Web based processing of personal data
This privacy policy applies to the Data Controller Web Pages, which are collated on www.siø.no.
The Data Controller Student Welfare Organisation in Østfold, in the person of the general manager, is the data controller for the organisation’s personal data.
Other services provided by data controllers are regulated by separate data processor agreements. Contact us for further information about the terms and conditions that apply to other student services.
Explanation
Personal data are information and assessments that can be linked to an identifiable individual. For example, this could be names and contact information, email addresses, IP addresses, images, behavioural patterns, purchase history or information about interests.
The data controller is the person who determines the purpose behind the processing of personal data and which tools will be used.
Processing means all processing of personal data or use of personal data, such as registration, collation, storage and disclosure.
Internal control is the planned and systematic management system that organisations establish to identify breaches of the applicable regulations.
What personal data are used for:
The personal data are used for:
- Catering: Delivery and vouchers based on orders. Must be archived for 10 years ref. the Norwegian Accounting Act.
- Advice & Health: Uses personal data to get in touch with students who want to be contacted regarding guidance and courses. Stores contact information and other relevant data that is registered when booking appointments and during the first conversation in PsykBase. Information in PsykBase is stored for 10 years, cf. the Norwegian Public Health Act.
We will only contact you on the basis of a legitimate interest and information you have given us voluntarily. We do not obtain information for this purpose from third parties.
The legal basis for the purpose is our legitimate interest in being able to offer, further develop and run our student services.
What personal data are processed:
Depending on the information you have given us, how you use our services
and the consents you have given us, we hold the following information about you:
name, address, student number, campus/faculty, study programme, email address, phone number and national identification number.
We collect information from:
Statistics
The Student Welfare Organisation in Østfold (SiØ) collects de-identified data about visitors to www.siø.no. This is done to produce statistics that we use to improve and refine the information provided on the website. Examples of the answers statistics provide us with include how many users visit the various pages, how long visits last, which websites the users come from and which web browsers are used.
Website forms
The web pages use various forms that register different data depending on the information the user wants to obtain and how users want to use our services.
Cookies:
Cookies are small text files that are placed on your computer when you load a web page. www.siø.no collects data for the following systems: Destinet CMS. Statistics, pages visited, downloaded documents and user purchases.
Google Analytics. Statistics, user purchases, behaviour and target groups (segments)
Cookies can be managed as follows: https://nettvett.no/slik-administrer-du-informasjonskapsler/
Visitors to the web pages choose whether to provide personal data in connection with services, for example by using the web pages’ forms. The legal basis for the processing is the consent given by the individual visitor, unless otherwise is specified.
Who we share personal data with:
We share personal data with companies that deliver technical and administrative services to the Student Welfare Organisation in Østfold (SiØ).
Leonberg is SiØ’s data processor and our service provider when it comes to developing and maintaining the website.
Destino is a subcontractor of Leonberg used for the development, operation and maintenance of Destinet CMS software. A separate data processor agreement between SiØ and Leonberg regulates the information to which the service provider has access and how it is processed. The website is stored on dedicated servers operated by Destino. Only Leonberg and Destino have access to the data collected.
PsykBase’s system, which is a journal system for psychiatrists and psychologists in private and public adult psychiatric outpatient clinics. The system is provided and operated by ASPIT.
How long we store personal data:
We only store your information for as long as we need to in order to fulfil the purpose for which it was collected, or if we are legally required to store the information. The information will be deleted or anonymised when it is no longer required to fulfil the purpose. An overview of how long we store your data is provided below:
- Forms on web pages: Forms store your information on our web pages for up to 60 days.
- Advice & Health: Health support is stored in PsykBase’s system for up to 10 years, ref. the Norwegian Act on Health Registration and Processing of Health Data (Health Register Act).
- Catering: Delivery and vouchers based on orders. Must be archived for 10 years ref. the Norwegian Accounting Act.
Your rights
Anyone who asks is entitled to receive basic information about the processing of personal data in an organisation pursuant to section 18, paragraph 1 of the Norwegian Personal Data Act. SiØ has provided this information in this policy and will refer people to it in the event of any enquiries. The people registered in one of SiØ’s systems are entitled to access their own data. You have the right to ask us to:
- Provide you with a copy of the personal data we hold about you.
- Update your personal data.
- Delete data we no longer have a legal basis for storing.
- Limit or cease the processing of your data.
- Provide you with the data you have given us in a structured, commonly used and machine-readable format, or, where this is technically possible, ask us to transfer the data to another organisation.
- Withdraw any consents you have given us.
If you believe we are processing your personal data contrary to the Norwegian Personal Data Act, you have the right to complain to the Norwegian Data Protection Authority. However, before doing this, we ask that you please contact SiØ so we can answer your questions or clear up any misunderstandings.
Changes to the privacy policy.
We may make changes to the privacy policy from time to time. You will be notified about any material changes. You will always find the latest version of our privacy policy on the website.
Contact information
Use the following contact information if you want to get in touch with us.
Asbjørn Lie Waula (Head of Communications)
email:
alw@hiof.no
Address: Postboks 700, 1757 Halden, Norway