Your personal data can be collected from:
1. Yourself via the Applicant Portal in Samordna opptak
2. Yourself via Søknadsweb
3. Yourself via EVUweb
4. Yourself via Studentweb
5. Socialboards
6. Social media
7. National Diploma Database (NVB)
8. Other Universities/Colleges
9. Contact- and Reservation Register
10. Other people who registrate you in EVUweb
11. Other people who registrate you in Nomination
12. Executive officers at Nord University
13. Teaching at Nord University
14. The Central Public Registry (National Population Register)
15. Norwegian State Educational Loan Fund
16. Digital Exam System
17. Fagpersonweb
18. User Administrative system
19. The institution’s economy system
20. CRIStin (Current Research information system in Norway)

Voluntary registrations
1. Yourself via the Applicant Portal in Samordna opptak
2. Yourself via Søknadsweb
3. Yourself via EVUweb
4. Yourself via Studentweb
5. Socialboards
6. Social media

1.-4. It is voluntary for you to record personal data in Samordna opptak, the application portals Søknadsweb, EVUweb and Studentweb, but without your personal data, we may not be able to process your applications. In the application portal of Samorda opptak, Søknadsweb and EVUweb, you can record information about yourself related to applications for study/course registrations. In Studentweb you can record information on yourself related to applications for programmes of study, information on your background, registration for education and exams, applications, documents you upload. This data may be necessary in order for us to process your applications and for you to be able to study at Nord University. 

5.-6. Submitting any personal data to us via social media or the chat feature on our website is done on a voluntary basis. Nord University has a data processing agreement in place with Socialboards in relation to the delivery of the chat service. Any personal data that you provide via the chat feature will be processed in accordance with GDPR and will be deleted within 12 months. You should not submit any sensitive data to us via the chat feature or social media.

7. National Diploma Database (NVB)
If you apply for admission to Nord University via Søknadsweb, you can consent to us collecting your personal data from the National Diploma database. The National Diploma database contains most electronic diplomas from upper secondary schools issued in the year 2000 or later. If you give your consent, we collect your name, your identity number (11 digits), the names of schools, subjects and grades.

8. Other Universities/University Colleges
A) Have you achieved results at other educational institutions in Norway?
If you are applying for admission to Nord University and have achieved results at another university/college that also uses FS, you can consent to the exchange of results. If you give your consent, an executive officer can collect all of your results from all institutions in Norway that use FS. In practice, this means most universities and university colleges in Norway, except for the Norwegian School of Business BI. We refer to your institution's Data Privacy Policy for more information regarding the processing of your personal data.
EMREX – results from universities/colleges outside Norway
If you have achieved results from a university/college outside Norway that participates in the EMREX cooperation, you can bring your results with you to Nord University. You can do this via Søknadsweb and Studentweb.
c) Registry of banned students (RUST)
If a Norwegian educational institution has decided to apply sanction(s) to you, that also affect your application-/student relationship with other Norwegian educational institutions (according to sections 3-7(8), 4-8(1) to (3) or (4)-10(3) of the University and University Colleges Act), Nord will receive personal data about you through RUST. Only a few selected people at Nord University will have access to these personal data. More information is available in the RUST Data Privacy Policy.

9. Contact- and Reservation Register (KORR)
FS can obtain your e-mail address and your mobile number from the Contact and Reservation Register (KORR). If you do not want anyone to be able to obtain your contact information from KORR, you may opt out of this in KORR. You can find more information on the website of the Agency for Public Management and eGovernment.

Registrations made without your explicit consent
7. National Diploma Database (NVB)
If you apply for admission to Nord University via Samordna opptak, we will collect your personal data from the National Diploma Database. The National Diploma database contains most electronic diplomas from upper secondary schools issued in the year 2000 or later. We can then collect your name, your identity number (11 digits), the names of schools, subjects and grades.

10. Other people who registrate you in EVUweb
In some cases, employers and others register information about you in EVUweb. This usually happens if you are to follow a programme of study or participate in continuing/further education at Nord University on behalf of your employer. This information may be required in order for us to process an application/enrolment for admission to a programme of study/course.

