Privacy Policy for the Norwegian Meteorological Institute

Data Controller

The CEO of the Norwegian Meteorological Institute (MET Norway) has the overall responsibility for MET Norway's processing of personal data. The daily follow-up of each service is delegated to the division responsible for the service.

When does the Norwegian Meteorological Institute collect personal data?

The primary purpose of MET Norway's processing of personal data is to better accommodate our users and partners' experiences when contacting the institute or using our digital services. We mainly process information you have provided to us for one of the following reasons:

• You have obtained information about weather and climate from one of our websites or through our APIs.
• You have contacted us with questions about climate and weather.
• You have sent us a complaint.
• You have requested access under the Norwegian Freedom of information Act.
• You are a user of Værio or Luna.
• You have registered for a course or seminar.
• You have applied for a job with us.
• You visit our premises.

We also receive information indirectly for the following reasons:

• An employee has listed you as a next of kin.
• A job applicant has listed you as a reference.
• You are listed as a contact person in an agreement where MET Norway is a party.
• You are part of a project, reference group, or similar collaboration with MET Norway.

We encourage everyone not to use post@met.no for sending sensitive personal data to us.

Contact Information

Privacy Officer at the Norwegian Meteorological Institute

• Email: post@met.no
• Phone: 22 96 30 00
• Postal Address: PO Box 43 Blindern, 0313 Oslo

Processing of personal data on met.no

Our main website is managed by Enonic. A data processing agreement between MET Norway and Enonic regulates what information the provider has access to and how it should be processed.

Cookies

MET collects information about visitors on some of our websites. MET Norway uses two tools for this: Matomo and Google Analytics.

MET Norway uses Matomo, provided by matomo.org, for web analysis and visitor statistics on met.no. The websites use cookies to help us see and analyze how our website is used. The information collected by the cookies about your use of the website is sent to Matomo. The Matomo service we use is provided as a cloud solution. The solution is fully GDPR compliant. Met.no allows our users to opt-out of web analytic tracking, making it possible to use met.no without being tracked. For all our tracking, we use anonymization techniques for IP addresses and other data that the platform offers.

MET Norway uses Google Analytics for web analysis and visitor statistics for some of our research project websites. The websites use cookies to help us see and analyze how our website is used. The information collected by the cookies about your use of the website is sent to Google and stored on the company's servers in the USA. A code removes the last digits from your IP address before the information is stored by Google Analytics. This allows the analytics tool to estimate the user's geographical location, but the address cannot be used to identify you as a user. Google will use this information to evaluate the use of the website, create reports for us on activity on the website, and provide other services related to the activity on the website and the use of the internet. By using the website, you agree that Google processes information about you in this manner and for the purpose described above. It is possible to opt-out of all Google Analytics tracking by installing a browser add-on, which can be downloaded here: Google Analytics Opt-out Browser Add-on.

Received information is subject to Google's privacy policy. MET Norway will use statistical information to improve the website. We will not use the information to identify individuals. Statistical data will not be combined with data from other sources.

Traffic Logs

Network traffic in and out of MET Norway 's network is logged by various infrastructure such as firewalls, DNS servers, VPN, Wi-Fi, log servers, and authentication services. The logs may contain information that can be linked to individuals, such as IP addresses. The purpose of the logs is to prevent misuse of MET Norway 's services and manage data attacks. MET Norway shares such information with certain Norwegian authorities in anonymized form to prevent data attacks or other undesirable behavior.

Email lists are used for information about services, events, changes, or feedback, and not for advertising. Your address will not be used for any other purpose. The legal basis for processing is "consent." You can unsubscribe from the list whenever you wish. See also the section "Processing of Personal Data for Inquiries to MET Norway ." MET Norway has entered into necessary data processing agreements with external providers.

Course Registration and Information about Completed Courses

MET Norway uses the tool LetsReg.no for registration and payment for courses organized by us. Here, names, organization, phone numbers, email addresses, and possibly job titles and dietary preferences are recorded. Data not covered by accounting obligations are deleted after 6 months. In some cases, Google Forms are used as a tool for course registration. Information about completed courses is stored in MET Norway 's archive system and is retained for the lifetime of the service.

Processing of Personal Data on Our Websites

This applies to the websites api.met.no, arcticdata.met.no, arctic-rcc.org, drifty.met.no, fog.met.no, frost.met.no, ftp.met.no, halo.met.no, klimaservicesenteret.no, thredds.met.no, wiki.met.no, icewatch.met.no, luna.met.no, and other websites for research projects.

The system owner for each service is responsible for processing personal data for that service. The legal basis for processing is consent from the individual who wishes to use the service. To access the services, you must provide an email address and, in some cases, a title and phone number to create a user or client ID with a password. This is necessary to provide all users with stable and fast access, efficient use of the service, and to manage access to data not openly available to everyone.

The email address will be used to contact users with information about the service, maintenance, and changes. The information will be stored for the lifetime of the service, unless otherwise specified.

Processing of Personal Data in Recruitment Tools

The system owner is responsible for processing personal data for the recruitment tool. The legal basis for processing is consent from the individual who wishes to apply for a position at MET Norway. JobbNorge is our provider of the recruitment tool. A separate data processing agreement between MET Norway and JobbNorge regulates what information the provider has access to and how it is processed.

Applications are deleted after 120 days. Job applications are not registered in the public electronic post journal (archive), except for the person who is hired. Other documents, such as the list of applicants and recommendations, are retained.

