The Personal Data Act (Norwegian Data Protection Authority) distinguishes between personal data and sensitive personal data. 

The Norwegian Film Institute processes both personal data and sensitive personal data. The data will not be shared with others unless the data subject has consented to this, but they can be disclosed for statistical purposes. In such case, they will be processed in a way that does not make it possible to link them to you as a person.

The Norwegian Film Institute is the data controller for personal data

The Norwegian Film Institute is the controller of personal data we receive or collect ourselves. This means that we are responsible for how personal data are used and that this use is in accordance with the Personal Data Act.

We have joint processing responsibility with the Norwegian National Collection Agency and Lindorff in cases concerning the collection of claims and repayment of grants.

For what purposes does the Norwegian Film Institute process personal data?

We process personal data in order to administer grant schemes in accordance with the Regulations relating to grants for audiovisual productions and the Regulations relating to grants for film productions. This includes:

• processing applications
• claiming repayment of grants
• processing personal data in connection with statutory duties such as budgeting, accounting, statistics and reporting to other legal bodies
• disclosing personal data to other public bodies that have the legal authority to collect information, e.g. the Norwegian Tax Administration
• to offer correct and relevant information about our grant schemes
• to analyse data about the use of nfi.no, mediadesk.no and cinemateket.no and Min side (my page) in the application portal, to allow us to provide user friendly, fast and correct services

 

The processing of personal data includes collection, registration and organisation relating to the specific purpose.

We also process personal data when we distribute newsletters, invitations, press releases and in connection with membership of Cinemateket.

On what grounds does the Norwegian Film Institute process personal data?

The Norwegian Film Institute needs to process personal data in order to consider grant applications and to follow up any repayment of grants. Without the personal data we request, we cannot link the application to the person in question. The processing of personal data is therefore necessary to enable the Norwegian Film Institute to administer the duties we are obliged to carry out.

What personal data is processed?

The Norwegian Film Institute only uses the personal data we need in order to exercise our administrative responsibilities. At times, we also process sensitive data or confidential data, but only when necessary to correctly process a case.

Where is personal data collected from?

The Norwegian Film Institute collects personal data from other public bodies. This includes the Norwegian Population Register, the Brønnøysund Register Centre and the Norwegian Tax Administration.

When you send an application, phone, or send an email to the Norwegian Film Institute, or contact us in other ways, you share personal data with us. This is voluntary and concerns information we need to process your enquiry.

Email

You can send us emails but note that the content of emails can be read by data thieves. We therefore suggest that you do not use email for matters that contain sensitive data. Emails received by the Norwegian Film Institute are processed in the same way as other cases and are registered if they constitute an enquiry intended for us. The Norwegian Film Institute’s journal is public and available online, but searches in the search engine will not produce hits for names in the journal.

Note that your name will be visible in the public journal when you send us an email or letter containing your full name in connection with requesting access to documents.

Can the Norwegian Film Institute disclose personal data to others?

Your personal data can be disclosed to other public bodies that have legal grounds to use the data in their case processing. This includes the National Collection Agency and the Norwegian Tax Authority.

We do not disclose personal data to parties that do not have legal grounds unless you have authorised or consented to this.

Public disclosure and right of access?

The Norwegian Film Institute is obliged to comply with the Freedom of Information Act. Everyone has a right to access the documents produced as a result of contact between us, the applicants and the general public. However, this does not mean that all documents are available without reservations. Documents that are subject to a statutory duty of secrecy will only be available to those processing the case.

 

How long will the personal data be stored?

The Norwegian Film Institute complies with the Archives Act and must therefore store documents that are used in case processing. Personal data used to process your case will therefore not be erased. This is because we need access to the data to ensure correct case processing.

The personal data may be used for historical, scientific and statistical purposes. The Norwegian Film Institute is entitled to do this as long as society’s interest in storing the data is clearly greater than the disadvantages this poses for you.

