Introduction

This privacy policy describes what personal data the 22 July Centre collects, how long it is stored and what it is used for. The 22 July Centre is the data controller processing your personal data for specified purposes. As the data controller, the 22 July Centre is responsible for ensuring that the use of your personal data is done in a lawful and secure manner.

Vocabulary

Personal data is any information about an identified or identifiable physical person, while processing includes any use of this. The data protection regulations generally apply to all processing of personal data carried out using electronic means or forming part of a filing system.

Data processing is any operation carried out with personal data. This includes, among other things, collection, registration, processing, storage, deletion, etc.

The data controller is the organisation that is responsible for ensuring that the processing of personal data is carried out in a lawful manner, determining the purposes for which the personal data is to be used and the means to be employed.

Personal data shall only be used for specific, explicitly stated and legitimatepurposes.

The data processor is the organisation that processes personal data on behalf of the data controller.

A Data Processor Agreement is an agreement between the data processor and the controller which sets out how personal data should be processed and for what purpose. Data Processor Agreements ensure that the chain of responsibility is clear to all those acting as data processors for 22 July Centre.

Every processing of personal data must be based on a legal basis. The processing is only lawful if:

  • The data subject has consented to the processing of their personal data for a specific purpose.
  • The processing of personal data is necessary for the performance of an agreement to which the data subject is a party.
  • The processing is necessary to comply with a legal obligation to which the controller is subject.
  • The processing is necessary to protect the vital interestsof the data subject.
  • It is necessary to carry out a task in the public interest or exercise official authority as the controller is obliged to do.
  • The processing of personal data is necessary for purposes related to the legitimate interests pursued by the controller or a third party, unless the interests or fundamental freedoms of the data subject requiring protection of personal data override those interests.

  1. Where does the 22 July Centre collect your personal data?

1.1 When you visit the 22 July Centre's website, cookies are stored on your device. A device is for example your computer or mobile phone. Cookies are small text files that are stored locally on the device and that make it possible to collect data about the use of our websites. To read more about how we process your personal data using cookies, read our Cookies Statement.

1.2 When you visit and interact with the 22 July Centre's Facebook page and Instagram account. The 22July Centre has a joint responsibility with Facebook for the processing of personal data that takes place on the Facebook page and Instagram account.

1.3 The 22 July Centre collects personal data from you directly when you book visits to our premises, register for participation in our education programs and/or exhibitions.

1.4 When people with a connection to 22 July share their stories and/or submit cultural historical material, the 22 July Centre may in certain cases process personal data if this is necessary.

1.5 Surveillance cameras have been installed in the premises of the 22 July Centre to prevent and investigate criminal offences, as well as to ensure the safety of our employees.

1.6 When you apply for a position at the 22 July Centre, we will process your personal data.

2. Processing of personal data, purpose, storage time and legal basis

2.1 Improving our website

When you visit our website, your behaviour is tracked and used as statistics. This is so that we can analyse how our website is used and how it can be improved. For this purpose, we collect the following information: IP addresses, IPs geographical location, information about the pages viewed and the files downloaded, page viewing duration, date and time, information about the browser and screen resolution. The information is anonymised before it is included in the statistics. The 22 July Centre has entered into a data processor agreement with the supplier of the system that enables the collection and presentation of web statistics. Our legal basis for this processing is your consent to track your behaviour in order to create statistics to improve our website.

You can withdraw your consent at any time by manually deleting the cookies. When you manually delete the cookies from your browser, which you have previously consented to, we will no longer be able to track your activity. You should then get the cookie banner again the next time you enter the website. If you choose No thanks at the cookie banner, we will not track your activity.

If you require guidance on deleting cookies, please submit a request to the centre's Data Protection Officer. You can find the contact information for the Data Protection Officer at the bottom of this page.

