The data protection officer (DPO) at Aarhus University can be found on the website. The task of the data protection officer is to oversee that Aarhus University’s processing of personal data is lawful.
The data protection officer can be contacted by email at: dpo@au.dk.
As data controller, Aarhus University is responsible for all personal data collected, processed and recorded about you, regardless of whether the university itself processes the data or uses a subcontractor to process the data.
Aarhus University processes personal data concerning you for use in the payment of your salary and other administrative processes related to your employment, as well as the data generated as a consequence of your job functions, e.g. PURE, email address, website and minutes of meetings.
The legal basis for processing this data is Article 6(1)(a)-(e) and Article 9(2) (b)(a)-(j) of the General Data Protection Regulation and Section 7 of the Danish Data Protection Act.
Some types of data are related to the payment of your salary, and other types of data concern access to IT systems and physical access to buildings, while other data is more related to the tasks that you perform, such as meeting minutes or your email address.
The types of data registered by the university concerning you are:
Name, civil registration number, address, salary seniority, collective agreement, employment contract, job advertisement, application with attachments (including curriculum vitae and diplomas/exam certificates), written agreements from SDD dialogues, holiday taken/remaining, special holidays, minutes from salary negotiations, citizenship, days of absence due to illness, access cards, electronic equipment, keys, physical location.
The types of data which the university may have registered about you in cases in which this is or will become relevant are:
Lists of publications, teaching portfolio, references, maternity/paternity leave, adoption and parental leave, childcare days, any agreements concerning transfer of holidays, absence due to illness in connection with reimbursement, minutes from any sick leave absence interviews, minutes from any disciplinary meetings and any disciplinary sanctions, work permit, special offices (positions of trust), shift scheduling, any registration of working hours, use of the Danish Confederation of Professional Associations’ (AC organisation) free-choice scheme, free-choice pension scheme, senior staff scheme, increased tax rate, mileage allowance, free telephone, withholding of pay by SKAT (the Danish Customs and Tax Administration), parking permits, booking of houses through the Holiday Fund, psychological counselling by referral, course registrations, size of work clothes and shoes, identification photograph, information about which tools and equipment you have been provided with, contact information for your nearest relatives.
The list is not exhaustive.
Aarhus University only discloses personal data in cases in which there is a legal basis for doing so.
This may include disclosure of income information to the Danish Customs and Tax Administration (SKAT), as well as information about absence due to illness in connection with applications for municipal salary reimbursement. The disclosure of personal data to government agencies and institutions takes place on the legal basis of Article 6(1) (e) of the General Data Protection Regulation and Section 11(1) of the Danish Data Protection Act.
In special cases, data is sent to other government agencies and institutions when necessary in connection with, for example, cooperation agreements with Central Denmark Region, reimbursements in connection with EU projects, ministries, foundations or the police.
The university discloses information about salary, salary supplements, reasons for salary supplements and information about work tasks to the union representative who is authorised to perform salary negotiations. The legal basis for such disclosure is Article 6(1) (c) of the General Data Protection Regulation and Section 12(1) or (2) of the Danish Data Protection Act. In connection with new appointments, the university is entitled to disclose information to the union representative with whom the salary is to be negotiated about the new employee's name, contact information, qualifications, salary and seniority classification, application and CV (without the disclosure requiring the new employee's explicit consent).
Your civil. registration number and special (sensitive) personal data will not be disclosed to the union organisation/union representative authorised to negotiate without your explicit consent. In the event that you consent to such disclosure, the legal basis for this disclosure is Articles 6(1) (a) and 9(2) (a) of the General Data Protection Regulation and Section 12(3) of the Danish Data Protection Act.
If personal data is processed in connection with a personality test, the legal basis for such processing is Article 6(1)(e) of the General Data Protection Regulation.
The university collects and receives data from you and from government agencies and institutions such as The National Registration Office and The Danish Customs and Tax Administration (SKAT).
At Aarhus University, the following groups of employees will have access to the personal data processed by HR:
Not all employee groups have access to all types of personal data. The more sensitive the data, the fewer employees will have access. The employees who have access may only process the data to the extent that the data is relevant for the tasks performed.
For as long as you are employed by Aarhus University, data concerning your employment is saved.
Documents relating to your employment will be stored in Aarhus University's IT systems until it is no longer necessary for the university to have the information in view of the purposes for which it was collected.
For example, the university will continue to store the following types of data will after your resignation until it is no longer necessary for the purpose for which it was collected:
It is your responsibility to save the documents relating to your employment.
You have a number of rights to information about your employment details that you can exercise by submitting a request. You should contact the HR unit that administers your employment conditions. If you are in any doubt about which unit you can contact, please contact your immediate supervisor.
| You can submit a request to inspect the data that AU has registered about you concerning your employment. As a general rule, you have a right to inspect all data which the university has registered about you. The university must meet your request to inspect such data as soon as possible and, as far as possible, within one month. |
| You have the right to have any inaccurate personal data rectified |
| You have the right to get your personal data deleted when one of the following circumstances apply:
Note that the university’s interest in documenting your employment means that the data will not be deleted during your employment. |
| AU is not entitled to process data that is not necessary for the administration of your employment. |
| You have a right to object to the processing of your personal data, if you:
|
| You can make a complaint to the university’s Data Protection Officer (dpo@au.dk) or to the Danish Data Protection Agency if you believe that the university is processing data concerning your employment unlawfully. |
The university wishes to have photos of employees on its website. You are not obliged to agree to have your photo on AU’s website. If you want to have your photo on the website, you must upload it yourself.
If you do not wish to have your photo on the website, this decision will have no consequences for your employment.