Box.com Privacy policy

Name of the service

Box.com - https://box.com

Description of the service

A cloud storage and collaboration platform.

Contact person

If you have questions about how your data is handled you can contact:

box.com
privacy@box.com

NOC
noc @ nordu.net

Jurisdiction

DK Denmark

What data does box.com require?

A. Following data is retrieved from your Home Organisation:

• Your given name and surname
  • Used as your name on box.com.
• mail
  • Used to identify your account on box.com.
• schacHomeOrganization - your organization's primary domain
  • This is used to grant you access to your organization's box.com.
• eduPersonEntitlement
  • This is used to decide if you have access to your organization's box.com.
• eduPersonScopedAffiliation - affiliation within your organization such as student, faculty, staff, alum, etc.
  • This is used to decide if you have access to your organization's box.com.
• eduPersonAffiliation - affiliation within your organization such as student, faculty, staff, alum, etc.
  • This is used to decide if you have access to your organization's box.com.
• eduPersonPrimaryAffiliation - affiliation within your organization such as student, faculty, staff, alum, etc.
  • This is used to decide if you have access to your organization's box.com.

Retention of personal data

box.com will keep names, mail and home organization until you choose to delete your account.

Principles of protecting personal data

The site is using TLS to protect your communication with our server. box.com encrypt your Content when it is stored at rest in their data centers.

More info at: The box privacy policy

The server is kept up to date with security updates handled by administrators.

Disclosure of personal data to third parties

Your data ('displayName', 'sn', 'givenName', 'mail', 'schacHomeOrganization', 'mailLocalAddress', 'proxyAddresses', 'eduPersonEntitlement') is passed on to the box.com service which per their privacy policy are GRDP compliant.

Transfer of personal data outside the EU or EEA

Box complies with the EU-U.S. and Swiss-U.S. Privacy Shield Framework for the transfer of personal data we process on behalf of Organizations in Business Accounts. For more info see: privacy policy

The right to know which data we have on you

You can contact the box.com DPO using the information available at privacy policy

How to access, rectify and delete personal data

You can update your information on your accout page, which is also where you can see who your admin contact is who can help you delete your personal data.

Data protection Code of Conduct

Your personal data will be protected according to the Code of Conduct for Service Providers, a common standard for the research and higher education sector to protect your privacy.