2.2 Facebook-page

2.2.1 Disseminating knowledge about 22 July

When you visit and interact with the 22 July Centre's Facebook page and Instagram account, personal data is collected in the following cases:

  • When you post in the comment field of posts
  • Use of the page (using "likes" and "reactions")
  • When individuals share posts from the centre's account
  • When individuals send queries to the 22 July Centre via Messenger

The legal basis for this data processing is the 22 July Centre's legitimate interest in informing the public about 22 July, disseminating knowledge, and countering conspiracy theories and extremism.

2.2.2 Publishing of images, video, and/or text containing personal information

When we publish your personal information on our Facebook page or Instagram account in the form of images, video and/or text, it will be based on your consent.

2.2.3 Insight into how users interact with the Facebook page

When individuals interact with the Facebook page, Facebook uses an analytics tool to produce insight. The 22 July Centre uses the following information for statistical purposes:

  • Maintain statistics on followers of the Facebook page (used to assess which demographics we reach out to, this includes information related to gender, age, region, etc.)’
  • Individuals who react to or "like" the posts on the page (used to assess what kind of content produces the most "likes").
  • Comments on posts are used in qualitative feedback to assessments of content.

The 22 July Centre has a legitimate interest in being able to report on the use of the Facebook page for assessing what kind of content generates likes and engagement/achievement.

2.2.4 Promoting the 22 July Centre through Facebook/Instagram

To promote events, exhibitions and/or the 22July Centre generally speaking, we use a segmentation service from Facebook/Instagram, which means that people with an active Facebook or Instagram account can receive ads in their Facebook or Instagram feed. The 22 July Centre can set criteria for which target groups should receive the ads. This can for example be those who are followers of the 22 July Centre or people who are in a given age group, region, gender and/or registered profession.


The 22 July Centre has a legitimate interest in being able to promote events, exhibitions, stories, etc. to users on Facebook and Instagram. We will not have access to who meets the criteria and thus receives the ads except in what concerns followers of the 22 July Centre's accounts on social media. If you wish to read more about how ad preferences work at Facebook and how you can minimise this, click here.

If you have a Facebook account, you can change your settings here.

2.3 Visiting the 22 July Centre's premises

When you book a visit, and/or participation in educational programs or lectures at the 22 July Centre through our booking system, we register the following information: name, telephone number, e-mail address, IP address and type of browser. If you are employed at a school and are taking school classes, information about the school is also registered.

The legal basis for this processing is based on your consent. The personal data associated with your registration will be deleted one year after the order. We have entered into a data processing agreement with the supplier of the booking system. 22 July Centre keeps anonymous statistics on the number of participants in the training, which schools or groups, and their geographical area.

2.4 Answering enquiries

When you send an enquiry to the 22 July Centre, we will process your information in order to answer it. We will also assess whether the enquiry needs to be filed. If this is the case, we will file the enquiry in accordance with the rules of the Archival Act and the archiving regulations. The processing of your information in connection with the filing of enquiries is our legal obligation under the Archival Act. The processing of your information in connection with the archiving of enquiries is our legal obligation in accordance with the Archival Act.

2.5 Storage, dissemination and publication of stories from witnesses, affected persons and other persons with a connection to 22 July

The 22 July Centre's mission is to disseminate memory and knowledge of the terror attack of 22 July 2011. To disseminate individual stories and preserve cultural historical material, it will in some cases be necessary to process personal data. This includes, among other things, information related to: name, age, date of birth, contact information, images, audio recordings and/or special categories of personal data (e.g. ethnicity, religion, political opinion, philosophical belief and health information).

This data processing is based on your consent, and will not be stored for longer than necessary. You can withdraw your consent at any time, and the personal information will then be anonymised. Consent will be renewed every tenth year, and if you do not renew your consent, your personal information will be anonymised. The 22 July Centre has entered into a data processor agreement with the supplier of the administrative system where the information is stored. If the personal information is to be used for research purposes, a new consent will be obtained for this.

