Filetype
Staff Pages provides support to Lund University staff in their day-to-day work. The content of Staff Pages is the responsibility of the University’s central administration and is coordinated by a group of appointed representatives from each division. The role of the coordination group is to ensure that Staff Pages: is up-to-date and correctcontains information that is relevant to usersmaintains a
https://www.staff.lu.se/about-website - 2026-04-25
Working in project form Within the University, large and small projects as well as inquiry assignments of various kinds are continuously being conducted. Lund University project model is intended as a support for assignments implemented in project form. TemplatesDirective, in Swedish (Word 108kB, new tab)Project plan, in Swedish (Word 194kB, new tab)Risk assessment, in Swedish, (Word 26kB, new tab
https://www.staff.lu.se/support-and-tools/organisational-development-and-change-management/project-model - 2026-04-25
SYSTEM GOVERNANCE MODEL AT LUND UNIVERSITY Within the University, there is a large number of systems dedicated to providing support in the implementation of education, research and support activities. The aim of system governance is to take a structured approach to ensuring that the systems benefit the organisation and run as cost-effectively as possible. How the University works with support syst
https://www.staff.lu.se/support-and-tools/organisational-development-and-change-management/system-governance-model - 2026-04-25
Lund University processes personal data in accordance with the EU's General Data Protection Regulation (GDPR) and the Swedish Data Protection Act. On these pages, you will find information, advice, and support for the processing of personal data within the university's operations. What is the purpose of GDPR?The General Data Protection Regulation (GDPR) has two fundamental purposes. On the one ha
https://www.staff.lu.se/support-and-tools/personal-data-and-data-protection - 2026-04-25
On the sub-pages below you will find general information and support for GDPR matters relating to laws, principles, consent et cetera. You will also find answers to Frequently Asked Questions (FAQs). Please click on each link below in order to attain further information regarding:Laws and regulationsResponsibility for personal dataLegal basisGeneral principles for personal data processingInformati
https://www.staff.lu.se/support-and-tools/personal-data-and-data-protection/general-information - 2026-04-25
Here you will find information on selected areas of work, in which the processing of personal data is a common occurrence. Information on processing of personal data for staff working with:ResearchEducation - student contactExternal engagement and communicationHuman resourcesFinanceManagementCommittees and boardsIT systems Contact Lund University has an external Data Protection Officer; Secure St
https://www.staff.lu.se/support-and-tools/personal-data-and-data-protection/area-specific-information - 2026-04-25
Laws and ordinancesThe GDPR (General Data Protection Regulation) is an EU-wide law, but it is complemented with laws and regulations in each country. In addition to laws and regulations, Sweden has carried out a range of preliminary work that shows the intention of legislators. GDPR regulates aspects such as:What is personal data?What is sensitive personal data?What is the legal basis for processi
In order to process personal data, you must have a legally valid reason, a so-called legal basis, for why processing should be carried out. For those working at Lund University, there are five legal bases of which the most common ones in education, research, and collaboration are the task of public interest and exercise of public authority 1. Task of public interestTask of public interest is the
https://www.staff.lu.se/support-and-tools/personal-data-and-data-protection/general-information/legal-basis - 2026-04-25
When is consent needed?In most cases you do not need to ask for consent, as personal data processing at the University is often supported by another legal basis. Nevertheless, there are instances when you do need to ask for consent, for example from people who are not actively involved in the University’s operations in situations such as:recruitment of staff and studentsadministration of lists or
https://www.staff.lu.se/support-and-tools/personal-data-and-data-protection/general-information/legal-basis/consent - 2026-04-25
Article 5 of the EU’s General Data Protection Regulation (GDPR) includes general principles for how personal data is to be processed. These principles act as guidelines for how you are to process personal data. Lawfullness, fairness and transparency All processing of personal data is to be lawful, fair and characterised by transparency.Based on this principle, data subjects have the right to reque
Checklists When you process personal data, you need to inform the data subject (your target group/s) about the processing regardless of whether consent or another legal basis applies. We provide checklists to help you share the required information with the data subject.Checklists as a mean for information Who are the checklists for?The following checklists are intended for use by staff and studen
Information and templates When is a data processing agreement required?When the University engages or collaborates with another organisation that processes personal data for which the University is responsible, a data processing agreement between the parties is to be set up. The data processing agreement is usually a separate agreement which is distinct from the agreement that regulates the conten
When a person contacts you via email, you need to remember to inform the person about how the University processes personal data, while also considering how you manage and store emails. How do I provide information?You can inform the email recipient in a simple way by including the following text in your email signature:In Swedish: "När du skickar e-post till Lunds universitet behandlar vi dina pe
What is personal data?Who is responsible for personal data processing at Lund University?When and how are you to process personal data?What is "sensitive" personal data?Does the GDPR affect how you process personal data collected before 25 May 2018?How are we to process personal data in everyday work?How are contact details for next of kin to be managed?How are you to inform the data subjects?What
https://www.staff.lu.se/support-and-tools/personal-data-and-data-protection/general-information/faqs - 2026-04-25
Processing of personal data within researchThe lawful ground for personal data processing within research is almost always that it is carried out in the public interest. This means that it is permitted to process personal data if it is necessary for a research project.Depending on the purpose of the research project, you determine which types of personal data need to be processed. Collecting and p
Lund University is to be a safe and secure workplace for employees, students and visitors. To achieve this, employees and students are required to follow the security procedures that apply. On the following pages you will find security information that is relevant for those who work at the University. Important aspects to consider Study the evacuation plans shown on the signs and familiarise yours
https://www.staff.lu.se/support-and-tools/security - 2026-04-25
Personal data processing in contact with students Information about processing students’ personal data can be found on education.lu.se: Personal data and data protection in education and when in contact with students Contact Lund University has an external Data Protection Officer; Secure State Cyber AB and the contact person at Secure State Cyber AB is Sanja Hebib.Do you have questions regarding
External engagement with wider society and providing information on our activities is a part of the University’s mission. This means that the legal basis for processing is that the personal data is of public interest. You are permitted to process personal data in external engagement and to inform without asking for consent, but only if this involves necessary personal data. Necessary personal data
Internal newslettersNewsletters that are sent internally only to University staff are considered part of the information they require to carry out their duties. This means you may collect contact details of internal recipients for internal newsletters without needing to ask for consent. You are also not required to provide special information to staff about doing this.External newslettersYou must
The legal basis for processing personal data for eventsTo handle personal data, you must have a legal basis. Common legal bases for collaboration and external communication are tasks of public interest. If you're unsure about the legal basis, such as choosing between tasks of public interest and consent, please contact the data protection officer. What information do I need to provide to external
