Controller of Personal Data

Blekinge Institute of Technology processes personal data in order to fulfill its mission as a university and government agency. This includes education, research and collaboration with society.

Purpose and legal basis

BTH processes only the personal data that is necessary for the purpose and ensures that a legal basis exists for the processing.

The most common reasons why BTH processes personal data are:

• You are a student, employee or applying for a position at BTH
• You are participating in an event at the university
• You are participating in a research study

Security and protection

BTH is responsible for ensuring that your personal data is protected by appropriate technical and organizational measures. These measures are designed to ensure a level of security appropriate to the risk of the processing.

The principle of openness and disclosure

As a government authority, BTH is subject to the principle of public access. This means that messages and information sent to the university become public documents. Personal data in public documents can be disclosed unless confidentiality under the Public Access and Secrecy Act (2009:400) prevents this.

Personal data may also be disclosed to other parties, for example:

• CSN and SCB for data on students
• The Swedish Tax Agency for data on employees
• Other recipients if it is required for a task of public interest, the exercise of public authority or a legal obligation

Storage and archiving

Personal data are retained for as long as necessary for the purpose of the processing and in accordance with applicable legislation. Many data are stored in accordance with the Archives Act (1990:782) and the National Archives' regulations.

As a student at Blekinge Institute of Technology, your personal data is processed in study administration systems to enable us to carry out the education.

Systems where your data is processed

• NyA: In the admission register NyA, your identity information (name, social security number, address, telephone number and e-mail), information on eligibility, selection basis and admission are processed. The processing is done by the Swedish Council for Higher Education and BTH to assess your eligibility and merits for selection.
• Ladok: The student register Ladok contains identity data and information about participation in education, study results, grades and degrees. The data is also used for reporting to Statistics Sweden (SCB).
• Canvas: The Canvas learning platform processes name, course, username and e-mail address to administer courses. The platform is used for communication, publishing course material and managing study assignments and examinations.

Regulations and disclosure

The NyA and Ladok registers are regulated by the Ordinance (1993:1153) on the Accounting of Studies at Universities and University Colleges. Data can be disclosed to third parties, such as other higher education institutions, Statistics Sweden and CSN, in accordance with current regulations.

Further information

You can read more about the processing of your personal data as a student on our Admissions FAQ page.

The BTH card is a versatile access card used for secure and easy access to the university's premises and services.

Functions and areas of use

The BTH card functions as:

• Access card for employees, students, contractors and guests
• Identity card within the campus
• Library card
• Identification for exams
• Printout card for the university's printer

Processing of personal data

To manage the BTH card, the university processes personal data such as name, card number, acronym and photo. This data is processed in the university's system and is used to ensure authorization and create a safe and accessible campus environment.

• Legal basis: The processing of personal data is based on fulfilling a task of public interest.
• Storage period: Personal data is stored for as long as the holder needs access to the university's premises.

Blekinge Institute of Technology processes personal data in order to administer seminars, conferences, dissertations and other events.

Processing of personal data

Personal data such as name, address, telephone number and e-mail are only stored as long as it is needed to administer the event or in accordance with applicable accounting rules.

Photography and filming

At certain events, photography and filming may take place on behalf of BTH. Image and film material can be used in:

• Printed and digital material (e.g. the web, brochures and advertisements)
• Press images and content for partners
• Future information material about BTH's activities

The material is removed or archived when it is no longer considered relevant.

Your rights

If you do not want to be photographed or filmed, please contact BTH's communications office. At events, they wear dark blue vests and can also be reached via the switchboard on 0455-38 50 00.

If you are photographed or filmed by Blekinge Institute of Technology, your personal data may be processed in connection with publication. Here you can read more about how this happens.

What personal data is processed?

Images and videos are the primary data, but depending on the context, other personal data may also be processed, such as name, contact details and studies.

Purpose of the processing

Images and videos are used to inform about and market BTH's activities, including education, research and events. The processing is based on the legal basis of a task of public interest. In some cases, BTH obtains your consent for the publication.

Where are images and videos published?

The material can be published in both printed and digital form, for example

• On the BTH website and in social media
• In advertisements, brochures and educational catalogs
• On other platforms where BTH provides information about its activities

Who can access the personal data?

Images and videos published by BTH become public. This means that the university cannot control or limit how others use the material.

How long is personal data stored?

Images and films are stored in BTH's media bank and preserved in accordance with archive legislation. Preservation and deletion take place according to current rules and decisions.

Publication in social media

When publishing in social media, personal data may be transferred to companies in the United States. The level of protection for personal data in the US does not always correspond to the EU standard, which may involve certain risks. BTH does not have full control over how images and videos are used in these media.

Your rights

You are entitled to read more about your general rights under the GDPR. If publication has taken place with your consent, you have the right to withdraw it at any time.

If you participate in a research project at Blekinge Institute of Technology, your personal data, including sensitive data such as health data, may be processed.

Voluntary participation and consent

Your participation in a research project is always voluntary. The research may only be carried out if you consent after having received clear information about the project.

