Transfer of personal data to Nationella betygsdatabasen when using federated login (Privacy Policy)

Description of Nationella betygsdatabasen

Nationella betygsdatabasen is a service that targets the organisers/owners of upper secondary schools and adult education providers.

Nationella betygsdatabasen collects diplomas and final school grades from upper secondary education and delivers them to the admissions system NyA where they are used to facilitate admission to Swedish higher education institutions. In addition, Nationella betygsdatabasen collects certificates of studies (studiebevis and gymnasieintyg) that are not delivered to the admissions system. Nationella betygsdatabasen also provides study data to Statistics Sweden and has an obligation to give information to The Swedish Board of Student Finance and Sweden’s municipalities.

Processing of personal data

Transfer of personal data

Personal data are being transferred from the identity provider (your login service) to the service to ensure that you as a user have access to your information in the service and to provide you with a user-friendly interface.

When logging in to this service, the following personal data are requested from the identity provider you use:

Personal Data Purpose Technical representation
Unique identifier Identification of issuer, normally an Swedish higher education institutions eduPersonPrincipleName
Assurance level Indicates how securely identified the user is eduPersonAssurance

 

Other processing of personal data within the service

In addition to direct personal data, indirect personal data are also transferred, such as which organisation the user belongs to, and which identity provider has been used when logging in. In combination with the above personal data, these can be used to uniquely identify a person.

Transfer of personal data to third parties

No personal data are transferred to third parties.

Lawful basis

Personal data are processed based on public interest. Personal data must be transferred for system administrators of identity providers to be able to verify that personal data is transferred in accordance with the recommendations of SWAMID.

Right of access, right of rectification and right of erasure of personal data

For access, rectification and erasure of your personal data, contact the Personal data controller (see contact information below).

Rectification of personal data that was transferred at login has to be done in the identity provider that you use to log in. This information is corrected in the service at the first login after the personal information has been corrected in the identity provider.

Purging of personal data

No personal data are stored in the service except in technical logs. Technical logs data are cleared when they are no longer deemed necessary for traceability or troubleshooting.

Personal data controller

Personal data controller for the processing of personal data is Universitets- och högskolerådet (UHR). If you have questions about how personal data are processed within the service, please contact UHR:s data protection officer, dataskyddsombud@uhr.se.

GÉANT Data Protection Code of Conduct

This service complies with the international framework GÉANT Data Protection Code of Conduct for the transfer of personal data from identity providers to the service. This framework is intended for services in Sweden, the EU and the EEA that are used in research and higher education.