Data Controller
Frode Mikal Nilssen is, on behalf of Hurdal Verk Folk High School, the data controller for the company’s processing of personal data.
Stored Personal Data
We store the following personal data about our students;
Name, Address, Social Security Number, Citizenship, Next of Kin, Absence, Grades. Health information relevant to the school year. Logs/time registration/control/key registration, etc.
Photos and video: Student profile on the intranet, publication on the internet, use in advertising/marketing, etc.
We store the following personal data about our customers and suppliers; Contact person name
Address, Phone number, Email, Title, Purchase history, Sales history, Account number.
Purpose of Processing
Students: We process the information to fulfill our obligations under the agreement with you as a student. We also use the information to provide you with information, offers, and services related to your status as a student via email, phone, SMS, and postal mailings.
We will ask for consent to use your photo/video for publication on the school’s website hvf.no, and in other advertising/marketing.
Customers/Suppliers: We process the information to fulfill our obligations under the agreement with you as a customer/supplier. We also use the information for marketing and to provide you with information, offers, and services related to your status as a customer/supplier via email, phone, SMS, and postal mailings.
Basis for Processing
Students: Information about Name, Address, Social Security Number, Citizenship, Next of Kin, Absence, Grades. Health information relevant to the school year. Logs/time registration/control/key registration, etc., are used to fulfill our legal obligations to our students. The basis for this processing is the GDPR Art 6(1)(c), cf. the Education Act § 13-5.
Where you have consented to the use of photos or other personal data, the basis for processing is GDPR Article 6(1)(a). You can withdraw your consent for such use at any time.
Where you have consented, the information is also used to provide you with information, offers, and services related to your student relationship via email, phone, and SMS. The basis for this processing is GDPR Art 6 (1)(a). You can opt out of receiving such information from us at any time.
Customers/Suppliers: Information about Contact person name. Address, Phone number, Email, Title, Purchase history, sales history is used to fulfill our legal obligations to you as a customer/supplier. The basis for this processing is GDPR Art 6(1)(c).
Collection of Personal Data
Students: We store the personal data you provided on the application form you use when applying as a student with us: https://www.folkehogskole.no/index.php?page_id=80&skole_id=26. The information is also stored on the Information Office for Folk High Schools (IKF) servers.
Customers/Suppliers: We store the personal data you have provided to our employees in connection with your purchase/sale.
Disclosure of Information to Third Parties
We will not share, sell, transfer, or otherwise disclose personal data to others unless we are legally obligated to do so.
Deletion of Personal Data
Students: Personal data we have in connection with your status as a student is stored in our active student register for 10 years. After that, everything is deleted except for name, address, and which class year you belong to.
Information we are required to keep under the Bookkeeping Act will be stored for up to 5 years, in accordance with legal requirements.
Name
Year of birth
Gender
Contact details: email address, phone number, address
CV
Application letter
Other attached files (such as transcripts)
Rights of the Data Subject
We process your personal data in accordance with the Personal Data Act and applicable regulations. Please note that you can request access to and transfer of your own personal data, as well as request rectification or deletion of information.
Complaints about processing in violation of the rules can be made to the Data Protection Authority.
Privacy Coordinator
We have a privacy coordinator, Kjetil Rydland, who ensures that the Personal Data Act’s rules on the processing of personal data are followed. He can be contacted by phone: 404 17 600, or email: kr@hvf.no.
Privacy Policy for Recruitment
When you apply for a job at Hurdal Verk Folk High School, you agree that your personal data will be registered and processed in connection with the recruitment. The information provided will be available to HR and recruiting personnel within the company in accordance with the EU General Data Protection Regulation (2018), GDPR.
Processing of personal data
The information you provide in the application is registered on behalf of Hurdal Verk Folk High School in the company’s recruitment system.
