MET’s Privacy Policy Statement

This privacy policy statement explains how MET collects and uses personal data. MET’s Director General has overall responsibility for MET’s processing of personal data. The daily responsibility is delegated to whoever is responsible for the service (system owner) and is stated under each individual point.

Processing of personal data on www.met.no

The system owner/web editor is responsible for processing personal data for the website. The website is operated by Enonic. A data processing agreement between MET and Enonic governs what information the provider has access to and how it is to be handled.

Google analytics and cookies

www.met.no, halo.met.no and klimaservicesenteret.no use Google Analytics for web analysis and visitor statistics. The sites use cookies so that we can see and analyse how our site is used.

The information that cookies collect about your use of the website is sent to Google and stored on the company’s servers in the United States. A code removes the final digits of your IP address before Google Analytics stores the information. This means that the analysis tool can estimate the user’s geographical location, but the address can not be used to identify you as a user.

Google will use this information to evaluate use of the website, compile reports for us about website activity and provide other services in connection with the activity on the website and use of the internet. By using this website you agree that Google will process information about you in this way and for the purposes described above. It is possible to opt out of all Google Analytics registration by installing an add-on for your browser. The add-on can be downloaded here: Google Analytics Opt-out Browser Add-on.

Collected data is subject to Google’s privacy policy. MET will use the statistical information to improve the website. We will not use the information to identify individuals. The statistical data will not be put together with data from other sources.

Traffic logs

Network traffic in and out of MET’s network is logged by different infrastructure such as firewalls, DNS servers, VPN, Wifi and authentication services (Radius). These logs can include information that can be associated with individuals, such as IP addresses. The purpose of the logs is to prevent the misuse of MET’s services and deal with cyberattacks. The logs are stored on servers operated by MET.

Email lists

It is possible to sign up for email lists to receive information about the services. The lists are used for information about events, changes, or feedback and not for advertisements. Your address will not be copied from the email list to other systems or partners. You can unsubscribe from the list whenever you wish.

Processing of personal data on api.met.no, arcticdata.met.no, drifty.met.no, eklima.met.no, fog.met.no, frost.met.no, ftp.met.no, halo.met.no, klimaservicesenteret.no, thredds.met.no, wiki.met.no and web pages for research projects

The system owner for each service is responsible for processing personal data for that service. Our processing basis is the consent of the individual who wishes to use the service. In order to access the services, you must provide your email address and in some cases title and phone number to create a user or client ID with a password. This is necessary to give all users the most stable and fast access possible, for efficient use of the service and to control access to data that is not openly accessible to everyone. The email address will be used to contact users with information about the service, maintenance and changes. The information will be stored for the lifetime of the service, unless otherwise specified.

MET logs the use of the services, where the user’s IP address is included. The purpose of logging use is to facilitate troubleshooting and to prepare statistics that we use to improve and refine the services. Examples of what the statistics provide answers to are the number of queries made toward the different data or products and how long the response time is. MET does not supply information about usage statistics to other actors.

IP addresses can also be used for traffic management.

MET also operates a number of web pages for research projects we head or participate in. In some cases, it is also necessary to create a user to access data. The project manager is in charge of data processing.

Information collected in connection with the operation of the websites is stored on servers operated by MET. There are two exceptions. Data for the frost.met.no and drifty.met.no services is stored in the Google Cloud Platform (GCP). A data processing agreement between MET and GCP governs what information the provider has access to and how it is to be handled. Transfer to third countries is handled by Privacy Shield certification of GCP.

Processing of personal data in butikk.met.no, kommersielt.met.no

The system owner for the services is responsible for processing personal data for that service.

Our processing basis is the consent of the individual who wishes to use the service. To provide good service to our customers with good follow-up, we store information about customers in a customer database. Examples of the information stored include company name, contact person, user name, password, phone, and email. The information is stored on servers operated by MET. The information will be stored for the lifetime of the service, unless otherwise specified.

Processing personal data in recruiting services

The system owner is responsible for processing personal data for the recruiting service. Our processing basis is the consent of the individual who wishes to apply for a position at MET. JobbNorge is our provider of recruiting services. A separate data processing agreement between MET and JobbNorge governs what information the provider has access to and how it is to be handled.

Applications will be deleted after 120 days. Job applications will normally not be journaled, only if the applicant will be employed by MET. Other documents, including lists of applicants and lists of nominees, are stored. Journal information is not deleted, but is sheltered in the public electronic mail journal (i.e. names of persons/names of applicants are not shown).

Processing of personal data in case processing and archive

MET uses the Noark system Element’s fully electronic records and case processing system provided by Evry. Evry is our service provider and data processor for Elements. There is a data processing agreement between MET and Evry that governs what information the provider has access to and how it is to be handled. Responsibility for the system has been delegated to the Head of Archive unit, who is responsibility for the archive system as well as ensuring that there are necessary up-to-date procedures, and that training in the use of the system and procedures is offered. The respective division heads ensure that the actual case processing is in accordance with the procedures.

MET processes personal data to comply with statutory obligations pursuant, inter alia, to the Personal Data Act, Public Administration Act, Freedom of Information Act, and the Archives Act.

Various types of personal data are recorded in the records and case processing system. This includes information such as name, address, phone number, email address (metadata). In addition, the case documents may contain sensitive personal data such as health information. Upon request for access, any personal data will be provided in accordance with the Freedom of Information Act and the Public Administration Act.

MET is required to make its public mail journals available to the general public. A journal is systematic and continuous recording of all inbound and outbound case documents. The journals are made available at www.met.no.

Processing personal data, camera surveillance on MET’s property

Video surveillance is installed at MET’s property in Oslo. Notice is posted pursuant to current regulations. The system owner is responsible for processing personal data for camera surveillance. The purpose of camera surveillance is to protect MET’s assets on the property and provide general safety for MET’s employees. Recordings are stored on servers operated by MET and deleted after 7 days.

Processing of personal data upon enquiries to MET

MET receives enquiries by email and phone. When there is a need for further follow-up, information about the enquiry is logged in ticket systems, case processing systems or similar, usually in unstructured form. The system owner for each service is responsible for processing personal data for that service. We encourage you not to send secret, sensitive or other confidential information via email.

MET uses Google Suite as its email and interaction tool. A data processing agreement between MET and Google governs what information the provider has access to and how it is to be handled. Transfer to third countries is handled by Privacy Shield certification of Google.

Yr

Yr (yr.no) is a collaboration between NRK and MET. NRK is responsible for the frontend. For information about privacy on yr.no, see NRK’s web page on privacy.

Your rights

You have the right to basic information on the processing of personal data in an organisation. MET has provided this information in this statement and will refer to it upon any requests. If you are a registered user of any of our services, you are entitled to access your own data. You have the right to correct and delete personal data. Even if you have previously consented to storage of your personal data, you have the right to change your mind. You have the right to appeal to the Norwegian Data Protection Authority if you believe the processing is contrary to regulation.

The privacy policy statement will be updated as needed.

Contact information

Privacy Ombudsman at the Norwegian Meteorological Institute.

Email: post@met.no

Phone: +47 22 96 30 00

Postal address: PO Box 43 Blindern, 0313 Oslo