Personal data in DiVA

The General Data Protection Regulation (GDPR) is the EU's new data protection regulation which entered into force on 25 May 2018. The Regulation replaces the Swedish Personal Data Act (PuL). The purpose of the regulation is to strengthen the protection of the privacy of individuals.

The regulation does not regulate copyright but only the processing of personal data. If a student or doctoral student has signed the agreement to publish their work in LiU's publishing platform DiVA, this agreement still applies. GDPR does not revoke contractual agreements.

Data Protection Regulation and DiVA

In LiU's publication platform DIVA, some information about the author(s) of a publication is stored in an authority record that contains information about the author. The amount of information varies depending on whether one is an LiU employee or whether one is a student at the undergraduate level. The handling of personal records facilitates registration in DiVA by the data being saved once in a personal record and can then be reused when registering a new publication without all the data having to be registered again. A personal record is not created for LiU employees who do not have publications recorded in DiVA. In DiVA no personal records are created or stored for students, but the information is only stored in the post with the publication.

Some data are not displayed in DiVA's external search interface and are therefore not searchable.

LiU Employee

Field
in DiVA
Visible in DiVA's
search interface
Searchable
in DiVA
First and family name Yes Yes
Affiliation Yes Yes
Year of birth No No
LiU-ID No Yes
ORCID Yes Yes
Research Group Yes Yes
E-mail address No Yes

Students at Undergraduate Level

Regarding students at the undergraduate level, the amount of information depends on what the student chooses to register. Thus, several of the tasks are voluntary to enter and can be deleted at the student's request. The display of the data is the same as for LiU employees according to the table above. The voluntary information is Year of Birth, LiU-ID, ORCID, Research Group and E-mail address. If the student specifies his/her e-mail address, a message is sent automatically to the student when the student work has been submitted for review and another e-mail message when the student work is available online.

Responsibility and contacts

The personal data controller for the above-mentioned personal data is Linköping University.

The publishing platform DIVA is provided by Uppsala University (system supplier) who processes personal data on our behalf. The platform is used for electronic registration, publication and archiving of publications from a number of universities and research institutions.

The legal basis for the processing of the basic information is that it is necessary to process personal data in order to fulfill the agreement that you, the person who has published in DIVA, has entered into with Linköping University/DIVA by approving the conditions for publication. The legal basis for information provided voluntarily is that you have consented to the treatment by voluntarily leaving it. You can contact Linköping University if you want information about the information we have about you or otherwise exercise your rights under the Data Protection Ordinance, to request correction, transfer or to request that we limit the processing, to object or request deletion of your tasks. You can do this most easily by contacting registrator@liu.se. You can reach our Data Protection Officer at dataskyddsombud@liu.se. If you have a complaint about our processing of your personal data, you have the right to contact the supervisory authority (Datainspektionen).

If you have any questions, please contact ep@ep.liu.se and we will answer them.