3.2 Information to the data subject

At the time of collection, the data subject has the right to receive information about which information is collected. This is easy in cases where the data is collected directly from the data subject, but the requirement also applies in many cases where the data is retrieved from another source. The following information must be provided:

  • the purpose of the processing,
  • the legal basis for processing,
  • if possible, the period for which the data will be stored,
  • the recipients or categories of recipients of the data,
  • that the university is the controller,
  • that the data subject has the right to have access to his/her personal data and have errors corrected,
  • that there is a data protection officer that can be reached at dataskyddsombud@lnu.se and that the data subject may lodge a complaint to Integritetsskyddsmyndigheten (IMY).