right to access

You have the right to request a register extract for your personal data that is being processed by Södertörn University. This must be provided to you free of charge. In association with such a request, the university also provides additional information about this processing, such as its purpose, the categories of personal data that are processed, predicted storage time, etc.

However, if you repeatedly request extracts, we will change an administrative fee

Right to withdraw consent

When you provide your consent, you are also entitled to withdraw it at any time if you wish to do so. It must be as easy to withdraw consent as to provide it. To withdraw your consent, please inform the employee, researcher or student who collected your personal data.

Right to data portability

In some cases, you are entitled to receive your personal data in a generally used format so you can transfer it to another data controller.

Right to correction

As a data subject, you have the right to have incorrect personal data about you corrected without delay. You also have the right to supplement incomplete personal data.

Right to erasure (to be forgotten)

In some cases, you have the right to have your personal data erased if it is no longer necessary for the purpose for which it was collected. For example, this could be if you decide to stop studying and want us to erase your personal data.

There are exceptions to the right to erasure. This could be if the personal data processing is necessary to fulfil a legal duty, perform a task of general interest or as part of the exercise of public authority.

Right to submit a complaint to the Swedish Data Protection Authority

You have the right to complain to the Swedish Data Protection Authority about our processing of your personal data.

More information about your rights

Read more about your rights on the Swedish Data Protection Authority’s websiteexternal link

Contact

If you have questions about data protection, you are welcome to contact your contact person at the university, the person responsible for a project or course. You can also contact Södertörn University’s data protection officer, Alexandra Racutanu, via dataskydd@sh.se

Share

Facebook Mail Twitter

Page updated

02-03-2020