About This Privacy Statement
This privacy statement describes how the Norwegian School of Sport Sciences (NIH) handles your personal data in the Studentweb system. It explains which personal data are processed, how they are processed, who is responsible, your rights, and who you can contact.
What Are Personal Data?
Personal data include all types of data, information, or assessments that can be linked to you as an individual. Information that cannot identify a person on its own may still be personal data when combined with other information that indirectly identifies an individual.
About Studentweb
Studentweb is a web application that allows you as a student to perform a number of study‑administrative tasks, such as semester registration and registering for teaching and exams. Studentweb also gives you access to information that NIH has stored about you in the study administration system Felles Studentsystem (FS), such as contact information, exam results, and what has been reported to Lånekassen.
Data in FS are reported to various external parties in different contexts. See the FS privacy statement for more information.
Purpose of Processing Personal Data in Studentweb
The purpose of processing personal data in Studentweb is to allow you to administer your studies at NIH.
Legal Basis
Processing of personal data is necessary to fulfil and comply with the Universities and University Colleges Act. Processing also takes place so that NIH can safeguard your interests as a student in the best possible way. Some processing, such as approval of teaching and exam registrations, is an exercise of public authority.
The processing is authorized under:
Universities and University Colleges Act §2‑8
Personal Data Act §6(1)(c), legal obligation
Personal Data Processed in Studentweb
The following personal data may be processed in Studentweb:
Profile information such as your name, national identity number/D‑number/S‑number (11 digits), gender, contact information, background information, mother tongue, photo
Application information
Consents you have given
Police certificate where relevant
Semester registration information
Billing information
Information about your studies and courses
Sources of Personal Data
Registrations you make yourself
It is voluntary to register personal data in Studentweb, but without your personal data we may be unable to process your applications. In Studentweb you may register information related to applications for studies, teaching and exam registrations, applications for approval, and documents you upload. These data may be necessary for processing your applications and for you to study at NIH.
Registrations by case officers or teaching staff
In some cases, NIH staff must register information about you related to your studies. Examples include assessments related to admission applications, explanations and appeals of grades, and registrations related to completion of studies. These data are sent to Studentweb only so that you may view them.
Storage Period
Personal data registered in Studentweb are transferred to the study administration system FS. Personal data in FS are generally stored indefinitely. See the FS privacy statement for more information.
Automated Processing
When you use Studentweb at NIH, several processes related to your student status are performed partially or fully automatically. These include:
Calculation of which courses you may register for
Registration for teaching and exams
Creation of invoices
Explanations and appeals related to exams
Various approval applications
Disclosure of Personal Data
Disclosure or export of data means any transfer of data outside the system itself or to someone acting on your behalf. NIH may disclose or export data containing personal information to other systems when necessary. Your personal data are not transferred to countries outside the EU/EEA or to international organizations.
Your personal data may be disclosed to:
Sikt – Norwegian Agency for Shared Services in Education and Research
Personal data registered in Studentweb are transferred to FS. Both Studentweb and FS are developed and operated by Sikt. Employees who require access for their work may access your personal data to provide user support and correct errors.
Feide
You may log in to Studentweb using Feide. Employees who require access for their work may access your Feide name and IP address for support and troubleshooting. Personal data stored by Feide are deleted after six months.
Digitaliseringsdirektoratet (Digdir)
You may log in using MinID, BankID, Buypass, or Commfides via ID‑porten. Digdir is the data controller for personal data processed in ID‑porten and for data used to administer MinID. Employees may access your national identity number, contact information, and limited login history when needed for support or troubleshooting.
The providers of electronic IDs (BankID, Buypass, Commfides) are data controllers for the personal data necessary to administer their login solutions.
Security of Personal Data
NIH conducts regular risk and vulnerability analyses to ensure the security of your personal data in Studentweb. Access controls and other security measures are in place to prevent unnecessary access to your data.
Your Rights
You have rights to access, correction, and deletion of your personal data. You also have the right to complain about the processing of your personal data.
Contact
Data Controller
The Managing Director of NIH is the data controller for personal data in Studentweb. The system is managed internally by the Academic Affairs Office.
To exercise your rights, contact: ses@nih.no
NIH will respond without undue delay and no later than 30 days.
Data Protection Officer
NIH has a Data Protection Officer who safeguards the privacy interests of students and employees. Since April 2024, NIH has used Sikt’s Data Protection Officer service.
Email: personvernombud@nih.no