When and why CMI will process your personal data
What obligations CMI has when we process personal data
What your rights are when we are processing your personal data
Contact CMI’s Data Protection Officer
CMI has a Data Protection Officer to safeguard the privacy interests ofall whose personal data we process.NSD – Norwegian Centre for Research Data AS is the Data Protection Officer for CMI and has a duty of confidentiality in this role.
If you wish toinquire aboutwhatinformationCMIisprocessing aboutyou,how your data is being processed,orwish to exercise your rights,then youcan contact our Data Protection Officerviadpo@cmi.no.You are entitled to a response without undue delay, and no later than 30 days.
When doesCMIcollect personal data?
AtCMI, personal data is processed for administrative purposes, for archiving purposes and for research purposes.
In general, wewillprocess information about you when:
You have signed up for an event or subscribed to a newsletter
You have been a participant in a research project or for other research purposes
You have visited our websites
You have been in contact with us via email or telephone
Youare, or have been,a studentat CMI
You have applied for a position with us
You are, or have been, employed with us
Wemayalsoprocess information about you in cases whereyou have not provided the information yourself.This may be when:
A complaint or guidance case contains information about you
A non-conformity matter or personal data breach contains information about you
An employee, student or research participant has named you as their next of kin
A job applicant has provided you as a reference
When previously collected data is permitted to be reused for scientific research or quality assurance or auditing purposes
What are my rights?
Ifyou can beidentifiedin the databeingprocessedbyCMIthen you have rights.These rights could include the right to access andtoreceive a copy of yourpersonaldata, the right to have incorrect personal data corrected, the right to have your personal data deleted, the right to limit the processing andthe rightto object tothe processing.
Therightsyou havewilldepend onthebasisonwhich your data is being processedand if any exemptions apply.Below you will find explanations of what these rights mean and what exemptions may apply.
Note thatyou always have the right to send a complaint toThe Norwegian Data Protection Authority about how yourpersonaldata is being processed.
The right to access meansthat you are entitled to know:
whattype ofinformationaboutis being processed byCMI
howyour personaldata isbeingprocessed
what the purpose of the processing is
whetherthe datahas beenor will be disclosed to others and, if so, to whom
how long the data will be stored and any procedures for erasure
the extent to which you have the right to rectification, erasure, restriction of processing or to object to the processing
how the informationwascollected
You arealsoentitled to a copy of all thedatathat CMI is processingabout you, including electronic tracking. You have the righttoaccess without undue delay and within one month.
In certaincasesyou have the right torequest thatincorrectinformation about yourselfis corrected ordeleted.You must be able to prove that the registered information is incorrect, and whatthecorrect information is.
You are entitled to rectification without undue delay and normally within one month. In cases where correction is not practicable or where the information is correct but gives an incorrect impression, you may require that the information be supplemented.
Incertaincasesyou have the right to request that information be deleted. This is also called "the right to be forgotten". Unless one of the exceptions applies, you may requestthat CMI deletes your personal datain the following cases:
If you exercise the right to object to the use of your information
If the information is processedon the basis ofconsent and you withdrawyourconsent
If the purpose of the use of the informationhas beenachieved
If the information has been obtained illegally
IfCMIhas a duty of deletion under the law
In the above cases,CMIshall carry out deletion without undue delay and normally within one month at the latest.
The right to delete does NOT apply in the following cases (exceptions):
The personal information is part of an expression that is protected by freedom of expression and information
Storage is necessary for archiving in the public interest, scientific or historical research or statistical purposes. The exception only applies if deletion willmake it impossible or extremely difficult to achieve the purposes.
CMIhas a duty to storeyour databy law (for example,pursuant tothe Accounting Act or Archiving Act)
Storage is necessary to establish, enforce or defend legal claims
Cookies are small text files that are stored locally on your computer when youvisita website, such aswww.cmi.no. Cookies are a standard technology that most websites use.
Most browsers (such as Google Chrome, Safari, Internet Explorer) are set to automatically accept cookies, but you can choose to change these settings if you prefer. Doing so can cause some websitestonot work optimally. See information down the page if you want to withdraw your consent or change your browser settings.
By usingwww.cmi.no you agree that we set cookies in your browser.
CMIrecordsstatisticsonthe use of the website.The statistics are a tool for improving our website, as well as assessing the impact of marketing on other digital platforms.When you visit the website, the following information isrecorded:
Which page you look at,andwhich page you come from
If you have visited our site before
Date and time
Which browser you use, which device and which operating system you have
An anonymized version of your IP address(whichcannot be associated with you as a person)
The cookies are used to determine which page views belong to the same session, and to detect whether a visitor has visited the website before.We use Google Analytics to analyse visits to our website.
Which cookies do we use?
The www.cmi.no website uses the following cookies from Google Analytics and from our web server application (ColdFusion).
To distinguish between first-time visitors and returning visitors
To distinguish between multiple visits by same user
To track a user, so a user can log in and stay logged in for example
To keep track of a session
to distinguish between users who download pdf files