Konto.hb.se GÉANT Privacy Statement

Name of the service

Konto.hb.se

Description of the service

Konto.hb.se is a portal to establish and create a network identity for use with the identity providers and network login at the University of Borås.

Data controller and contact person

University of Borås
Contact: it@hb.se with questions.

Jurisdiction

SE Sweden

Personal data processed

A. Following data is retrieved from the identification servers

• Personal identification number (norEduPersonalNIN)
• Assurance level (eduPersonAssurance)

B. Following data is gathered from the Ladok system based on your norEduPersonalNIN

• First name
• Last name
• Mobile phone number
• Email adress
• Courses and Program registrations
• Study areas
• Academic organisational units

C. Following data is gathered from the home organisation once the identity is established

• User Network ID
• Distinguished Network Name
• Student email

Purpose of the processing of personal data

All information is used to create and establish a identity record with the catalogue system at the University of Borås.

Third parties to whom personal data is disclosed

The personal data will be synchronized with the following external systems:

• Pingpong - Study Platform
• ALMA - Library system (optional)
• GMAIL - Student mail hosted by Google GMAIL

An external system is a system not hosted at the University of Borås.

How to access, rectify and delete the personal data

Contact the contact person above for deletion of the personal data.

To rectify the personal data this needs to be done at the relative source service as no such data is stored in this system. For students this will be UHR/Antagning.se and Ladok and for employees this will be Primula & HBKat. Contact the IT-helpdesk on it@hb.se if you have additional questions regarding this.

Data retention

The data will be stored during the study period of the student. Once done with their studies, it will keep until the end of the grace period (the next study year, allowing for finalizing uncompleted study exams and reports). Once no more activity is recorded, the entry will be archived for 6 months and then removed. A small record is retained indefinately containing just the norEduPersonalNIN and the name and will be used if the identity is re-established.

Data Protection Code of Conduct

Your personal data will be protected according to the Code of Conduct for Service Providers, a common standard for the research and higher education sector to protect your privacy.

If you wish to read more about how the University of Borås handles personal data you can find this information at https://www.hb.se/en/Shortcuts/About-the-site/Privacy-Policy/.