51�ؿ�����

The University processes personal data for the purpose of providing contract education, including the processing of personal data of participants and in contacts and collaborations between individuals and other organisations (such as commissioning clients and external suppliers). 

In most cases, personal data is collected directly from the individual, usually through contacts between the individual and the University. Personal data that will be processed includes, but is not limited to: 

• name,
• date of birth,
• address,
• email address and
• telephone number. 

The data is used to enable the secure identification of the individual. Where appropriate, personal data may be collected on food preferences, in order to take account of any allergies, or special needs when booking a room or for site adaptation. 

In some cases, personal data may also be collected from someone other than the individual themselves. This occurs, for example, when the commissioning client enrols participants in customised contract education. 

System administrators can make notes based on the contacts 51�ؿ����� has or has had with data subjects and what contact they wish to have with the University. Data may also be collected from related study documentation systems (Ladok) and the University's financial system (Raindance). 

Emails and newsletter communications (mailshots)

51�ؿ����� uses data in MIRA to, for example, send: 

• personalised messages,
• newsletters or
• promote contract education. 

Individuals can choose to cancel their subscriptions at any time by contacting: uppdragsutbildning [at] stu [dot] lu [dot] se (uppdragsutbildning[at]stu[dot]lu[dot]se).  
 

The University is responsible for ensuring that personal data is protected by appropriate technical and organisational measures. The University shall thus ensure a level of security that is appropriate in relation to any risks associated with the processing of personal data in each case.

51�ؿ����� is the personal data controller for the processing of your personal data in the education system for contract education, Mira. Your personal data is available to 51�ؿ����� staff who work with contract education.

Your personal data is processed on behalf of 51�ؿ����� by Mira Network AB, in order to provide the IT system for contract education, Mira CRM, and the IT services linked to it. These services are licensed and developed by Mira Network AB and administered by 51�ؿ�����. Mira Network AB is thus the personal data processor. As a result of the processing of your personal data, your personal data will not be transferred to a third country (meaning a country outside the EU/EEA).

51�ؿ����� is a government authority, which means that in certain cases the University may be obliged to disclose information from MIRA upon request in accordance with the principle of public access to official documents.

The University also has other duties and obligations that may entail the disclosure of personal data to other parties. For example, in order to be able to provide contract education, data may be required to fulfil a public task. Personal data may also be disclosed, where appropriate, to the University's partners, for example to suppliers or another party, as a result of agreements between the University and the individual. 

In the event of a transfer to another party, the University will take all reasonable legal, organisational and technical measures that may be required to protect the personal data.

Where there is a requirement to provide specific information about personal data being transferred to another organisation, such information will be provided to the data subject.
In all other respects, personal data will not be transferred to a third party without legal justification or obligation.

51�ؿ����� also processes the personal data in Mira for the purpose of making statistical summaries at an aggregated level. The personal data in the statistical summaries will be anonymised so that it is no longer possible to attribute them to a specific person.

51�ؿ����� stores personal data for as long as it is necessary to be able to conduct contract education. Individuals’ personal data will be stored by the University in the Mira CRM IT system. 

The University does not process personal data for a longer period than is allowed. The main rule under the Archives Act is that public documents held by government authorities are to be preserved. Government authorities may only discard public documents in accordance with regulations or decisions by the Swedish National Archives or in accordance with special regulations on the disposal of documents in law or ordinance (Section 14 of the Archives Ordinance).

In order to keep the individual's personal data up to date and accurate, the University may supplement and update the personal data from commercial and public registers. 

Data collected for marketing and/or recruitment purposes that is no longer needed for the purpose of contract education and/or is outdated is systematically deleted on an ongoing basis.

The GDPR states that individuals have certain rights that you can learn more about below. 
These rights include the right to: 

• access (register transcript)
• correction
• deletion
• limit personal data
• object to processing
• lodge a complaint

The right to access

As an individual, you have the right to request information about the personal data processed by the University about you free of charge.

Contact us via dataskyddsombud [at] lu [dot] se to request a transcript of the personal data we have stored about you. Please specify if you are contacting us as a student, employee, participant in a research project or in some other capacity. 

The right to correction

As an individual, you have the right to request a correction of any incorrect personal data about you that is stored at the University. Such a request should preferably be sent to your most immediate contact person, course director, manager or other authorised person.

The University is obliged to correct any incorrect personal data without undue delay.

The right to deletion

As an individual, you have the right to have your personal data deleted in cases where the personal data is no longer needed to fulfill the purpose for which it was collected (the right to be forgotten). There may be provisions stating that certain personal data must not be deleted, in which case such provisions take precedence. 

If the personal data has been disclosed to another party, the University shall take any steps reasonable to notify said party that the data has been deleted.

In cases where there are legal impediments to the deletion of personal data, the University will limit the processing of said personal data to the extent required by law. 

The right to limit personal data

As an individual, you have the right to request that the processing of personal data be limited only to processing for certain specific purposes.

The right of limitation applies in the following cases:

• If the personal data is incorrect and the University needs time to check the accuracy of the data.
• If the personal data is no longer needed for the University’s activities, but you request that it continues to be stored in case it will be needed to make legal claims.
• If you object to the processing performed by the University, in which case the processing shall be limited until the justification for your objection and the University’s compelling reasons have been weighed.
• If you believe that the University should delete your personal data, but the University for some reason is unable to accommodate your request.

The right to object to processing 

As an individual, you have the right in some cases to object to the University’s processing of your personal data. If there is no compelling reason for the University to continue to process your personal data, e.g. in order to comply with any legal requirements, the University will then cease the processing.

The right to lodge a complaint

If you believe that the University’s processing of your personal data is in violation of the GDPR, you have the right to file a complaint with the Swedish Authority for Privacy Protection. For information on how to file a complaint, please visit their website.

For questions or comments regarding the processing of personal data at 51�ؿ����� you can contact our data protection officer using the contact details below.

Data Protection Officer:
Postal address:
51�ؿ�����
Box 117
221 00 Lund

Telephone:
+46 46 222 00 00

Email address:
dataskyddsombud [at] lu [dot] se (dataskyddsombud[at]lu[dot]se) 

More information:

Privacy policy at 51�ؿ�����