Privacy Notice for Danish students

Version: October 2018

In connection with providing study abroad opportunities to adult children of Danish Housing Partners, Fonden DIS (DIS) collects and processes personal data about these Danish students in a preliminary application processes for these opportunities.

1. Categories of personal data and purposes

We collect and process the following types of personal data:

Categories of personal data: name, parents’ names, family address, unofficial transcript, application essay details

We process the personal data for the following purposes:

  • Providing study abroad opportunities to qualified and motivated Danish students with existing relationships to DIS
  • For historical records
  • To comply with applicable personal data protection regulation and other legitimate interests, e.g.
    • Documentation requirements
    • Compliance with basic principles and legal grounds for processing personal data
    • Putting in place, maintaining and testing technical and organisational security measures
    • Investigating and reporting suspected personal data breaches, if any
    • Handling requests and complaints from data subjects and others, if any
    • Handling inspections and queries by supervisory authorities, if any
    • Handling disputes with data subjects and third parties, if any

2. Sources

The personal data processed comes directly from the Danish students completing the application.

3. The legal basis for the collection and processing of the personal data

The legal basis for collection and processing of Danish students’ personal data is:

  • Based on GDPR art. 6(1)(a), processing which the data subject has given consent to of his or her personal data for one or more specific purposes.

When DIS collects this personal data directly from Danish students, it is provided voluntarily. They are not obliged to provide this information to DIS.

4. Disclosure of the personal data to other controllers

If Danish students application is approved by DIS, their name would be shared with the relevant U.S. university so that the Danish students can make their official application directly through them.

The legal basis for the disclosure of Danish students’ name is:

  • Based on GDPR art. 6(1)(a), processing which the data subject has given consent to of his or her personal data for one or more specific purposes.

5. International transfers of personal data to recipients (both controllers and processors) in countries outside the EU/EEA

DIS transfers only the name of Danish students whose applications have been ap-proved to the following recipients located in countries outside the EU/EEA:

Transfers of personal data to a third country or an international organisation
Category of recipient:
U.S. universities
Country:
United States
☒ EU Standard Contractual Clauses – to controllers (in development)
☒ Explicit consent from the individual

6. Retention period

DIS deletes all application data after each annual application cycle. The name of students whose application is approved will be kept for historical records unless requested to be deleted by the individual Danish students.

7. Danish students’ rights

Subject to the conditions set out in the applicable data protection legislation, you enjoy the following certain rights:

  • The right to request access to the personal data
  • The right to rectification of the personal data
  • The right to erasure of the personal data
  • The right to restriction of processing
  • The right to data portability
  • The right to objection to the processing of the personal data

Danish students also have the right to lodge a complaint with the competent supervisory authority, such as the Danish Data Protection Agency. Please consult their web-site for how to submit a complaint at datatilsynet.dk.

8. Contact

Danish students should contact DIS if they have any questions in regards to the protection of their personal data or if they wish to exercise their legal rights.

Contact details of the controller(s):

Fonden DIS – Danish Institute for Study Abroad
Vestergade 7
DK-1456 København K
Business registration no. in Denmark: DK13058946
Tel no: +45 33 11 01 44

Contact details of the data protection officer:
E-mail address: dataprotectionofficer@dis.dk
Tel no: +45 33 76 54 36