Journal information is not deleted but is restricted in the public electronic post journal (i.e., the applicant's name does not appear).

MET Norway uses the noark system Elements, a fully electronic archive (MET Norway’s public electronic post journal) and case processing system from the provider Sikri AS. Sikri AS is our operations provider and data processor for Elements. There is a data processing agreement between MET Norway and Sikri AS that regulates what information the provider has access to and how it should be processed. The archive manager has delegated system responsibility and is responsible for the archive function, ensuring that necessary updated procedures are available and offering training in the use of the system and procedures. Respective department directors follow up to ensure that actual case processing complies with the procedures.

MET Norway processes personal data to fulfill statutory tasks under the Personal Data Act, the Public Administration Act, the Freedom of Information Act, and the Archives Act.

MET Norway's document center is located at the Norwegian Environment Agency. When contacting the document center, the information is stored in the Environment Agency's ticket system, Topdesk. MET Norway uses the same ticket system as the Environment Agency for its own case handling for incident follow-up. The Environment Agency and MET Norway have entered into a data processing agreement with the relevant provider.

Various types of personal data are registered in the archive and case processing system. This includes information such as name, address, phone number, and email address (metadata). Case documents may also contain sensitive personal data, such as health information. In the case of access requests, any personal data is disclosed in accordance with the Personal Data Act, the Freedom of Information Act, and the Public Administration Act.

MET Norway is required to make its public post journals accessible to the public. A journal is a systematic and continuous registration of all incoming and outgoing case documents. The journals are made available at www.met.no.

Video Surveillance on MET Norway's Property

Visits to MET Norway's Premises

All visitors to MET Norway's premises are registered. In some locations, this is done by signing a visitor log, while in others, it is recorded in our electronic visitor register, Visitor. The systems retain information such as names, company, and who you are visiting. The purpose of visitor registration is to protect MET Norway's assets. The electronic visitor register, Visitor, deletes data annually.

Inquiries to MET Norway

MET Norway receives inquiries via email and phone. If follow-up is needed, information related to the inquiry is logged in ticket systems, case processing systems, or similar, often in an unstructured form. The system owner for each service is responsible for processing personal data for that service. We urge you not to send confidential, sensitive, or other private information via email.

MET Norway uses Google Workspace as an email and collaboration tool. A data processing agreement between MET Norway and Google regulates what information the provider has access to and how it is processed. Transfer to third countries is managed through an agreement on the transfer of information to third countries (MCC) with Google. The information is primarily stored on servers in Europe.

Yr.no

Yr.no is a collaboration between NRK and MET Norway . NRK is responsible for the frontend. For privacy information on yr.no, please see NRK's privacy page. https://developer.yr.no is a documentation page related to yr.no, describing the use of api.met.no/weatherapi/locationforecast/2.0. The page does not require registration and refers to MET Norway's privacy statement. One of the main purposes of the page is to make it easier for app developers who are already familiar with yr.no to use the same data.

Consultants, Guest Researchers, Partners, and Observers

All guest researchers (including students), consultants, partners, and weather observers are registered in our personnel system SAP, provided by the Directorate for Administration and Financial Management (DFØ), and our central access register RI, provided by SIKT, regardless of whether you receive IT access to MET Norway's internal systems. Here, names, personal identification numbers/D-numbers, phone numbers, and email addresses are registered.

All agreements/contracts are stored in our archival solution, Elements, provided by Sikri AS. If the agreement is entered through our competitive system, names of contract partners/providers can be found both in our archival system, Elements, and in our procurement system, Mercell. Your name and phone number may appear unstructured in documents related to tasks carried out for MET Norway. Our collaboration platform is Google Workspace.

Observers and Inspection Personnel

All observers are additionally registered in our crisis and alert system Metcim. Here, contact information such as phone number, name, position, residence, email address, and possibly where you are employed is stored. The provider for METCIM is F24. A data processing agreement between MET Norway and the provider regulates what information the provider has access to and how it is processed. Stinfosys is operated by MET Norway itself, and the data is located on our premises.

The observation station database Stinfosys contains the position (GPS coordinates) and equipment list belonging to the station, contact info for the station owner and maintenance personnel, as well as a history of submitted observations. The data is stored at MET Norway.

Rettinn.met.no is used by MET Norway's technical personnel related to the observation network. Here, images and documents, including agreements linked to the stations, are recorded. The information is stored in MET Norway's central file archive internally at MET Norway.

Guest Researcher

By guest researcher, we mean Master's and PhD students, partners, retirees, and similar individuals who have agreements for access to MET Norway. As a guest researcher, you are treated the same as consultants.

Consultant with Access to MET Norway's Systems and Buildings

Many consultants at MET Norway have access to MET Norway's systems and buildings. As soon as you gain access to our systems, you will receive a user identification (ID) from us.

The ID will be created through our central access register, Rapid Identity, and in our identity registers, local AD, local LDAP, and FEIDE, provided by SIKT. You use SIKT's FEIDE solution to set and change passwords. If you use your own equipment, you will use VPN to access MET's solutions. MET Norway uses security logs in connection with the use of all our services. Here, usernames, timestamps, and IP addresses will be recorded.

If you, as a consultant, will work with collaboration and documents in any form, you will also receive an email account. This is provided by Google. In these cases, the privacy policy for employees applies. This will be presented to you at the start of the assignment in connection with setting the password for your account.

Your Rights