Information about the processing of personal data in connection with the publication of pictures and films
Controller of personal data
The University of Borås is the controller of personal data for the processing of your personal data by the university.
What personal data is processed
The personal data processed are pictures and/or films including you. Depending on the context, other information about you may also be processed, such as name, contact details, work or studies, or other information that you provide about yourself.
Why personal data is processed
The personal data is processed to inform about and market the university and its activities. For example, this can mean information about the university's education and research or marketing of conferences and other events at the university.
The processing means that the personal data is published in printed and/or digital form, such as the university's website and social media, presentations, newsletters, advertisements, brochures, posters, and other printed matter.
The legal basis for the processing is general interest.
In addition to this processing, personal data is also processed in the manner necessary to comply with the requirements of the law or other statutes, such as archival legislation and the Public Access to Information and Confidentiality Act. The legal basis for the processing is general interest.
Who can access the personal data
The processing in the form of the publication of your personal data on, for example, the university's website and social media means that the data becomes public and that it can be widely disseminated.
The university is a governmental authority. Pictures, films and other information contained in your personal data are therefore, as a general rule, official documents that may be disclosed to the person requesting it in accordance with the principle of public access to official documents.
The university cannot control or restrict the possible use of your personal data by others.
How long the personal data is stored
As an authority, the starting point under archival law is that official documents should be preserved, i.e. saved indefinitely. The university complies with these rules on preservation and culls (deletes/destroys) official documents in accordance with the applicable culling rules and decisions.
This means that the university may be prevented from culling pictures, films, and other information about you.
Personal data processors
In addition to publishing and other disclosures that the university may need to make, the university uses external suppliers (personal data processors) for the operation and management of IT services, such as storage. Data processors may need to have access to your personal data in order to carry out relevant duties, but they may never access more data than is necessary or process the data in violation of the university's instructions.
Some data processors are based in third countries (non-EU countries). If we store information containing personal data with such suppliers, it is because the European Commission has assessed that the country meets the requirements of a so-called adequate protection level or that appropriate safeguards have been taken.
Important about the transfer of personal data to the US in connection with social media posting
When images, videos or other information about you are posted on social media, your personal data may be transferred to companies in the United States. The protection of personal data in the US does not correspond to the protection guaranteed within the EU by the GDPR, which may mean certain risks. For example, the possibilities for judicial review of matters relating to the processing of your personal data in the United States may be limited.
To post pictures, films, or other information about you on social media, your consent is needed.
Your rights
You have the right to access the personal data processed about you and request rectification or deletion thereof. You also have the right to object to the processing and request that the processing be restricted, such as requesting that information about you be unpublished.
These rights are not unconditional and cannot always be met; for example, the university's ability to cull information is limited.
When the processing takes place with your consent, you have the right to withdraw your consent at any time. A withdrawal of consent does not affect the legality of the processing that took place before the consent was revoked.
Questions and complaints
If you have any questions or comments regarding the processing of your personal data or if you wish to exercise your rights, you are welcome to contact the Communications Office by email, kommunikation@hb.se.
If you are dissatisfied with the processing, you can contact the university's Data Protection Officer by email, dataskydd@hb.se.
You also always have the right to make a complaint about the university's processing of your personal data to the Swedish Authority for Privacy Protection, which is the supervisory authority. Read more on the www.imy.se website.