ErrorURL demo site - Privacy Policy

Description of ErrorURL demo site

ErrorURL demo site is a service aimed at system administrators of identity providers registered in SWAMID..

The purpose of the service is to allow the user to test the ErrorURL of its own identity provider.

Processing of personal data

Transfer of personal data

Personal data are transferred from the identity provider (your login service) to the test services to ensure that the identity provider complies with the SWAMID Best Current Practice for Entity Category Attribute Release. When logging in to the respective test service, a unique subset of personal data are requested from the list below from the identity provider you are testing. Each test service stores the set of attributes that have been transferred from the identity provider to the service in order to be able to give a summarised result after the test suite has been completed. The attribute values, that contains personal data, are not stored.

When logging in to these test services, the following personal data are requested from the identity provider you use:

Only indirect personal data, such as which organisation the user belongs to, which identity provider that has been used when logging in and the IP address of the user, is transferred to the service.

Other processing of personal data within the service

The service stores technical logs for debugging purposes and security related incidents. These technical logs contain information regarding all authentications made to the test services and the personal data transferred.

Transfer of personal data to third parties

No personal data are transferred to third parties.

Lawful basis

Personal data are processed on the basis of public interest. Personal data must be transferred in order for the service to work.

Right of access, right of rectification and right of erasure of personal data

No personal data are stored in the service except in technical logs for debugging purposes and security related incidents.

For access and erasure of your personal data, contact the Personal data controller.

Purging of personal data

No personal data are stored in the service except in technical logs. The technical logs are automatically purged within a week.

Personal data controller

Personal data controller for the processing of personal data is The Swedish Research Council, Sweden. If you have questions about how personal data are processed within the service, please contact operations@swamid.se.

Contact information for The Swedish Research Council's data protection officer can be found at https://www.vr.se/behandling-av-personuppgifter.html.