Your right to information

As a participant, you have the right to know:

• The overall plan for the research
• The purpose of the research project
• The methods that will be used
• Any implications and risks associated with the research
• Who the principal investigator is
• That participation is voluntary and that you can withdraw at any time

Blekinge Institute of Technology's library processes personal data to administer loans, reservations and use of library services.

Processing of personal data

The following personal data is registered in the library's lenders register:

• Name
• Personal identity number
• Postal address
• E-mail address
• Telephone number

The lenders register also contains information on borrowed and reserved books. The library also logs the use of its digital services.

Purposes and legal basis

The personal data is processed to carry out library activities, for example

• Issuing of library cards
• Administration of loans and reservations
• Handling of material orders
• Contact with requesters
• Carrying out library activities

The legal basis for the processing is the performance of a task carried out in the public interest.

Confidentiality and disclosure

Personal data in the library's register is subject to confidentiality in accordance with Chapter 40, Section 3 of the Public Access and Secrecy Act (2009:400). Information about individual loans, reservations and use of information technology is protected and is not disclosed to unauthorized persons. However, exceptions can be made in the case of claims for late payment fees, when information can be provided to debt collection agencies or the Swedish Enforcement Authority.

Automated processing and storage

• Student account: Personal data of students are retrieved from their student account upon registration as a borrower. If the account is deactivated, processing in the library system is restricted, but the data can still be used for study administration purposes.
• Retention period:
  • Data on loans and reservations are stored for as long as the borrower is active, which means that the borrower has active loans or reservations.
  • Library accounts are automatically deactivated after three years without activity.
  • Logs from the library's digital environments are deleted after one year.

Blekinge Institute of Technology processes personal data in various systems to handle applications, employment and other personnel-related information.

Processing of personal data

Personal data is processed to the extent necessary to:

• Assess applications for positions
• Fulfill employment contracts
• Comply with requirements under legislation and collective agreements
• Carry out BTH's assignment as a government authority

Examples of personal data processed

• Identity data: Name, social security number, address, telephone number and e-mail
• Employment data: Form and scope of employment, period of employment, managerial positions, extra assignments and secondary occupations
• Working conditions and remuneration: duty roster, working hours, salary, taxes and social security contributions
• Absences and leave: vacation, parental leave, sick leave and sick certificates

Disclosure of data

Personal data may be disclosed to third parties to fulfill legal requirements, for example:

• Authorities: The Swedish Tax Agency, Statistics Sweden, the Social Insurance Agency, UKÄ and SPV
• Organizations: Swedish Agency for Employers and trade unions

More information about BTH

Information about how BTH processes your personal data in our new system for applications pdf, 100.7 kB..

Blekinge Institute of Technology sends out information to admitted students and others who are interested in the university's activities.

Information to admitted students

If you are admitted as a student at BTH, we can send information about the university and about your studies to your e-mail address. The processing is based on a legal basis to perform a task in the public interest and to provide important information about the university's activities.

Press releases and news

If you are interested in BTH's activities, you can subscribe to the university's press releases via TT. Your contact information is only used to send these mailings, and you can unsubscribe from the contact list at any time.

BTH's web server is located in Sweden and the university always strives to store personal data within Sweden's borders. For more information about how BTH handles personal data on its website bth.se, see About the website bth.se.

Information published on Blekinge Institute of Technology's social media accounts is visible to other users.

Guidelines for comments and posts

On BTH's social media accounts where comments are possible, users are encouraged to:

• Maintain a good conversational tone
• Refrain from publishing posts or comments that violate the Data Protection Regulation or Swedish law

Examples of prohibited content include:

• Illegal threats
• Incitement to hatred
• Incitement to racial hatred
• Other offenses under the Electronic Bulletin Boards Act

Actions in case of unauthorized content

Posts or comments that violate the guidelines may be deleted. Users who repeatedly violate the rules may be blocked from interacting with BTH's social media.

BTH may need to transfer personal data to third countries, i.e. to countries outside the EU/EEA. BTH will then take all reasonable legal, organizational and technical measures necessary to achieve an appropriate level of protection for this personal data.

The purpose of surveillance

Blekinge Institute of Technology uses camera surveillance to create a safe environment for staff, guests and property.

Purpose of camera surveillance

The camera surveillance aims to:

• Prevent, deter and detect crime
• Protect staff, guests and property
• Contribute to criminal investigations when necessary

Legal basis

The processing of personal data through camera surveillance is based on BTH's mission to perform a task of public interest.

Scope of the processing

The processing includes storage of image material from camera surveillance.

Access to surveillance material

• Only authorized persons within BTH have access to stored material.
• Image material can be disclosed to the police or judicial system in criminal investigations.

Storage of material

Image material is stored for a maximum of 60 days, unless it has been requested by the police or judicial system for investigative purposes.

Rights of the data subject

Individuals recorded by the CCTV have rights under data protection legislation, including:

• The right to be informed when and how their data is processed
• Right to request rectification, erasure or restriction of data (in certain cases)
• The right to know what data is being processed and to move that data

For more information on rights, read on this page.

Contact details

Personal data processing is carried out by Blekinge Institute of Technology. If you have any questions or wish to exercise your rights, please contact dataskyddsombud@bth.se.