Notification form for AU's register, where AU is the data controller - administrative and educational activities

Here, you can notify processing of personal data, where AU is the data controller, and when processing is part of administrative or educational activities.

Register

AU ID of contact person*

Name of contact person*

AU email of contact person*

Unit at AU that processes personal data*

Subject title of the processing*

The purpose of processing*

Enter the number of natural persons (data subjects) whose data you are processing*

Enter start time for the processing of personal data*

Enter end time for the processing of personal data*

Elaborate which, if you are processing ordinary personal data, confidential data or biological material

Enter the category of the natural persons (data subjects) whose data you are processing – e.g. children, young people, senior citizens, patients, adults, relatives, employees.*

Do you intend to share (disclose/make available) personal data to external parties?*

Yes – elaborate in the next two fields

No

If yes, please state who (state name, address, contact information, business registration no. (CVR no.) (where relevant) and what role under data protection legislation they will have).

Will personal data be transferred to a country outside the EU/EEA?*

Yes – elaborate in the next two fields

No

If yes, please state the basis on which you are transferring personal data

Adequacy assessment

EU standard contractual clauses (SCC)

Express consent for the transfer

Other

If yes, state who (name, address, contact information and business registration no. (CVR no.) (where relevant))

Has a cooperation agreement or agreements under data protection law been concluded?*

Yes - elaborate in the next field

No

If yes, state the agreement number or where it can be obtained

What action have you taken/are you planning to take to protect personal data?*

What sources of data are you using?*

What is the legal basis for your processing of personal data? (Note that it may be necessary to tick more than one box if the category of personal data is subject to specific regulation)*

Processing of personal data is part of the exercise of authority vested in AU (point (e) of Article 6(1) of the General Data Protection Regulation)

Processing of personal data is carried out in the public interest (point (e) of Article 6(1) and/or point (g) of Article 9(2) of the General Data Protection Regulation)

Processing of personal data is on the basis of a legal obligation vested in AU (point (e) of Article 6(1) and/or point (g) of Article 9(2) of the General Data Protection Regulation)

Processing of personal data is on the basis of a contract to which the data subject is party (point (b) of Article 6(1) of the General Data Protection Regulation and possibly section 12 of the Data Protection Act and/or point (b) of Article 9(2) of the General Data Protection Regulation)

Processing of personal data is on the basis of consent given by the data subject under data protection law (point (a) of Article 6(1) and/or point (a) of Article 9(2) of the General Data Protection Regulation)

Processing of civil registration numbers with a view to unique identification (section 11 of the Data Protection Act)

Other – elaborate in the next field

If anything else, elaborate here

Don't fill this field!

Expected case processing time for the record of processing activities in research

New registrations to the record of processing activities: Within 3 weeks of notification.
Updates to existing registrations: Within 2 weeks of receiving changes.
Guidance on notification to the record of processing activities: Within 1 week of receiving the request.
Assistance in applying to the Danish Data Protection Agency: Within 2 weeks of receiving the form.
Registration of disclosure: Within 2 weeks of receiving the internal notification.