Introduction
Paideia, The European Institute for Jewish Studies in Sweden, collects and processes personal data in accordance with the European Union’s General Data Protection Regulation (GDPR) and other applicable data protection laws. We respect your privacy and handle your information responsibly.
Paideia collects personal data from individuals who sign up for our newsletter or participate in our activities, including events, courses, and collaborations. We only store information that is necessary in order to carry out programming, to facilitate communication with program participants and other stakeholders, and to manage obligations related to bookkeeping and other mandatory documentation. We do not share personal data with third parties, except as specified.
Legal Basis for Processing Personal Data
We process personal data in accordance with the European Union’s General Data Protection Regulation (GDPR). The legal basis for processing depends on the purpose:
- Consent (Article 6.1 a): when you voluntarily provide your personal data, for example when signing up for newsletters, events, or agreeing to photo documentation.
- Contract (Article 6.1 b): when the processing is necessary to fulfil an agreement with you, such as participation in a course or program.
- Legal obligation (Article 6.1 c): when we are required by law to retain certain information, such as accounting records or academic certificates.
- Legitimate interest (Article 6.1 f): when processing is necessary for us to operate effectively and securely, for example managing participant lists or internal communications.
Data We Store and Usage
We may collect your name and contact details to inform you about our programs and events. For students and alumni, we also store biographical data to tailor opportunities and facilitate connections. We also share necessary information with those managing our premises.
Data Collection Methods
We collect data through Cognito Forms and when you sign up for our email list. We may also take photos at events for documentation and social media, but will not use them without consent.
Data Storage
Data collected is stored locally at Paideia and sometimes with cloud services such as Cognito, Schoolsoft and Google Drive.
Privacy and Data Handling
Paideia maintains contracts with all cloud service providers to ensure compliance with applicable data protection laws (including the GDPR). Your personal data is handled securely and responsibly at all times. We may share personal data with the European Commission and other funders when required for reporting, auditing, or program administration purposes. Only the information necessary to fulfill these obligations is shared. All third-party recipients are required to handle your data securely and in accordance with applicable data protection laws, including the GDPR.
Data Deletion
Bookkeeping data is kept digitally for seven years, as required by Swedish law. Course grade certificates are kept physically for 50 years, in compliance with Swedish law. Application data is erased six months after the program, event, or course concludes.
Your Rights
- Request copies of your personal data.
- Correct inaccurate information.
- Request deletion of your data under certain conditions.
- Restrict processing of your data under certain conditions.
- Object to processing of your data under certain conditions.
- Request data transfer to another organization or directly to you under certain conditions.
If you wish to exercise your rights or have any questions about how we handle your data, please contact us at info@paideia-eu.org.