11. Other people who registrate you in Nomination
Nomination is a web application whereby external institutions can nominate exchange students for admission to Norwegian educational institutions. If you have been nominated in Nomination, you will have already been informed of this by e-mail. The following personal data is registered in Nomination and is then transferred to FS: first- and last name, gender, e-mail address, date of birth, citizenship and what you are nominated for. The nominator can also upload any documents along with the nomination. Persons who have been nominated can view their personal data, and any documents, in Søknadsweb.

12. Executive officers at Nord University
In some cases it is necessary for executive officers at Nord University to record information on you associated with your studies. Examples of this might be assessments related to application for admission, reasons for- and appeal against examination results, registrations related to completion of studies. It might also be related to disciplinary matters, suitability assessments and adaptation issues.

13. Teaching at Nord University
Some of the teaching/tuition may be recorded or streamed.

14. The Norwegian National Population Register
In order for your name and address to be correctly registered in FS, we collect your name and address from the National Population Register.

15. Norwegian State Educational Loan Fund
The Norwegian State Educational Loan Fund sends Nord University lists of all its students who are registered as customers. They do this in order for us to know which persons’ personal data will be submitted to the Norwegian State Educational Loan Fund in connection with the payment of a loan. Please read point 8.6 further down.

16. Digital Exam System
More and more exams are being conducted in digital exam systems. Your exam results and an explanation of grades, which are recorded in the exam systems of subject teachers and external examiners, are sent to FS.

17. Fagpersonweb
As with the digital exam system, your exam results and an explanation of grades can also be recorded in Fagpersonweb. Fagpersonweb is a web application used by subject teachers and external examiners. In addition to exam results and an explanation of grades, attendance records can also be registered in Fagpersonweb. Your personal data that is recorded in Fagpersonweb, is sent to FS.

18. User Administrative system
In order for you to be given an IT account at  Nord University and to obtain access to our IT services, your personal data is recorded in our user administrative system. We register your name and your ID number (11 digits), where you are a student (Faculty/Department), all addresses, telephone numbers, e-mail addresses, student number.

19. Economy system
Payment of the Nord University term fee, course fees and other student fees are processed in Agresso. This means that the following personal data is sent from FS to Agresso: student number, personal name, customer group, all telephone numbers, all addresses, e-mail addresses and URL (web link) If you are registered with these.

20. CRIStin (Current Research information system in Norway)
If you are a research fellow and an employee of Nord University, the following personal data will be transferred from the HR system at Nord University to CRIStin:
• ID number
• Name
• Position
• Gender
• Age
• Faculty Affiliation
In addition, you can also yourself register your research in CRIStin.

Distribution or export of data is defined as any release of data other than to its own system/processing, or to the data subject itself or someone who receives data on its behalf.

Nord University can distribute or export data that contains personal data to other systems, i.e. to an external data processor, whenever it is deemed necessary.

As a general rule, personal data will not be transferred to countries outside the EU/EEA, or to certain international organisations. The exception is if you are a borrower at the University library. In this case, your personal data will be transferred to Israel via our subcontractor ExLibris GmbH. Israel is on the European Commission's list of approved countries with adequate data protection. Your personal data may also be exported to countries outside the EU/EEA in connection with an exchange stay.

Your personal data may be exported to the following parties/enterprises:

1. The Norwegian Directorate for ICT and Joint services in Higher Education and Research, Unit (Supplier of FS)
2. University Centre for Information Technology (USIT) at the University of Oslo (UiO) (operates FS)
3. The Student Welfare Organisation at Nord
4. Student organisations affiliated with Nord University
5. Nord University’s access control system
6. Computas (supplier of Studentbevisapp)
7. The Norwegian National Population Register
8. The Norwegian State Educational Loan Fund
9. Altran (supplier of BAS/user administrative system Active Directory Users and Computers) 
10. The archive system
11. Canvas (supplier of learning management system)
12. Inspera (supplier of digital exam system)
13. Urkund (supplier of plagiarism detection system)
14. TimeEdit (supplier of timetable system)
15. Kong Arthur (supplier of integration services to learning platform, timetable system)
16. One Voice (supplier of crisis management tool)
17. Other Universities/University Colleges
18. NOKUT- Norwegian Agency for Quality Assurance in Education
19. BIBSYS/other library system provider
20. Statistics Norway (SSB)
21. (NSD) The Norwegian Centre for Research Data, and (DBH) National Database for Higher Education Statistics in Norway  
22. (NIFU) Nordic Institute for Studies in Innovation, Research and Education
23. The Norwegian Directorate of Health
24. Other parties that are entitled to have access to your personal data according to the Freedom of Information Act
25. Internship locations - such as health enterprises, municipalities and other partners that offer internships
26. Internationalization (Exchange)
    
27. Facebook Custom Audience
    

Unit, The Norwegian Directorate for ICT and Joint Services in Higher Education and Research.
FS is developed by Unit. Employees of Unit who need access to your personal data in connection with their work.