No personal data is stored from the use of Filmbib’s services. 

The ticket system that administers tickets for Cinemateket’s films stores the information you provide when you pay for tickets. This can be retrieved and erased if desired.

Membership of Cinemateket can be changed or erased if desired.

If you have asked to receive our newsletter, press releases or invitations, we will only store the personal data we need and for as long as you wish.

What rights do you have as a user?

Your rights are in accordance with the Personal Data Act.

You have

• the right to information about how the Norwegian Film Institute processes your personal data
• the right to demand that the Norwegian Film Institute erase data about you that are no longer necessary for the purpose. In most cases, however, it is necessary to store the data after the completion of application processing. This is pursuant to legislation such as the Archives Act and the Bookkeeping Act.
• the right to correct your personal data that are incomplete or incorrect
• the right to file a complaint against the Norwegian Film Institute’s processing of your personal data
• the right to withdraw consent at any time
• the right to file a complaint to the Norwegian Data Protection Authority
• the right to access data the Norwegian Film Institute has about you
• the right to receive a copy of the personal data being processed
• the right to restrict processing of your personal data
• the right to be obtain your personal data (data portability)

 

The Norwegian Film Institute can make exceptions from the rights listed above if we are exercising a public duty, or if processing is necessary to exercise a duty in the public interest, cf. the General Data Protection Regulation Article 18 No 2.

You can contact us and request to see the personal data we have registered about you. Enquiries can be addressed to post[@]nfi.no, with the reference ‘personal data’.

If you wish to erase personal data stored on a recipient list or a membership, please contact post[@]nfi.no from the same email address as your account is registered to, and stating the username you wish to erase. Your personal data will then be erased from our membership register.

If you request access or other rights relating to the processing of personal data from the Norwegian Film Institute, you have a right to receive an answer within one month of receipt of your enquiry. If we are unable to answer you within one month, you will receive a preliminary answer within the original time limit stating the reason for the delay. In such cases, the time limit can be extended by two months.

Are personal data stored by the Norwegian Film Institute secure?

To protect your personal data, we employ a comprehensive approach to data security.

The Norwegian Film Institute therefore works in several ways to protect your rights and your personal data:

• Employees – we make targeted efforts to ensure our employees have the requisite knowledge, attitudes and awareness, thereby reducing the risk of human errors.
• Technology – we work to ensure that our systems are robust against external cyber threats and to reduce risk factors that arise through working with third parties and through employees’ use of the systems.
• Organisational – we work to ensure that responsibility is assigned, that risk management becomes part of the Norwegian Film Institute’s operations, and that procedures and guidelines for secure data management are developed.

Cookies and Google Analytics

The Norwegian Film Institute uses the analysis tool Google Analytics to analyse general user patterns on the websites nfi.no, cinemateket.no and mediadesk.no. Information about the users is collected by cookies on the websites nfi.no, cinemateket.no and mediadesk.no. Cookies are small text files that the website stores on the user’s computer. The files can only be read by nfi.no, cinemateket.no and mediadesk.no, and by the user him/herself. The data is anonymised and used to find out whether the user has visited the website before, the time of the visit and which website the user came from. The Norwegian Film Institute uses the data to improve the services we provide on our websites. We do not use cookies to store personal data.

You can prevent cookies being stored on your computer by changing your settings in the browser.

In line with common internet practice, the user’s IP address is registered by the websites nfi.no, cinemateket.no and mediadesk.no. The Norwegian Film Institute has chosen to use a script that removes the last digits of your IP address before the information is stored by Google Analytics. This ensures that the analysis tool can estimate the user’s geographical location, without being able to identify the individual user. The data collected is subject to Google’s data protection guidelines and Google will not compile IP address data and other data Google may have about you.

The Norwegian Film Institute’s contact details

To contact us, please use our usual channels.