2.6 Educational purpose - witnesses

To facilitate the participation of those with a connection to the 22 July in educational activities, exhibitions or other events, the 22 July Centre will process personal data to administer and facilitate their participation. This includes processing information related to names, contact details, information about each individual's history in preparation for teaching, and account numbers for payment of fees and expenses.

This data processing is necessary for the 22 July Centre to fulfil a contract with the individual taking part in the tuition.

2.7 CCTV

In the premises of the 22 July Centre, surveillance cameras have been installed for taking pictures. The surveillance cameras are used to prevent, investigate criminal offences and ensure the safety of the staff.

The legal basis for this processing is the 22 July Centre's legitimate interest in ensuring the safety of the staff, as well as preventing and investigating criminal offences. The pictures are stored for seven days at the Norwegian Government Security and Service Organisation (DSS), which is the data processor for the 22 July Centre. DSS is responsible for ensuring the security of the government quarter.

2.8 Jobseekers

When applying for a job at the 22 July Centre, we process personal data to assess your application. This includes your CV, application letter and references. The 22 July Centre uses Jobbnorge as its recruitment system. All applications in the recruitment system will be deleted 12 months after the recruitment process is completed. Access to both the recruitment system and the hiring cases in the archive system is limited to official need.


The processing of data is necessary to fulfil a contract that the data subject is a party of,or to take measures at the data subject's request before signing the contract. If your application contains special categories of personal data, the legal basis for the processing is necessary so that the 22 July Centre is able to fulfil its obligations and exercise special rights in the field of labour law, as well as to assess an employee's work capacity.

3. Receivers of personal data and access to information under the Freedom of Information Act

The 22 July Centre does not disclose your personal data unless there is a legal basis for doing so. Examples of legal basis may include that the disclosure is necessary to fulfil a contract or a legal obligation to provide information.

The 22 July Centre is under the Archival Act (Act of 4 December 1992 No. 126) obliged to keep a public record. The record shall contain all correspondence to and from the 22 July Centre. The following information will generally be available from the public record: sender's name, recipient's name, date of document and a brief description of the document's content. The record is kept in such a way that it does not reveal confidential information. Anyone who wishes to can request access to the 22 July Centre's case documents under the Freedom of Information Act. When requesting access, personal data is disclosed in accordance with the Freedom of Information Act and the Administrative Procedures Act.

4. Where in the world are your personal data stored?

All personal data we use is stored only in countries within the EU/EEA area.

5. Your rights

Below you will find an overview of your rights, what they entail and how you can exercise them. If you have any questions about the processing of your personal data and rights, you can contact the 22 July Centre's Data Protection Officer. You are entitled to a response without undue delay, and no later than 30 days.

5.1 Withdrawal of Consent

If you have given your consent for the 22 July Centre to process your personal data, you can withdraw it at any time.

5.2 Access to your own Personal Data

You have the right to access the personal data that the 22 July Centre processes about you.

5.3 Rectification of Personal Data

If you believe the personal data being processed is incorrect or incomplete, you can request that it be rectified or supplemented.

5.4 Erasure of Personal Data

In certain cases, you may request that personal data about you is erased. This is sometimes referred to as the "right to be forgotten".

5.5 Right to Data Portability

If the processing of your personal data is based on your consent or the fulfilment of a contract you have entered with the 22 July Centre, you have the right to request that your data be delivered in a machine-readable structured format so that it can be easily transferred to another business. You can also ask the 22 July Centre to deliver the information to another business.

5.6 Right to Restriction

In certain cases, you have the right to restrict our processing of your personal data. This means that your personal data will only be stored, but not used for anything. This right applies particularly in cases where you do not want your information to be deleted as it may be necessary for you to use, such as in a future legal dispute.

If you wish to contact us, you can contact our Data Protection Officer:

Contact Person: Bjørg Kristine Michalak-Paulsen

Telephone Number: 93 07 68 58

Email Address: bjmi@22julisenteret.no