Processing of personal data by Inspera
Inspera is Uppsala University’s primary system for digital examinations. To use Inspera, the examination must be set up in Ladok.
When you use Inspera, your personal data is processed by Inspera on behalf of Uppsala University.
Handling of Personal Data
In the process of logging into Inspera via Uppsala University’s login service, your username is transferred to Inspera to ensure that you, as a user, have access to authorized information within the service. Inspera also handles other personal data related to you as an employee or student.
The personal data being handled by Inspera for you as an employee:
Personal data | Purpose | Technical representation |
---|---|---|
Username at Uppsala university | Identifies you as a user in the system so that you gain access according to the permissions assigned to you, and so that you can access the examinations created in Ladok by you or your organization. | eduPersonPrincipalName |
Givenname | Used to display your name in the system both for yourself when you are logged in and for other logged-in employees. | givenName |
Surname | Used to display your name in the system both for yourself when you are logged in and for other logged-in employees. | sn |
Used to send email from the system when necessary. |
The personal data being handled by Inspera for you as a student:
Personal data | Purpose | Technical representation |
---|---|---|
Username at Uppsala university | Identifies you as a student in the system and links you to your LadokUid so that you can access the exams you are registered for. | eduPersonPrincipalName |
Givenname | Used to display your name in the system while you are logged in, and your name is also visible to exam invigilators. Your name is deleted from the system when you log out. | givenName |
Surname | Used to display your name in the system while you are logged in, and your name is also visible to exam invigilators. Your name is deleted from the system when you log out. | sn |
Personal identity number | Used solely for display on the screen while you are taking an exam. The purpose is for exam invigilators to perform accurate identity checks at your writing location. The personal identification number is deleted when you log out. | norEduPersonNIN |
Other Processing of Personal Data in the Service
Inspera stores technical logs for troubleshooting and security-related incidents. These logs contain information about all logins, including usernames and IP addresses. The logs record user actions within the system. Log files are retained for a limited period.
Transfer of Personal Data to Third Parties
Your personal data is transferred to servers in Ireland, where Inspera’s servers are located.
Right to Access and Correct Personal Data
Personal data managed in Inspera is automatically corrected based on information transferred from Uppsala University’s catalog and authorization system (AKKA).
To request an access report, contact dataskyddsombud@uu.se.
Retention of Personal Data
Due to examination being carried out by a public authority, you do not have the right to be forgotten in Inspera.
Data Controller
Uppsala University is the data controller, and Inspera acts as a data processor. The legal basis for processing personal data in Inspera is examination by a public authority.
If you have any questions about how personal data is handled within the service, please contact dataskyddsombud@uu.se.
Service Provider
Uppsala university
Box 256
751 05 Uppsala
Sverige
Contact person for the service: itsupport@uu.se.
Service provider’s jurisdiction: Ireland.
GÉANT Data Protection Code of Conduct
This service adheres to the international framework GÉANT Data Protection Code of Conduct for transferring personal data from identity providers to the service.
The framework applies to services used in research and higher education in Sweden, the EU, and EEA.