Terms and conditions for the use of EduCloud and TSD

1. Description of the services

1. EduCloud by USIT, University of Oslo (¡°the Service Provider¡±) offers a platform for national and international research projects for collaboration, processing and analysis relating to research data, for institutions in and outside of the university and university college sector.
2. TSD by USIT, University of Oslo (¡°the Service Provider¡±) offers a platform for national and international research projects for collaboration, processing and analysis relating to research data of a sensitive nature, for institutions in and outside of the university and university college sector.

EduCloud and TSD are hereinafter referred to as ¡°the Services¡±.

2. Users

1. The service users (¡°Users,¡± ¡°User¡±) are anyone who uses the Services.

3. Scope

1. These terms and conditions for use apply to both Services (1.1 and 1.2) and are applicable to all Users.
2. For Users that are not affiliated with the University of Oslo (¡°UiO¡±), the service agreement and Data Processing Agreement entered into between the Service Provider and the User¡¯s institution (¡°the Customer¡±) shall also apply.
3. For Users affiliated with UiO (¡°UiO Users¡±), the terms and conditions for use shall apply in addition to the internal procedures applicable at UiO.

4. User and project registration

1. In order to create a project in one of the Services, it is necessary to create a user with a corresponding user account. For Users that are not affiliated with UiO, the service agreement and Data Processing Agreement between the Service Provider and Customer must be in place before a project can be created by a User.
2. The processing of personal data in connection with the use of the Services shall be subject to the Data Processing Agreement between the Service Provider and the Customer (for the service in question) and the associated Privacy Policy. For UiO Users, the EduCloud, TSD and UiO¡¯s general privacy policies shall apply.

5. The Service Provider¡¯s obligations

1. The Service Provider shall be obliged to provide the Service as agreed with the Customer. How the Service is provided may be changed by agreement with the Customer.

6. The User¡¯s obligations

1. • The User shall use Educloud solely for the processing of data up to the Yellow category, as defined in the UiO Classification Guide: /tjenester/it/sikkerhet/lsis/tillegg/lagring/infoklasser.html. The User has a duty not to process data belonging to the Black category in the Service.
   • The User may use TSD for the processing of data up to the Black category, as defined in the UiO Classification Guide: /tjenester/it/sikkerhet/lsis/tillegg/lagring/infoklasser.html.
   • The User shall be obliged to use the Service in line with the purpose of the creation of the project, as defined in the necessary approvals and registrations with the Norwegian Centre for Research Data (NSD), Regional Committees for Medical and Health Research Ethics (REC), the Data Protection Officer or others defined by the data controller.
   • The User shall not share personal data with other parties unless required under the registration with the NSD, approval from REC, recommendation from the Data Protection Officer or other terms/approvals from external parties or the data controller.
   • The User shall have sole responsibility for obtaining the necessary approvals for the processing of personal data. Personal data shall not be processed in the Services in contravention of the necessary approvals, recommendations and/or ethical assessments.
   • The User shall not export personal data from the Services without such export first having been clarified with the data controller institution.
   • The User shall not transfer data to third countries outside of the EEA without such transfer being in line with the necessary approvals, approved by the data controller institution, there being a basis for transfer in place and the necessary security guarantees having been established.
   • The User may not use the Services to export data that is subject to export controls without special permission.
   •  
   • The User shall be obliged to not share their username and password/one-time code with anybody else.
   • The User shall not use the Services in violation of applicable law, including not storing materials that are against the law on the Services or materials that contravene intellectual property rights and not using the Services to perform or attempt to perform actions that are unlawful or harmful to the Services, subcontractors or the University of Oslo.
   • The User shall not store data in the Services for longer than the retention period specified for the project. The Service Provider may delete data associated with a project if the User does not delete the data within 30 days of the expiration of the final retention period upon request from the Service Provider. The Service Provider will retain a backup of the data for 90 days. The data will not be deleted if the Service Provider receives documented instructions from the User or Customer to store the data beyond the original final retention date that has been scheduled.
   • Furthermore, the Service Provider also has the following expectations of its Service Users: