Text about privacy in NOA in the app and admin page (which users agree to when they log in for the first time)
Privacy
Your privacy is important to us. Below you can read more about how we actively work to protect your privacy. Here we will explain how and why we collect and use personal information about you and how we process your personal information.
NOA AS («NOA») offers partners such as colleges and universities an application and website to simplify attendance registration in schools. In this context, NOA processes personal data on behalf of the partners and acts as a data processor. The data controller will be your college/university. It is the data controller who determines the purpose of the processing of personal data and in what way the processing shall take place.
More about the purpose and basis for the processing of personal data
The purpose of the processing is to be able to offer an application and website for digital registration of attendance in school. In order to be able to do this, it is necessary for us to process the following personal information about you as registered:
If you are a student and use our app:
• Email (username for login)
• Mobile number
• Class/course affiliation
• Location
• Attendance registrations (attended, did not attend, possibly checked out, valid absence)
Our processing of your personal data as a student takes place on the basis of your explicit consent. You can withdraw your consent at any time, but you will then no longer be able to use the app. (GDPR art 6 no. 1 a)
If you are a teacher/lecturer/administrative employee of our partner and use our website:
• Name
• Email generated from the school (username in login)
• Mobile number
• Class/course affiliation
Our processing of your personal data as a teacher/lecturer/administrative employee is necessary in order to fulfill the agreement we have entered into to offer tools for absence registration using the website. (GDPR art. 6 no. 1 b)
Security
NOA has documented technical and organizational measures that ensure that personal data is processed in a way that ensures its confidentiality, availability and integrity.
Recipients of personal data and use of subcontractors
We do not share your personal information with third parties unless such disclosure is required by law.
NOA uses external subcontractors (data processors) to perform various tasks. In such cases, a data processing agreement is signed to ensure that personal data is processed in accordance with the current privacy regulations. Some of these service providers will have access to personal data. Examples of services we receive include data storage or app development. Companies that are data processors for us can only handle information to deliver the service in question.
If our data processors handle personal data outside Norway and the EU, we will ensure that transfer mechanisms are in place. The processing of personal data outside Norway and the EU is common and legal, provided that certain additional requirements are met to ensure the protection of the data.
Your rights as a registered individual
As a data processor for your school, NOA is obliged to assist in safeguarding your rights as a registered individual. By contacting us, you have the right to demand
- access to,
- correction of and/or
- deletion of
personal data that concerns you as a registered individual.
Right to withdraw consent
If you are a student and use the app for attendance registration, the basis for our processing of your personal data is your consent. You can withdraw this at any time by deleting your user in the app, uninstalling the app, and informing your place of study that you do not wish to use the app. Your lecturer will then have to register you manually.
Right to complain to the Data Protection Authority
If you disagree with how we process your personal data, you have the right to complain to the Data Protection Authority. https://www.datatilsynet.no/om-datatilsynet/kontakt-oss/hvordan-kan-jeg-
klage-til-datatilsynet/
Retention period
NOA stores personal data for as long as it is necessary to fulfill the purpose of the processing. We will not store personal data beyond this, unless there is another legal basis for continued processing.
Contact information for data processor
If you have questions about how NOA processes personal data, contact: support@noticeofattendance.com
Data controller
The party that determines the purpose of the processing of personal data is called the data controller. Your college/university is the data controller for the processing of your personal data in connection with attendance/absence registration.