University Center for Information Technology (USIT) at the University of Oslo (UiO)
FS is operated by USIT at UiO. Employees of USIT who need access to your personal data in connection with their work.

The Student Welfare Organisation at Nord
If you have paid the semester fee for the current semester, or have been awarded a place on a programme of study in the past two months, the Student Welfare Organisation at Nord can retrieve your personal data from Nord University. This is so that they can verify that you are a student, and that you are entitled to a student discount on the Student Welfare Organisation’s services. The Student Welfare Organisation can retrieve your ID number (11 digits), your name, when you last paid the semester fee and the ID on your student card.

Student organisations affiliated with Nord University
In connection with the start of studies and various events organised by the student organizations, we supply your name and your programme of study to student organizations.

Nord University’s access control system
Your personal data will be registered in the University's access control system in order for you to access the University’s buildings and rooms during your studies, using the student card. Students who want student cards can obtain photos from either the Service Centre or the photo booth. The photo on active student cards and key cards is stored in FS and the same photo is transferred to the mobile app Student I.D., for students who choose to use this.

Computas (supplier of the Student I.D. app)
If you are a student at Nord University, have registered for the semester and paid the semester fee, you can download the Student I.D. app. The app is proof that you are a student. Your personal data is only sent to the app when you log into the app with your Nord user name and password (Feide). The Student I.D. app shows your name, study location, and whether you have paid the semester fee and registered for the current semester. The app also shows the photo that Nord University has taken of you for use on your student card. You download the app and log in yourself, and you have control of who the digital student I.D. is shown to. You can choose whether to use the app or not.

The Norwegian National Population Register
Nord University sends the following personal data about you to the National Population Register: name, I.D. number (11 digits), and address. We do this once a year to ensure that your personal data is brought up to date.

The Norwegian State Educational Loan Fund
If you are a customer of the Norwegian State Educational Loan Fund, information about you will be submitted to them as soon as you are registered as a student. The following personal data will be transferred to the Norwegian State Educational Loan Fund once a day: I.D. number/D number (11 digits) and the University/University College to which you are admitted as a student.
If you have taken an exam and/or received prior approval of  foreign education or study abroad, your personal data will be sent to the Norwegian State Educational Loan Fund. The following personal data is transferred to the Norwegian State Educational Loan Fund once a day: I.D. number/D number (11 digits), at which University/University College you have taken the exam, your exam results (pass/fail/not graded, if passed: also your grades).
We transfer your personal data to the Norwegian State Educational Loan Fund so that you do not need to prove your student status and exams taken.

User Administrative System
In order for you to be given an IT account at  Nord University and to obtain access to our IT services, your personal data must be recorded in our user administrative system, Active Directory Users and Computers. In this connection, we send personal data, such as address information, photo, group affiliations, and information on registration for programmes of study and exams from FS to Active Directory Users and Computers.

Archiving system
If you have an application and/or decision process ongoing at Nord University, this will be recorded in the University's archiving system. The following personal data will be recorded:
- name
- address
- e-mail
- phone number
Documentation that is attached to applications is also stored here.

Canvas (supplier of learning management system)
At Nord University, Canvas is used in connection with teaching. This means that Canvas, which develops and operates Canvas will have access to the following personal data on you:
- name
- e-mail
- your courses and programme of study

Canvas also contains some of your submissions, individual feedback from the subject teacher, debate posts (forums) and various types of messages/alerts.

Digital Exam System
The Inspera assessment system is used for a number of exams at Nord University. In order for you to be able to take a digital exam, we will send some of your personal data to Inspera Assessment.  Inspera, which develops and operates Inspera Assessment will have access to the following
personal data on you: name

Plagiarism Detection System
At Nord University, the Urkund plagiarism detection system is used to detect cheating ("literary theft") in exams or compulsory assignments. The system will have access to the following personal data on you:
- name
- student number
- e--mail address

Timetable System
At Nord University, the TimeEdit timetable system is used to plan teaching and exams. TimeEdit, which develops and operates TimeEdit will have access to the following personal data on you:
- name
- e-mail
- phone number
- your courses, programme of study and your study location

Learning management system and timetable system integration services
In order to be able to use systems such as TimeEdit and Canvas, personal data is transferred from FS to these systems. Kong Arthur, which develops and operates such integration services that transfer data between systems ,will have access to your personal data.

