General processing agreements
When researchers from universities other than Uppsala University use the services of NBIS involving personal data, NBIS/Uppsala University will act as Processor for the Controller (which is the university where the researcher is employed). In such cases, an agreement must be established between the Controller and the Processor according to Article 28 (3) of the GDPR.
General agreements have been established between NBIS/Uppsala University and some Swedish universities, for three different general cases:
- NBIS/Uppsala University acts as Processor on behalf of another university for performing bioinformatics analysis
- Another university acts as Sub-processor to NBIS/Uppsala University for performing bioinformatics analysis. This is for cases where NBIS staff is employed by a university other than Uppsala University.
- NBIS/Uppsala University acts as Processor on behalf of another university for long-term storage of personal data in the Swedish EGA node.
Established agreements
This table lists the registration numbers ("diarienummer") at Uppsala University for the established agreements, including links to the agreements, for the three different cases listed above.
