Processing of personal data

Public Art Norway (“KORO – Kunst i offentlige rom”, “KORO”, “us” or “we”) processes personal data in the manner described in this privacy statement, and is responsible for ensuring that such processing is conducted in accordance with current legislation.

This privacy statement describes how Public Art Norway processes personal data relating to applicants to our funding schemes and their contact persons; recipients of funding from our funding schemes; clients; suppliers; applicants for jobs at Public Art Norway; and curators and art consultants applying to or registered with Public Art Norway’s curatorial opportunities portal.

If anything in this privacy statement is unclear or if you have other questions about how Public Art Norway processes your personal data, please do not hesitate to contact our data protection officer Anne Christine Schjetne.

Who is responsible for the processing of your personal data?

Public Art Norway, business registration numbers 974778998 and 992462744 is responsible for processing such personal data as is processed in accordance with this privacy statement.

Our contact details are:

Public Art Norway / KORO – Kunst i offentlige rom

Street address: Victoria terrasse 11, 0251 Oslo, Norway

Postal address: PO Box 6994 St. Olavs plass, 0130 Oslo, Norway

Telephone no.: +47 22 99 11 99

Email: post@koro.no

For what purposes and on what legal basis does Public Art Norway process personal data?

a) Everyone who corresponds with Public Art Norway.

As a public agency, Public Art Norway is required to comply with the Norwegian Archives Act as it relates to public bodies. In order to comply with our obligations under these statutory rules, all of Public Art Norway’s incoming and outgoing correspondence is archived, initially in our own systems and subsequently through deposition at the National Archives of Norway (the “National Archives”). The legal basis for this processing activity is that it is necessary in order to comply with our legal obligations. For more about the National Archives, see Clause 4.3 below.

b) Applicants to our funding schemes and their contact persons.

We process personal data concerning applicants to our funding schemes, and concerning their contact persons if relevant, for the purposes of administrating and evaluating funding applications. The legal basis for this processing activity is that it is necessary in order to implement measures at the registered party’s request prior to entering into a contract (i.e. a funding contract).

Public Art Norway is obliged to comply with the Archives Act and the Freedom of Information Act and facilitate public transparency in the management of the fund and the funding programmes. Among other things this means that personal data you provide in connection with your application may be published in lists of funding decisions on Public Art Norway’s website, and will be archived and deposited with the National Archives in accordance with public law requirements. For more information about the publication of lists of funding decisions, see Clause 4.1 below.

For this reason, we also process personal data for the purposes of maintaining an up-to-date archive and facilitating public transparency. The legal basis for this processing is that it is necessary to exercise the public grant-making authority attributed to Public Art Norway, and that it is necessary to comply with our legal obligations.

Public Art Norway does not use automated decision-making systems, including profiling, when evaluating funding applications.

c) Recipients of funding from our funding schemes.

If you receive funding from Public Art Norway, we will be obliged to process your personal data in order to make and administer the payments. The legal basis for this processing activity is that it is necessary in order to perform a contract to which Public Art Norway is a party.

We also process and store information about funding payments for the purpose of keeping Public Art Norway’s accounts. This processing activity is necessary in order to comply with our legal obligations.

d) Clients and suppliers

We process personal data concerning clients and suppliers for the purposes of performing or entering into contracts to which we are a party. Such processing is necessary in order to perform a contract to which we are a party, or to implement measures requested by the client or the supplier prior to entering into a contract.

We also process and store information about incoming and outgoing payments for the purpose of keeping our accounts. This processing activity is necessary in order to comply with our legal obligations.

e) Applicants for jobs at Public Art Norway.

We process the personal data provided by applicants for jobs at Public Art Norway during the application process for the purpose of evaluating applications. The legal basis for such processing is that it is necessary for this to be completed before entering into any contract.

f) Network for curators and art consultants on Public Art Norway’s curatorial opportunities portal.

We process the personal data provided in applications to join the network for curators and art consultants on Public Art Norway’s curatorial opportunities portal for the purpose of assessing the applications. The legal basis for such processing is that it is necessary to implement measures at the applicant’s request.

Although the CVs on the network are not publicly available on the website, anyone who wishes to announce an opportunity, and other registered users of the network, can access the information. Accordingly, you should consider the content of the curatorial opportunities portal as constituting publicly available information. For this reason, the portal offers profile holders an option to be invisible. If you select this option you will be able to read announcements and apply for opportunities, but your profile and CV will not be visible to other users of the network.

With whom does Public Art Norway share your personal data?

a) Publication of lists of funding decisions

Public Art Norway publishes lists of funding decisions when granting funding in response to applications to our funding schemes. Such publication forms part of our work to increase transparency and equal treatment in the processing of applications.

b) Members of committees and working groups.

Members of committees and working groups will have access to the personal data contained in the applications they are considering. All members of committees and working groups are subject to a strict duty of confidentiality.

c) The National Archives

All correspondence, including the processing of applications, is deposited with the National Archives in accordance with public law requirements.

More information about the National Archives and the National Archives’ Privacy Statement.

d) Public Art Norway’s third-party data processing organizations.

Public Art Norway uses third-party data processing organizations to perform certain data processing activities. These organizations are subject to the provisions of their data processing contracts with Public Art Norway, and do not themselves exercise control over your personal data.

The Norwegian Government Agency for Financial Management is the data processing organization for data relating to financial matters, accounts, and incoming and outgoing payments. The Agency also obtains personal data on behalf of Public Art Norway from the National Population Register, Altinn, the Norwegian Labour and Welfare Administration (NAV) and the Norwegian Tax Administration.

Cognito Forms is the data processing organization for the receipt of funding applications.

Dekode AS is the data processing organization for publishing on our website.

Webcruiter AS is the data processing organization for job applications.

Tieto Norway AS is the data processing organization for all correspondence relating to case-handling or documents subject to an archiving obligation.

e) Data transfer to countries outside the EEA.

Public Art Norway, including its data processing organizations, does not transfer personal data to countries outside the EEA.

Your rights and how to exercise them

In connection with our processing of your personal data, you have certain rights, including the following.

a) Your right of access to personal data.

You have the right to obtain confirmation as to whether or not we process personal data about you and, if we do process personal data about you, to request access to this personal data. You can access information including – among other things – the purposes of the processing, the affected categories of personal data, and the recipients and categories of recipients to which your personal data has been provided. This is not an absolute right, however, and the rights and interests of other parties may restrict your right of access.

You have the right to receive a copy of the personal data that is being processed. If you request more than one copy, we may charge a reasonable fee to reflect our administrative costs.

b) Right to rectification

You have the right to have us correct any incorrect personal data relating to you. Depending on the purpose of the processing, you may have the right to have incomplete personal data completed, including by submitting a supplementary statement.

c) Right to erasure (“right to be forgotten”)

In certain circumstances, you have the right to have personal data about you erased, and we may have a duty to erase such personal data.

d) Right to restrict processing of personal data

In certain circumstances, you have the right to require that the processing of personal data about you is restricted. If this is the case, the data concerned will be labelled and processed by us for specific purposes only.

e) Right to object

In certain circumstances, you may have the right at any time to object to our processing of your personal data either for reasons associated with your particular situation or if your personal data is being processed for direct marketing purposes. It may be required that we no longer process your personal data.

In addition, you have the right to object at any time to the processing of personal data relating to you, if your personal data is being processed for direct marketing purposes, including profiling to the extent that this is related to direct marketing. In such a case, your personal data will no longer be processed by us for such purposes.

If you wish to exercise your rights in respect of Public Art Norway, please contact our data protection officer, Anne Christine Schjetne.