Crisis and Emergency Preparedness
At Nord University, CIM is used as a tool for information sharing in connection with accidents and undesirable incidents. It is also a warning and mobilization system. Therefore, in order to be able to notify you as a student of undesirable incidents, we transfer the following personal data:
- name
- phone number
- e--mail address
- campus
- internship location
- information on next of kin

Other Universities/University Colleges

Application for admission through Samordna opptak

When you apply for admission to Nord University via Samordna opptak, in most cases your application will be processed by Nord University. If you have applied for admission to one or more other Universities/University Colleges, it is possible that they will process your application on behalf of all the Universities/University Colleges to which you have applied. In such a case, they will process and store personal data on you relating to your application(s). Your application will mainly contain personal data that you have registered in the applicant portal of Samordna opptak.

Consent to exchange of results

You can consent to the exchange of results, if you have obtained results from assessments and degrees from a University/University College and would like to use these results in connection with an application for admission to another Norwegian University/University College. If you give your consent, an executive officer can collect all of your results from all institutions in Norway that use FS. In practice, this means most Universities and University Colleges in Norway, except for the Norwegian School of Business BI. We refer to your institution's Data Privacy Policy for more information regarding the processing of your personal data.

Approval of foreign education

If you have applied for the approval of foreign education, the case details linked to the application, including your personal data, will be transferred to GAUS - search service for the Approval of Foreign Studies. Other Universities/University Colleges in Norway have access to search for and view your personal data in GAUS. More information is available in the GAUS Data Privacy Policy.

Decisions on sanctions related to behaviour

In the event that Nord University has decided to apply sanctions fo you, this decision will in many cases be transferred to RUST (Register for Banned Students). Decisions on sanctions are related to one or more of the following: use of false diplomas, disturbing/troublesome behaviour, dangerous behaviour, gross breach of confidentiality, improper behaviour in practical or clinical teaching, cheating, attempts at cheating, complicity in cheating, or exclusion following a suitability assessment. If, during the sanctions period, you have applied for admission to another Norwegian University/University College, your personal data will be sent to the relevant institution. Only a limited number of people at this institution will then be able to access your personal data. In certain cases this also applies if you are registered for exams. More information is available in the RUST Data Privacy Policy.

NOKUT- Norwegian Agency for Quality Assurance in Education

Approval of foreign studies

If you have applied for the approval of foreign education, the case details linked to the application, including your personal data, will be transferred to GAUS - search service for the Approval of Foreign Studies. NOKUT has access to search for and view your personal data in GAUS.

BIBSYS/other library system provider
In order to be registered as a borrower at Nord University and to use the library services, we send your personal data to BIBSYS/other library system. This happens only when you are registered for a semester and have paid the semester fee.

Statistics Norway (SSB)
In several cases, Nord University sends your personal data to SSB for statistical purposes. This is personal data related to
your semester registration
- your exam result(s)
- your completed study programme
- your achieved qualification(s) which result in the award of a diploma
- you and your admission to a PhD programme

(NSD) The Norwegian Centre for Research Data, and (DBH) National Database for Higher Education Statistics in Norway
In several cases, Nord University sends your personal data to NSD and DBH for research and statistical purposes. This is personal data related to
your application for admission to programmes of study:
- your semester registration, paid semester fee and registration(s) for subject(s)
- your exams
- your obtained qualification(s)
- your exchange(s)
- whether you have achieved credits according to your educational plan
- you and your PhD programme

NIFU- Nordic Institute for Studies in Innovation, Research and Education
In several cases, Nord University sends your personal data to NIFU for research purposes. This is personal data related to your Master's degree (in some cases your Bachelor's degree), and your PhD degree.

The Norwegian Directorate of Health
If you have completed a study programme, which can grant authorization or a license according to the Health Personnel Act or Animal Welfare Personnel Act, Nord University will send your personal data to the Norwegian Directorate of Health/Register for Health Personnel (HPR). Relevant personal data includes your name, I.D. number (11 digits), information on your study programme, and the qualification you have achieved. Thus you do not need to apply for authorisation when you have completed such a study programme.

