As a data subject, you are entitled to information on how Nord University processes your personal data. You also have a number of other rights that are listed below.
If you wish to make use of your rights, have any questions or need advice regarding the processing of personal data at Nord, please contact behandlingsansvarlig@nord.no. We will deal with your inquiry without unnecessary delay, and no later than within 30 days.
When you contact us, you will be asked to verify your identity. We do this to ensure that unauthorized persons do not gain access to your personal data. You may also be asked to provide additional information.
Right of access
You are entitled to see/gain access to any personal data recorded about you at Nord University. You are also entitled to receive a copy of the personal data recorded on you, if you so desire. In some electronic solutions (e.g., StudentWeb and CRIStin) you can yourself see what we have registered about you, and are also allowed to change some of the data.
Right to withdraw consent
If we process data about you based on your consent, you can withdraw your consent at any time. The simplest way to do this is to contact directly the department/unit that obtained your consent. You can also contact the data controller.
Right of correction
You have the right to have incorrect personal data about yourself corrected. You also have the right to have incomplete personal data about yourself supplemented. If you believe we have registered incorrect or incomplete personal data about you, please contact us. It is important that you state the reasons and, if appropriate, document why you believe that the personal data is incorrect or incomplete.
Right to limited processing
In certain cases you may be entitled to require that the processing of your personal data should be limited. Limitation of personal data means that your personal data will still be stored, but that the possibilities for further use and processing will be limited.
If you believe that your personal data is incorrect or incomplete, or you have protested against the processing, then you are entitled to require that your personal data should be temporarily limited. That means that processing will be limited until we have either corrected your personal data, or have been able to assess whether your protest is justified. In other cases, you may also require a more permanent limitation of your personal data. In order to be entitled to require the limitation of your personal data, the terms of GDPR’s article 18 must be met. If we receive a request from you about limiting personal data, we will consider whether the terms of the law are being met.
Right to erasure
In certain cases, you can require that we delete personal data about you. The right to erasure is not an unconditional right, and whether or not you have the right to erasure must be considered in the light of the Personal Data Act and the Privacy Protection Regulation. If you wish to have your personal data deleted, please contact us. It is important that you state the reason why you want your persona data to be deleted, and if possible, what personal data you would like to have deleted. We will then consider whether the legal conditions for requiring erasure are met. Please note that, in some cases, legislation allows us to make exceptions to the right to erasure. For example, this would be the case when we are obliged to store your personal data to fulfil a task that is required by the University- and University College Act, or to safeguard important societal interests such as archiving, research and statistics.
The right to protest
You may have the right to present an objection to the processing, i.e. to protest against the processing, if you have a special need for the processing of your personal data to be stopped. Examples might be if you have a need for protection, a secret address, or the like. The right to protest is not an unconditional right, and it depends on the legal basis for the processing, and whether you have a special need. If you protest against the processing, we will consider whether the conditions for the protest are met. If we determine that you have the right to object to the processing, and that the objection is justified, we will stop the processing and you will then be able to require that the data should be erased. However, please note that in certain cases we would not be allowed to erase your data. This could be the case, for example, when we are obliged to store your personal data to fulfil a task that is required by the University- and University College Act, or to safeguard important societal interests such as archiving, research and statistics.
Right to object to the processing
If you believe we have not processed your personal data in a correct and lawful manner, or if you believe that we have failed to fulfil your rights, you have the possibility to object to the processing.
If we do not accept your objection, you have the possibility to present your objection to the Norwegian Data Protection Authority. The Data Protection Authority is responsible for verifying that Norwegian enterprises comply with the provisions of the Personal Data Act and the GDPR regulations for the processing of personal data.