About This Privacy Statement
This privacy statement describes how the Norwegian School of Sport Sciences (NIH) handles your personal data in Canvas. It explains which personal data are processed, how they are processed, who is responsible, your rights, and who you can contact.
What Are Personal Data?
Personal data include all types of data, information, or assessments that can be linked to you as an individual. Information that cannot identify a person on its own may still be personal data when combined with other information that indirectly identifies an individual.
Purpose of Processing Personal Data in Canvas
The purpose of processing personal data in Canvas is to ensure the administration and delivery of teaching, examinations, and student assignment work. Canvas is also used to provide academic feedback from teaching staff and to facilitate communication between students through messages, notifications, and e‑learning tools.
Legal Basis
Processing in Canvas is necessary for NIH to fulfil its tasks and obligations under the Universities and University Colleges Act.
Personal Data Processed in Canvas
Canvas contains several categories of personal data related to teaching and study administration. Typical data include:
- Login information such as name and role
- Data retrieved from the Common Student System (FS), including name, email, course and programme affiliation, and location code
- Student submissions and timestamps
- Individual feedback from academic staff
- Forum posts
- Messages and notifications
- Sensitive personal data are generally not processed in Canvas, but may appear in student submissions.
Sources of Personal Data
Some personal data are retrieved from the Common Student System (FS). Most data in Canvas are registered and managed by the users themselves. Personal data in Canvas are required for being a student at NIH and are not based on consent.
Storage Period
Data in Canvas are deleted when the student is no longer enrolled at NIH.
Disclosure of Personal Data
Some information in Canvas, such as student number and assignment submissions, may be disclosed to the plagiarism detection system Urkund. Students may also set up integrations with Google or Office 365, but NIH does not transfer personal data to these systems.
Security of Personal Data
Your data are accessible only to you and to academic staff who have tasks related to your studies.
Your Rights
Contact Information
Data Controller
The Norwegian School of Sport Sciences is the data controller for personal data in Canvas. The system is managed internally by the Academic Affairs Office.
To exercise your rights, contact: ses@nih.no
NIH will respond without undue delay and no later than 30 days.
Data Protection Officer
Sikt – Personvernombudstjeneste serves as the Data Protection Officer for NIH.
Email: personvernombud@nih.no