Processing of Personal Data for Sunet Zoom
Description of Sunet Zoom
Sunet Zoom is an online meeting system for employees, other personnel, and students. The service is operated by Nordunet, owned by the Nordic countries' respective research councils, in data centers in Copenhagen and Stockholm for educational institutions in the Nordic region. Uppsala University's administration of Zoom is managed by the Department of University Common IT.
You should only log in to this system if you are affiliated with Uppsala University or collaborate with Uppsala University and have been requested to log in.
Handling of Personal Data
Transfer of Personal Data
No meeting content is stored with the provider. Meeting recordings, chat text, and notes are saved locally on the computer recording the meeting. The meeting host determines who can record a meeting.
End-to-End Encryption (E2EE) is chosen for confidential meetings. It provides KRT: 322 for the meeting. Several features in a Zoom meeting are then not available as a consequence of E2EE.
Zoom Team Chat (not meeting chat) is encrypted during transmission and when stored on the server. Team Chat is encrypted End-to-End, meaning that only the sender and specified recipient/participant can read the content.
This gives a KRT value of 322 for Zoom Team Chat. Data from Zoom Team Chat is stored on Zoom servers for 3 months and in clients for a maximum of 1 year.
No sensitive personal data is held or sent to the provider.
Person names, account names, email addresses, and meeting IP addresses are stored by Nordunet to provide the service to us and our users.
The Zoom company can only see user data in connection with requested support in individual cases. Uppsala University does not use the Zoom Cloud service.
Even personal data written on whiteboards is stored.
Personal Data | Purpose | Technical Representation |
|---|---|---|
First Name | Account identifier for you as a user in the service so that you can access according to the rights assigned to you. | eduPersonPrincipleName |
First Name | Identify yourself to other users in the services. | displayName |
Last Name | Identify yourself to other users in the services. | displayName |
Email Address | Account identifier and contact method. |
Other Processing of Personal Data in the Services
Technical logs are saved for troubleshooting and security-related incidents. These technical logs contain information about all logins, including transferred personal data.
Generally, logs within the service are saved for 3-12 months.
Transfer of Sensitive Personal Data to Third Parties
No sensitive personal data is transferred to third parties except for what users themselves enter into the service.
Legal Basis
Personal data is processed based on the legal basis of general interest. Personal data must be transferred to provide users with access to the service for their work at Uppsala University or in collaboration with Uppsala University.
Right to Extract, Rectify, and Delete Personal Data
Personal data in Sunet Zoom for students, employees, and other personnel is automatically corrected based on the data transferred from Uppsala University's catalog and authorization system (AKKA).
To delete your personal data or request an extract, contact dataskyddsombud@uu.se.
Purging of Personal Data
Uppsala University only retains your personal data for as long as the purpose of the processing requires or as required by law.
Controller of Personal Data
The controller of personal data processing is Uppsala University.
If you have questions about how personal data is handled within the service, contact the data protection officer.
Contact information for the data protection officer: dataskyddsombud@uu.se.
GÉANT Data Protection Code of Conduct
This service follows the international framework GÉANT Data Protection Code of Conduct for the transfer of personal data from identity issuers to the service. The framework is intended for services in Sweden, the EU, and the EEA used in research and higher education.
In 2024, Zoom joined the EU-U.S. Data Privacy Framework.