Privacy policy for Polstjärnepriset through National centre for music talents (NCM), organiser in charge
Only personal data related to the nature of the assignment may be transferred to the personal data processor's subcontractors. The processing is regulated by a personal data processing agreement. The processor will access the participants' personal data to the extent necessary for teaching or other purpose related to activities of the NCM, in order to meet agreements with principals and course participants.

Personal data used in the list of participants are:
Birth date
Telephone number
Email address
Parent's/legal guardian's contact data
Photos and recordings
Allergies and medicines (in case of special needs)

NCM applies the following protection measures:
Personal data processing agreement between NCM and subcontractors
Personal data will be erased after 1 year.
Backup copies may not be retained for more than 1 year.
The processor may not publish the sensitive information mentioned above in any form.
All personal data must be processed with caution and appropriate security measures.
The processor must use password-protected devices and email.

Transfer of personal data to third country:
In addition to the processing of personal data mentioned above, NCM activities are presented in printed materials, on the internet, on social media and in radio and television broadcasts with photos, spoken content as well as audio and video recordings for purposes of promotion and instruction. Channels used are Facebook, Instagram, Google Analytics, Vimeo, LinkedIn, YouTube, Microsoft services and the video conferencing tool Zoom. At present, the use of your personal data by NCM on social media and websites involves a transfer of your personal data to a third country outside the EU/EES area. The transfer will take place according to the transfer mechanism in the current privacy legislation, including the EU General Data Protection Regulation (GDPR). GDPR doesn't apply in third countries where your personal data will be transferred, which may carry a higher privacy risk. However, the transfer to a third country is necessary in order to be able to carry out promotional activities on NCM social media channels.

NCM processes your data according to the data protection regulation and lawful basis according to:
Public interest
Legitimate interests

NCM applies the following security measures:
All participants are asked for consent at registration
NCM limits the amount of personal data used, and which functions are available for video conferencing.
Comments sections on social media channels are handled with great caution. No sensitive personal data are used.
NCM continuously reviews measures to minimise the risks of data breaches and complements with current protection measures.

Privacy and Consent