About This Privacy Statement
This privacy statement describes how the Norwegian School of Sport Sciences (NIH) handles your personal data in the Student ID App. It explains which personal data are processed, how they are processed, who is responsible, your rights, and who you can contact.
What Are Personal Data?
Personal data include all types of data, information, or assessments that can be linked to you as an individual. Information that cannot identify a person on its own may still be personal data when combined with other information that indirectly identifies an individual.
Purpose of Processing Personal Data in the Student ID App
The purpose of processing personal data in the Student ID App is to allow you to download your personal semester receipt in digital form. This enables you to document your valid student status whenever required. The app functions as a digital student ID at student welfare organizations, public transport companies, and other services in Norway.
Legal Basis
The legal basis for processing personal data in the Student ID App is GDPR Article 6(1)(c), cf. Article 6(3)(b), use determined by law.
Personal Data Processed in the Student ID App
The Student ID App displays:
- your name
- your institution (NIH)
- whether you have paid the semester fee
- whether you are registered for the current semester
- your student photo (the same photo used for your student card)
- These data are retrieved from:
- Felles Studentsystem (FS)
- FEIDE
The data are stored locally on your phone, and you may delete them at any time. Use of the app is voluntary. If you do not wish to use it, you may use your physical student card instead.
- European Student Card (ESC)
If you have consented to using the European Student Card, you may allow the mobile student ID to share the following information with the EU service ESC-router:
- your European Student Identifier (ESI)
- your institution
- the expiry date of your student ID
- your email address
Automated Decision-Making
Your personal data are not subject to automated decision-making or profiling.
Disclosure of Personal Data to Others
Disclosure or export of data means any transfer of data outside the system itself or to someone acting on your behalf. NIH may disclose personal data to external systems when necessary. Your personal data are not transferred outside the EU or EEA.
Your personal data may be disclosed to:
- Sikt – Norwegian Agency for Shared Services in Education and Research
Sikt provides the Student ID App. Employees who require access for their work may access your personal data and activity data in the app to provide user support and correct errors.
- FEIDE
If you log in using FEIDE, employees who require access for their work may access your FEIDE name and IP address for support and troubleshooting. Personal data stored by FEIDE are deleted after six months.
Security of Personal Data
All data transfers to the app are encrypted. Sikt performs regular risk and vulnerability analyses and ongoing security testing of the app.
Your Rights
Read more about your right to information, rectification, erasure and right to object/complain.
Contact Information
Data Controller
The Norwegian School of Sport Sciences is the data controller for personal data in the Student ID App. The system is managed internally by the Academic Affairs Office.
To exercise your rights, contact: ses@nih.no
NIH will respond without undue delay and no later than 30 days.
Data Protection Officer
NIH’s Data Protection Officer (via Sikt) safeguards the privacy interests of students and employees.
Email: personvernombud@nih.no