General Data Protection Regulation (GDPR) - teach and supervise

Not all occasions of personal data processing can be said to be in the public interest or exercise of public authority. A university has a wide range of activities, and it may be necessary to process personal data based on consent, for example, at our various events with outside participants. Note that consent must be documented and kept so that it can be displayed as needed. It can only be submitted by the data subject, and it is therefore important to ensure that the data subject himself/herself has given consent, especially in connection with sensitive personal data. For example, if collecting information about diet depending on allergies, one must note that this is a sensitive personal information. In connection with dietary questions, it may be appropriate for us to formulate the question so that it concerns preferences rather than personal health information.