Text about NOA privacy in the app and admin page (which users agree to when they log in for the first time)
Data protection
Your privacy is important to us. Below you can read more about how we actively work to protect your privacy. Here we will explain how and why we collect and use personal data about you and how we process your personal data.
NOA AS ("NOA") offers partners such as colleges and universities an application and website to simplify attendance registration in schools. In this context, NOA processes personal data on behalf of the partners and acts as a data processor. The data controller will be your college/university. It is the data controller that determines the purpose of the processing of personal data and the manner in which the processing is to take place.
Details on the purposes and grounds for processing personal data
The purpose of the processing is to provide an application and website for digital registration of attendance at school. In order to do this, it is necessary for us to process the following personal data about you as a data subject:
If you are a student using our app:
- E-mail (login username)
- Mobile number
- Class/course affiliation
- Location
- Attendance records (attended, not attended, checked out if applicable, valid absence)
Our processing of your personal data as a student is based on your explicit consent. You can withdraw your consent at any time, but you will then no longer be able to use the app (GDPR Article 6(1)(a)).
If you are a teacher/ lecturer/ administrative employee of our partner and use our website:
- Name
- Email generated from school (username in login)
- Mobile number
- Class/course affiliation
Our processing of your personal data as a teacher/lecturer/administrative employee is necessary to fulfill the agreement we have entered into to provide tools for absence registration using the website (GDPR art. 6 no. 1 b)
Security
NOA has documented technical and organizational measures in place to ensure that personal data are processed in a manner that ensures their confidentiality, availability and integrity.
Recipients of the personal data and use of subcontractors
We do not disclose your personal data to third parties unless such disclosure is required by legal obligations for the company.
NOA uses external subcontractors (data processors) to perform various tasks. In such cases, a data processing agreement is signed to ensure that personal data is processed in accordance with the applicable data protection regulations. Some of these service providers will have access to personal data. Examples of services provided to us are data storage or app development. Companies that are data processors for us can only handle data to provide the service in question.
If our data processors process personal data outside Norway and the EU, we will ensure that transfer mechanisms are in place. The processing of personal data outside Norway and the EU is common and legal, provided that certain additional requirements are met to ensure the protection of the data.
Your rights as a registrant
As a data processor for your school, NOA is obliged to assist in safeguarding your rights as a data subject. By contacting us, you have the right to demand
- access to,
- correction of and/or
- deletion of
personal data concerning you as a data subject.
Right to withdraw consent
If you are a student and use the attendance tracking app, the basis for processing your personal data is your consent. You can withdraw this consent at any time. You can do this by deleting your user in the app, uninstalling the app, and informing your place of study that you do not wish to use the app. Your lecturer will then have to register you manually.
Right to complain to the Data Protection Authority
If you disagree with how we process your personal data, you have the right to complain to the Danish Data Protection Agency. https://www.datatilsynet.no/om-datatilsynet/kontakt-oss/hvordan-kan-jeg-
complaint-to-the-data-supervisory-authority/
Storage time
NOA stores personal data for as long as it is necessary to fulfill the purpose of the processing. We will not store the personal data beyond this, unless there is another legal basis for continued processing.
Contact details of the data processor
If you have any questions about how NOA processes personal data, please contact: support@noticeofattendance.com
Data controller
The person who determines the purpose of the processing of personal data is called the data controller. Your college/university is the controller for the processing of your personal data in connection with attendance/absence registration.