We process the following personal data:
- Name
- Year of birth
- Gender
- Contact details: email address, phone number, address
- CV
- Application letter
- Other attached files (such as transcripts)
Hurdal Verk Folk High School is the Data Controller
Hurdal Verk Folk High School is the data controller for the processing of personal data.
What will the information be used for?
Hurdal Verk Folk High School uses the information to process the job application.
Who has access to the information?
The information provided will be available to persons participating in the relevant recruitment process and who have a legitimate need for access. We recommend that you only provide information that is relevant for the position in question.
How long is the information stored?
All information will be deleted from Hurdal Verk Folk High School’s database in the recruitment system within 2 years after your last application.
If consent has been given for the storage of personal data for future recruitment needs, it will be stored until a potential future recruitment of the applicant is no longer relevant and/or until consent is withdrawn.
You have the right to know what information Hurdal Verk Folk High School has stored about you
You can request access to the personal data Hurdal Verk Folk High School has about you. You can also request that we correct incorrect information or delete information about you. Furthermore, you have the right to withdraw your consent for us to process your personal data. We will then remove the application and delete the personal data associated with the application from the recruitment system.
Information Security
We secure your personal data through both physical and virtual access and admission control.
Contact Information
Inquiries about what information is registered, rectification, and deletion can be sent in writing to the following addresses:
fnilssen@hvf.no
Hurdal Verk Folk High School
c/o Frode Nilssen
Hurdal Verk 5A
2090 Hurdal
Cookies
The Electronic Communications Act requires us to inform our visitors about the use of cookies. For every website you visit, a small text file is stored on your computer or electronic device. This file is called a cookie and contains information about your navigation on our website. The purpose of cookies is to provide you with a better user experience and advertisements tailored to you.
Analytical purposes:
We use your information to analyze and improve how the website is used. We look at the number of visits, navigation patterns, and other types of statistics in Google Analytics.
More information can be found here:
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=en
Protection against cyber attacks:
We use reCAPTCHA from Google to protect our website against hacker attacks. Read about what this means for you when you visit our website here.
As a web user, you can choose to reject the storage and use of cookies. We recommend the Norwegian Communications Authority’s website nettvett.no for a description of how you can accept or reject cookies.
HTTPS and Secure Transfer
Our website is covered by HTTPS encryption. If you want to make sure a page is encrypted, a padlock will appear in the address bar at the top of the browser and/or it will say “https” instead of just “http” in front of the address.
The purpose of encryption is to ensure secure data communication between the server (the website) and the client (your computer). This includes a digital certificate to prove that the website and its sender are authentic.
Cookies on the Website
CoreTrek AS provides the publishing tool for our website and is responsible for technical development, operation, and maintenance. The cookies our website uses are:
Static
Statistical cookies help the website owner understand how visitors interact with the website by collecting and reporting information.
| Name | Purpose | Expiry date |
|---|---|---|
| _ga | Collects information about users and their activity on the site for analysis and reporting purposes (anonymized) | 2 years |
| _gat | Collects information about users and their activity on the site for analysis and reporting purposes (anonymized) | a few seconds |
| _gid | Collects information about users and their activity on the site for analysis and reporting purposes (anonymized) | one day |
We have included the option to forward articles via email and share articles on social media. Email addresses used to forward articles are not logged. Further handling of data shared on social media is regulated by your agreement with the relevant social network.
Statistics and Log
When you read our website, information will be stored in statistics and log files.
The system does NOT store “user agent” or IP address but stores which page the visitor has visited in a raw data table. This information is subsequently used to generate statistics for the number of page views per object (menu item, article, file), per host, and per keyword. All data in the raw data table is deleted after 2 days, and the remaining statistics then contain only summarized data that cannot be used to identify individual users.
We also do not store “user agent” or IP address in the web server’s logs, but may store which pages have been visited. These logs are used exclusively for troubleshooting and security work, and no data is extracted or used from these logs. Logs are deleted after a given interval (normally 4 weeks). Only web server administrators (operations) have access to these.