Disclosure of personal data according to the Freedom of Information Act
In the event that Nord University receives applications for access to personal data according to the provisions of the Freedom of Information Act, the provisions of the Personal Data Act will not set any restrictions to this right of access. It may therefore be the case that Nord University sends personal data about you to other parties other than those stated in this Data Privacy Policy.

Internship Locations
Health enterprises, municipalities and other partners that offer 
internships. In studies that include internships, it may be the case that we send the following personal data on you to the internship location: name, I.D. number, subject code, phone number, and address.

Internationalization
In the event that you are to participate in an exchange programme during your studies, we will send the following personal data to a foreign institution:
- name
- ID number
- e-mail address
- address
- phone number
- bank account number
- student number
- next of kin
- nationality
- gender

Facebook Custom Audience
If you have accepted a place at Nord University, your email address may be disclosed to Facebook Custom Audience. Facebook will be the data processor, and will delete your email address after the Custom Audience service has been delivered. They will not disclose this to any other third parties and will not use your personal data to build a profile. Facebook will carry out a matching process between the email address and its membership database. You may then receive information customised to you as a student - for example, relating to the study location where you have accepted a study offer, as well as useful information for students. The legal basis for this processing is Art. 6, No. 1, Subsection F of GDPR, relating to legitimate interests.

Real-time online teaching

In principle, students can choose whether they wish to use video and/or audio when participating in real-time online teaching (streaming). The student can control who sees and hears them by changing the settings on the streaming platform. The student may change his/her settings at any time during the class.

Recording

Nord University may record online lectures where students are present. The lecturer will inform you about whether the session will be recorded upon commencement of the lecture. The recording may include video, audio, the lecturer's presentations and/or video focusing on the lecturer and the presentations. However, it is possible that images/video and/or students' voices will also be recorded.

Recordings will be published as learning resources on Canvas, and will be available to all students participating in the course. Recordings will be stored in a secure location for as long as they are academically relevant.

Purpose

The purpose of online lectures is to ensure students' continued access to teaching sessions. The purpose of recording online lessons is to make them available to students who are unable able to follow the classes in real time.

Consent or other grounds for processing personal data

Nord University must have valid grounds for processing personal data in cases where audio/video/images of students will be present in a recording.

It is considered to be in the public interest to process the personal data of participants in lectures where active student participation is essential in order to achieve teaching objectives. In such cases, student consent to record is not required. The grounds for processing personal data are pursuant to GDPR art. 6 no. 1 letter e), cf. Section 3-8 of the Act relating to universities and university colleges, Section 4-2 of the individual education plan, and Section 4-3 of the students' learning environment.

When recording other types of lectures, consent must be obtained from students who are identifiable in the recording, cf. GDPR Art. 6 no. 2 letter a). In this case, students will be asked to provide their consent. Consent may be withdrawn. Withdrawal of consent shall be submitted in writing to the administration of the relevant faculty.

If the student does not consent, or does not wish to be identifiable in a recording, he/she may:

• Sign in with an anonymous username (depending on which platform is being used)
• Turn off his/her microphone and camera
• Send questions to the lecturer via private chat, e-mail or in any breaks where recording is stopped.
• Choose not to participate in real-time classes, but view the recording at a later time
  

For more information about how Nord University processes student's personal data, please refer to the Student Privacy Policy at https://www.nord.no/en/about/privacy/students-applicants The page also provides information about student's rights.

Are students permitted to record lessons?

Teaching, academic supervision, examinations etc. are not considered merely as personal activities and are therefore covered ​by​ the Personal Data Act. Therefore, students are not allowed to make video or sound recordings from lessons without informed consent from all identifiable participants in the recording.

This implies that recordings including voice, image, name or other information that may identify the person may not be made without an informal consent. The student is responsible for following the current rules for processing of personal data. Participants must be informed about how to withdraw their consent, when the recording will be deleted etc. 

In accordance with The Copyright Act, recordings made by students must not be distributed. This means that recordings are for personal use only and must not be shared with anyone.

If a student finds it necessary to share a recording with fellow students who have not been able to participate in the class, he/she must contact the lecturer in order to obtain consent.