Privacy Policy for NordSpråk Akademi

This Privacy Policy explains how NordSpråk Akademi collects, uses, stores, shares, and protects personal data in connection with its language-school services, including course registration, student administration, communication, teaching activities, website use, and related services.

Data controller: NordSpråk Akademi
Address: Schweigaards gate 34, 0191 Oslo, Norway
Email: [email protected]
Phone: +47 22 17 84 36

This Privacy Policy applies to students, prospective students, parents or guardians, course participants, website visitors, and other individuals whose personal data is processed by NordSpråk Akademi.

1. Introduction and company information

NordSpråk Akademi is a language school that provides language courses, educational services, student support, and related administrative functions. In order to operate effectively and deliver these services, NordSpråk Akademi processes personal data in accordance with applicable privacy laws and principles of fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

NordSpråk Akademi acts as the data controller for the personal data described in this Privacy Policy, unless otherwise stated.

2. Data collection and processing

NordSpråk Akademi may collect and process the following categories of personal data:

• Identification data: name, date of birth, nationality, and student ID or similar identifiers.
• Contact data: address, email address, telephone number, and emergency contact details.
• Registration and course data: course selection, attendance records, level assessments, progress information, certificates, and educational history relevant to the course.
• Payment and billing data: invoice details, payment status, and transaction information.
• Communication data: correspondence with NordSpråk Akademi by email, phone, contact forms, or other channels.
• Technical data: IP address, browser type, device information, log data, and website usage data.
• Special category data: where necessary and permitted by law, limited health-related information or other sensitive data may be processed, for example to accommodate accessibility needs, dietary requirements, or special educational support.
• Image and audio data: photographs, video, or recordings only where relevant and lawful, such as for teaching, events, or with consent where required.

Personal data may be collected directly from you, from a parent or guardian, from an employer or sponsor if they pay for your course, from publicly available sources, or from third parties involved in service delivery.

3. Purpose of data processing

NordSpråk Akademi processes personal data for the following purposes:

• to register students and manage enrolment;
• to provide language teaching, assessments, and educational support;
• to communicate with students, parents, guardians, and other relevant contacts;
• to manage attendance, progress, and certification;
• to process payments, invoices, and refunds;
• to comply with legal and regulatory obligations;
• to maintain internal administration, quality assurance, and service improvement;
• to ensure safety, security, and proper conduct at the school;
• to handle inquiries, complaints, and requests;
• to operate and improve the website, digital platforms, and IT systems;
• to send relevant service information and, where permitted, marketing communications;
• to protect the rights, property, and legitimate interests of NordSpråk Akademi, students, staff, and others.

4. Legal basis for processing

NordSpråk Akademi processes personal data only where there is a valid legal basis. Depending on the context, the legal basis may include:

• Performance of a contract: when processing is necessary to enrol students, provide courses, or manage related services.
• Legal obligation: when processing is required to comply with accounting, tax, education, safety, or other legal requirements.
• Legitimate interests: when processing is necessary for the legitimate interests of NordSpråk Akademi or a third party, provided those interests are not overridden by your rights and freedoms.
• Consent: where you have given clear consent, for example for certain marketing activities, photographs, recordings, or specific categories of sensitive data where required.
• Vital interests: in rare cases where processing is necessary to protect someone’s vital interests.
• Public interest or official authority: where applicable under relevant law.

Where special category data is processed, NordSpråk Akademi will only do so where a lawful exception applies under applicable privacy law.

5. Data sharing and third parties

NordSpråk Akademi may share personal data with third parties only when necessary and lawful. Such recipients may include:

• payment service providers and banks;
• IT and cloud service providers;
• email, communication, and learning platform providers;
• accountants, auditors, and legal advisers;
• public authorities where required by law;
• insurance providers;
• teachers, instructors, and administrative staff acting on behalf of NordSpråk Akademi;
• external exam bodies or certification providers, where relevant to the course;
• other service providers engaged to support operations.

NordSpråk Akademi requires third parties that process personal data on its behalf to protect the data appropriately and to process it only in accordance with instructions and applicable law.

6. Data transfer to third countries

In some cases, personal data may be transferred to or accessed from countries outside Norway, the EEA, or the jurisdiction where the data was originally collected. This may occur when NordSpråk Akademi uses international service providers or communication tools.

Where such transfers take place, NordSpråk Akademi will ensure that appropriate safeguards are in place, such as:

• an adequacy decision by the relevant authority;
• standard contractual clauses or equivalent transfer mechanisms;
• additional technical and organisational measures where necessary;
• other lawful transfer mechanisms permitted by applicable privacy law.

7. Storage duration

NordSpråk Akademi retains personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods may vary depending on the type of data and the purpose of processing.

In general:

• student and course administration data are kept for the duration of the course and for a reasonable period thereafter;
• accounting and payment records are retained for the period required by applicable financial and tax laws;
• communication records are kept as long as needed to handle the relevant matter;
• consent-based data is kept until consent is withdrawn or the purpose ends;
• website and technical log data are retained for a limited period unless a longer period is necessary for security or legal reasons.

When personal data is no longer needed, NordSpråk Akademi will delete, anonymise, or securely archive it in accordance with applicable law and internal retention procedures.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Right of access: to obtain confirmation of whether your data is being processed and to receive a copy of that data.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your data in certain circumstances.
• Right to restriction: to request that processing be restricted in certain situations.
• Right to data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
• Right to object: to object to processing based on legitimate interests or to direct marketing.

To exercise your rights, please contact NordSpråk Akademi using the contact details provided below. NordSpråk Akademi may ask for information necessary to verify your identity before responding to your request.

Some rights may be limited where processing is necessary to comply with legal obligations, protect the rights of others, or for other lawful reasons.

9. Withdrawal of consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, NordSpråk Akademi will stop the relevant processing unless there is another lawful basis for continuing it.

10. Right to complain

If you believe that NordSpråk Akademi has processed your personal data in violation of applicable privacy law, you have the right to lodge a complaint with the relevant supervisory authority.

In Norway, the relevant authority is the Norwegian Data Protection Authority (Datatilsynet). You may also contact NordSpråk Akademi first so that concerns can be reviewed and addressed directly.

11. Data security

NordSpråk Akademi takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction. These measures may include:

• access controls and role-based permissions;
• secure passwords and authentication measures;
• encryption and secure transmission where appropriate;
• regular backups and system monitoring;
• staff training on confidentiality and data protection;
• internal policies for handling personal data and security incidents;
• vendor and processor oversight.

While NordSpråk Akademi works to protect personal data, no system can be guaranteed to be completely secure. In the event of a personal data breach, NordSpråk Akademi will handle the matter in accordance with applicable legal requirements.

12. Contact information

If you have questions about this Privacy Policy, wish to exercise your rights, or need further information about how NordSpråk Akademi processes personal data, please contact:

NordSpråk Akademi
Schweigaards gate 34, 0191 Oslo, Norway
Email: [email protected]
Phone: +47 22 17 84 36

13. Changes to privacy policy

NordSpråk Akademi may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, technology, or services. The updated version will be published in an appropriate manner, such as on the website or through direct communication where necessary.

We encourage you to review this Privacy Policy periodically to stay informed about how NordSpråk Akademi processes personal data.