Processing of Personal Data About You as a Student
This document describes how NIH processes personal data related to your studies. For more detailed information about processing in specific student administration systems, see the individual privacy statements.
Purpose and Legal Basis for Processing Personal Data
To enable you to study at NIH, we must process your personal data for study‑administrative purposes. This includes admission, exam registration, student exchange, issuing diplomas and transcripts, and other administrative tasks.
The types of information we process include:
- Name
- National identity number
- Contact information (address and phone number)
- Your cohort
- Study programme
- Grades
- Leave of absence and similar information
We collect this information from your application documents, data you register yourself in Studentweb or SøknadsWeb, exam records, and through ordinary administrative work.
Legal basis for processing of personal data:
Our legal basis for processing your personal data is found in:
- The Universities and University Colleges Act (UH‑loven) § 4‑15
- The General Data Protection Regulation (GDPR) Article 6(1)(a), (b), (c), or (e), cf. Article 6(3)(b)
- GDPR Article 9(2)(g)
Processing may be necessary for NIH to exercise public authority, such as approving course and exam registrations, and to comply with legal obligations under the Universities and University Colleges Act. In some cases, we also supplement the legal basis with consent declarations. Processing is also necessary for NIH to fulfil its agreement with you as a student.
NIH does not publish information about individual students on its website.
Student name lists are generally not shared with external parties. If a measure aligns with NIH’s objectives, student privacy must be considered before any address lists are shared externally.
Your Rights
Read more about your right to information, rectification, erasure and right to object/complain.
Data Controller
NIH is the data controller for personal data collected and processed at the institution, in accordance with GDPR Article 4(7).
The Managing Director holds overall responsibility. Day‑to‑day responsibility is delegated to line managers. For students, this is the Director of Academic Affairs.
Contact Information
Contact NIH – Students
Bachelor’s and Master’s students should first contact the Academic Affairs Office: ses@nih.no
Other students may contact: videre@nih.no
Data Protection Officer
NIH has a Data Protection Officer who safeguards the privacy interests of students, employees, and research participants. If you do not receive the assistance you need from the data controller, you may contact: personvernombud@nih.no
The Norwegian Data Protection Authority
You have the right to lodge a complaint with the Norwegian Data Protection Authority regarding the processing of your personal data. See more on the Data Protectioin Authority’s website about your rights.(in Norwegian)