• The Norwegian Film Institute’s phone number is (+47) 22 47 45 00
• You can send an email to: post[@]nfi.no
• You can send a letter to: Norsk filminstitutt, P.O. Box 482, Sentrum, NO-0105 OSLO

 

To protect your privacy, we recommend that you do not send sensitive personal data by email; see above.

Contact details of the Norwegian Film Institute’s data protection officer

The Norwegian Film Institute has a data protection officer who attends to the personal data interests of employees, applicants, the general public and others who contact us. The scheme is facilitated and administered by the Norwegian Data Protection Authority. The data protection officer can provide advice and guidance relating to any general questions about the Norwegian Film Institute’s processing of personal data, or about protecting the data we have registered about our customers.

email: eg[@]governance.no

Address: Advokatfirmaet Erling Grimstad AS
att. Erling Grimstad
Gaustadalléen 21, NO-0349 Oslo
Tel.: (+47) 997 97 542

 

 

 

Privacy declaration for MEDIA Desk Norway

This privacy declaration describes our processing of personal data when you use Creative Europe MEDIA’s website www.mediadesk.no, or when you contact us by email. Creative Europe MEDIA does not process personal data from third parties or sell personal data to other parties.

Public disclosure and personal data

The Norwegian Film Institute, including Creative Europe MEDIA, are subject to the Freedom of Information Act. Everyone has a right to access the documents produced as a result of the contact between us and the general public. However, this does not mean that all documents are available. A document subject to a statutory duty of secrecy will only be available to those processing the case.

Email

You can send us an email but please note that the content of emails can be read by data thieves. We therefore suggest that you do not use email in connection with cases concerning sensitive or private information. Emails are processed in the same way as other cases and are registered if they constitute a formal enquiry to us.

Our journal is public and available online, but searches in the search engines will not produce hits for names in the journal. Please note that your name will be visible in the public journal when you send us an email or letter containing your full name in connection with requesting access to documents.

To collect information about the website, we use the analysis tool Google Analytics. Google Analytics uses cookies. The Norwegian Film Institute under the auspices of Creative Europe MEDIA, is the data controller for mediadesk.no and decides what data Google can collect on the use of our website. Google Analytics only collects general internet statistics such as data about the type of browser, time, language and what website the user came from.

In line with common internet practice, the user’s IP address is registered by our website. We have chosen to use a script that removes the last digits of your IP address before the information is stored by Google Analytics. This means that the analysis tool can estimate the user’s geographical location, without being able to identify the individual user. The data collected is subject to Google’s data protection guidelines.

Cookies and Google Analytics

Creative Europe MEDIA uses the analysis tool Google Analytics to analyse general user patterns on mediadesk.no. Information about the users is collected by cookies. Cookies are small text files that the website stores on the user’s computer. The files can only be read by mediadesk.no and the user him/herself. The information is anonymised and used to find out whether the user has visited the website before, the time of the visit and which website the user came from. Mediadesk.no uses the data to improve the services we provide on our website. We do not use cookies to store personal data.

You can prevent cookies being stored on your computer by changing your settings in the browser.

In line with common internet practice, the user’s IP address is registered by the website mediadesk.no. We have chosen to use a script that removes the last digits of your IP address before the information is stored by Google Analytics. This ensures that the analysis tool can estimate the user’s geographical location, without being able to identify the individual user. The data collected is subject to Google’s data protection guidelines and Google will not compile IP address data and other data Google may have about you.

Applications to Creative Europe

Those applying to Creative Europe must set up an EU login (the EU Commission’s user identification service) and register in the Participant Portal. The application is sent online using the E-form. The application will be processed by Creative Europe MEDIA’s main office, and not by the Creative Europe MEDIA Desk in Norway. Creative Europe and the European Commission are subject to the same personal data regulations as those that apply in Norway. 

Read more about the European Commission’s privacy policy and the use of cookies here:

• Privacy policy
• Use of cookies

 

Otherwise, the same personal data regulations apply as described above for the Norwegian Film Institute.