Privacy Policy

How DTU processes your data

As a data controller, DTU processes data about students, staff, visiting researchers, business partners, applicants, alumni, participants in research projects and conferences and people who subscribe to DTU’s newsletters and web services, among others.

The DTU privacy policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. We process information on the basis of Article 6(1)(b), (c) and (e) of the Regulation and in some cases on the basis of your consent in accordance with Article 6(1)(a) of the Regulation.

In the case of sensitive data, we process your information on the basis of Article 9(2)(b), (f) and (j) of the Regulation and in some cases on the basis of your consent in accordance with Article 9(2)(a) of the Regulation, or because the data has been published, see Article 9(2)(e) of the Regulation.

The legal entity responsible for processing your personal data is:

Technical University of Denmark (DTU)
Anker Engelunds Vej 1
Building 101A
2800 Kongens Lyngby

Contact details for DTU’s data protection officer are:

DTU
Attn. DPO
Anker Engelunds Vej 1
Building 101A
2800 Kongens Lyngby

Email: dpo@dtu.dk
Tel.: +45 25 25 25 25

Types of data

The data about you which DTU processes will depend on your connection with DTU but is typically your name, address, telephone number, occupation, company name (one-man businesses), account and payment information, traffic data and location data and logins

For students, applicants and employees, DTU will typically also process data about academic qualifications and personal competences, diplomas or other information about academic degrees, publications, previous employment, photos, date of birth, your next of kin, civil registration number, salary, absence and health information

DTU may also process sensitive data such as genetic, health and biometric data, for instance in connection with your employment or if you participate in a research project.

The vast majority of data we receive directly from you, but the data may also come from publicly available sources, your previous employers or partners and public authorities.

In connection with research projects, we may also receive data from others who have collected information about you for research purposes.

Purpose

We process data about you for a variety of purposes, depending on your connection with DTU. If you are a student, we will process personal data about you in order to manage your enrolment at DTU, just as we, for instance, pass on data to the State Educational Grant and Loan Scheme Agency. If you are an employee, we will process data about you in order to manage your employment at DTU, and we will pass on data to SKAT. If you participate in a research project, the processing of data will be used only for research purposes.

DTU also processes personal data when we supply a service to you or enter into collaboration in which DTU receives a service. Among others, we use the personal data to communicate with you, whether you are one of DTU’s partners or attending a conference or event. In a number of cases, DTU’s processing of personal data will take place as a result of compliance with legal obligations.

Storage and disclosure

We store your data for as long as it is necessary for the purpose or purposes for which the data are processed. When it is no longer relevant to store your data in order to fulfil its purpose, the data will be deleted or archived.

In some cases, we pass on your data to partners such as suppliers and vendors, grant givers, other public authorities, other research institutions and in connection with the use of external data processors. DTU will not disclose data to others, unless DTU is obliged to provide the data as a result of a legal obligation or in order to perform a task in the public interest.

Your rights

If DTU processes data about you, as the data subject, have a number of rights:

  • You have the right to request access, rectification or erasure of your personal data.
  • You also have the right to oppose the processing of your personal data and, in some cases, to have the processing of your personal data limited.
  • Particularly, you have an unconditional right to oppose the processing of your personal data for direct marketing.
    If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not have any impact on the lawfulness of the processing carried out prior to your withdrawal of your consent.
  • You are entitled to receive the personal data which you have submitted in a structured, commonly used and machine-readable format (data portability).
  • You can always file a complaint with a data protection supervisory authority, for example The Danish Data Protection Agency.

There may be conditions for or restrictions to these rights. This applies particularly to personal data which DTU processes for use in research. It is therefore not certain that you, for example, have the right to data portability in some cases – this depends on the specific circumstances surrounding the processing activities.