Privacy policy

We only process personal data that is necessary for the relevant purpose. This may include your name, address, email address, telephone number, course booking details and other information that you provide to us in connection with an enquiry or a course.

The data is mainly used for the following purposes:

• process enquiries and registrations
• administer and provide courses
• communicate with participants before, during and after the course
• issue invoices and maintain accounting records
• comply with other legal obligations

Legal basis for processing

We process personal data on the following legal bases:

• Performance of a contract: Where processing is necessary to enter into or perform a contract with you, for example when registering for, administering and providing a course (Article 6(1)(b) GDPR).
• Legal obligation: Where we are required by law to process or retain personal data, for example in connection with accounting and bookkeeping (Article 6(1)(c) GDPR).
• Consent: Where the processing of personal data requires consent, for example when using analytics, statistics or marketing tools on our website, the data is only processed after consent has been given (Article 6(1)(a) GDPR). Consent may be withdrawn at any time.
• Legitimate interests: In certain cases, we may process personal data where this is necessary for a legitimate interest, for example to respond to general enquiries or to ensure the security of our website and IT systems, provided that the rights and interests of the data subject do not override those interests (Article 6(1)(f) GDPR).

Retention period

Personal data is retained only for as long as necessary for the purpose for which it was collected.

Data that is required solely for the administration and follow-up of a course is normally deleted no later than two years after the course has ended, unless there is another legitimate or legal reason for retaining it for longer.

Data contained in invoices, accounting records or other documentation that we are legally required to retain is kept for as long as required by applicable law.

Recipients and service providers

We may use external service providers, for example for accounting, email services and the operation or administration of our website. Personal data is only shared where this is necessary for the relevant service or where we are legally required to do so.

Where a service provider processes personal data on our behalf, we enter into a data processing agreement where required under the GDPR.

Transfer outside the EU/EEA

If a service provider processes personal data outside the EU/EEA, the transfer will take place in accordance with the GDPR and on the basis of a valid transfer mechanism.

Cookies and similar technology

Our website uses cookies and similar technologies. Cookies that are necessary for the website to function may be used without consent. Analytics, statistics or marketing tools that require consent are only activated after consent has been given.

When you visit our website, our cookie tool provides information about the cookies and services used, their purposes and any third-party providers involved. You can choose which categories you wish to consent to. You can later change or withdraw your consent at any time through the cookie tool.

Your rights

Depending on the processing and the applicable legal basis, you may have the following rights under the GDPR:

• access to the personal data we process about you
• rectification of inaccurate or incomplete data
• erasure of personal data
• restriction of processing
• data portability
• to object: You may object to processing based on legitimate interests.
• to withdraw consent: You may withdraw your consent when the processing is based on your consent.

Some of these rights are subject to exceptions. For example, we cannot delete data that we are legally required to retain.

To exercise your rights, you can contact us at: leif-norway@gmx.info.

Right to lodge a complaint

If you believe that our processing of personal data is in breach of data protection law, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

Information Commissioner's Office
www.datatilsynet.no
Phone: +47 22 39 69 00
Email: postkasse@datatilsynet.no