NRC Office 365 Guest Users - Privacy Statement

Published 07. Nov 2018

Who we are

Norwegian Refugee Council (NRC) is an independent humanitarian organisation helping people forced to flee. ‘Rights Respected, People Protected’ is our working principle at NRC. Your privacy is important to us.

Norwegian Refugee Council,
VAT number: 977 538 319,
Prinsens gate 2 0152 Oslo Norway
(+47) 23 10 98 00

NRC is responsible for processing your information in accordance with the applicable European and Norwegian data protection laws and other rules. 

 

How we use your information

In some cases, we will work together with external parties in achieving our mission through File Sharing or Guest Accounts in Office 365. To collaborate with you, we will collect some personal data. More specifically, we will collect your personal data to:

  • evaluate and monitor usage of Office 365 Group services and file activities on shared files.
  • manage your Guest membership on Office 365.

Personal data we collect

The personal data we collect and store is name, email address, and your photo if provided.


Our legal basis for processing your personal data

NRC will use consent as a legal base to process your personal data for specific purposes as mentioned above.  By accessing or continuing using the guest account in Office 365, you acknowledge that you have read, understood our privacy statement and agree on the processing of your personal data by NRC. You can withdraw your consent at any time by leaving your guest account in Office 365.


How we share personal data with third parties

We do not sell, trade or otherwise transfer your personal data to external third parties. These do not include trusted third parties Microsoft and Evry that assist us in running and maintaining our Office 365 tenant.

  • Microsoft is our service provider for Office 365. Please read their information practices at Microsoft Privacy statement
  • Evry provides us with development support for custom developments on our Office 365 environment. Please read their information practices at Evry Privacy Policy


How long we store your personal data

  • We will comply with the applicable laws and regulations and only keep your personal information as long as it is necessary for the purpose it is collected for. We will never process your personal data longer than necessary to fulfil the respective purposes.
  • If you choose to leave the Office 365 Group(s) you have been invited to, your guest account will be removed from the Office 365 Group. It may take some time before your information is removed from our Office 365 tenant. If you want it to be removed immediately please contact ict.help@nrc.no.
  • After you leave the guest account, all information you shared in the group or comments you made to other documents will be kept by NRC indefinitely or as long as the Group, where you were a guest, is active.


Your rights

  • According to applicable data protection laws, you have different rights in connection with processing of your personal data.
  • You have the right at anytime to request access to the personal information we process about you, to require correction/rectification of your personal information if these are inaccurate or incomplete and you have also the right to require us to delete your personal information or object the processing of it.


How to send a complaint or request

If you have any inquires or complaints on how we process your personal data or want to exercise your rights, please send us an email on data.protection@nrc.no