Right to Information and Access
You have the right to receive information about how NIH processes your personal data. You also have the right to view and access all personal data registered about you at NIH. If you wish, you may request a copy of your personal data.
Right to Rectification
You have the right to have incorrect personal data about you corrected. You also have the right to have incomplete personal data supplemented. If you believe NIH has registered inaccurate or incomplete information about you, you should contact us and explain why, and if possible, provide documentation.
Right to Restrict Processing
In certain situations, you may request that the processing of your personal data be restricted. Restriction means that the data will still be stored, but further processing will be limited.
You may request temporary restriction if:
- you believe the data are inaccurate or incomplete
- you have submitted an objection to the processing
Processing will then be restricted until NIH has corrected the data or assessed whether your objection is justified.
You may also request a more permanent restriction. The conditions for this are set out in the Personal Data Act and GDPR Article 18. NIH will assess whether the legal requirements are met.
Right to Erasure
In some cases, you may request that NIH delete your personal data. This right is not absolute and must be assessed in light of applicable privacy legislation. If you request deletion, you should explain why and, if possible, specify which data you want removed. NIH will then assess whether the legal conditions for erasure are met.
NIH may refuse deletion when data must be stored to:
- fulfil obligations under the Universities and University Colleges Act
- safeguard important societal interests such as archiving, research, or statistics
Right to Object
You may object to the processing of your personal data if you have a particular need to stop the processing, for example if you have a protection requirement or a confidential address. The right to object depends on the legal basis for the processing and whether you have a special need. The conditions are set out in GDPR Article 21.
If you submit an objection, NIH will assess whether the conditions are met. If your objection is justified, NIH will stop the processing, and you may also request deletion of the data, subject to legal exceptions.
Right to Complain About the Processing
If you believe NIH has processed your personal data incorrectly or unlawfully, or if you believe NIH has not fulfilled your rights, you may submit a complaint to NIH. If NIH does not uphold your complaint, you may bring the matter to the Norwegian Data Protection Authority, which oversees compliance with the Personal Data Act and GDPR.
Contact details
Data Controller
The Norwegian School of Sport Sciences is the data controller for students’ personal data. The system is managed internally by the Academic Affairs Office.
To exercise your rights, contact: ses@nih.no
NIH will respond without undue delay and no later than 30 days.
Data Protection Officer
Sikt – Personvernombudstjeneste serves as the Data Protection Officer for NIH and safeguards the privacy interests of students, employees, and research participants.
Email: personvernombud@nih.no