Privacy & Data Protection Policy

Last updated: September 2026 • Effective for TACADEMY AS

1. Data Controller Identification

This Privacy Policy outlines how TACADEMY AS ("the Academy", "we", "us", or "our"), registered under Norwegian organization number 938 291 047, collects, processes, and safeguards personal data obtained from website visitors, course applicants, enrolled participants, and corporate partners.

2. Legal Basis for Data Processing

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and the Norwegian Personal Data Act (Personopplysningsloven). Our processing relies on the following lawful bases:

• Contractual Performance (GDPR Art. 6(1)(b)): Processing necessary to fulfill educational service agreements, deliver syllabus materials, administer admissions, and grant access to study platforms.
• Legal Obligation (GDPR Art. 6(1)(c)): Compliance with Norwegian statutory bookkeeping, financial reporting (Bokføringsloven), and corporate governance obligations.
• Legitimate Interests (GDPR Art. 6(1)(f)): Maintaining server integrity, preventing fraudulent enrollments, and enhancing instructional curriculum delivery.
• Consent (GDPR Art. 6(1)(a)): Explicit consent provided when subscribing to academic newsletters or voluntary research surveys.

3. Categories of Information Collected

We collect only data necessary for academic and administrative operations:

• Identity & Contact Data: Full name, institutional or professional email address, telephone number, job title, and postal address for materials dispatch.
• Enrollment & Academic Records: Course registrations, module completion metrics, assessment submissions, and certificate issuance records.
• Financial & Billing Data: Invoicing details, company organization number, KID numbers, and transactional payment confirmations (payment card numbers are processed directly by certified payment gateways and never stored on our servers).
• Technical Usage Data: IP address, browser type, operating system, access timestamps, and page interaction parameters collected via secure server logs.

4. Data Sharing and Third-Party Processors

TACADEMY AS does not sell, rent, or trade personal data. Data is shared strictly with authorized data processors under binding Data Processing Agreements (DPAs):

• Secure cloud hosting and learning management infrastructure located within the EEA.
• Authorized logistics providers for physical syllabus delivery across Norway and the EEA.
• Regulated banking and electronic payment processors.
• Norwegian public authorities where required by mandatory legislation.

5. International Data Transfers

All core databases and servers utilized by TACADEMY AS are situated within Norway and the European Economic Area (EEA). If auxiliary technical services require processing outside the EEA, transfers are conducted under EU Standard Contractual Clauses (SCCs) to guarantee equivalent data protection.

6. Retention Period

Personal information is retained only as long as necessary to fulfill the educational purpose for which it was gathered. Financial transaction records are retained for 5 years in compliance with the Norwegian Bookkeeping Act (Bokføringsloven). Academic credentials and certificates are archived securely to allow graduates to verify past completion.

7. Your Data Subject Rights

Under GDPR and Norwegian data protection law, you possess the right to:

• Access: Request confirmation and copies of personal data held concerning you.
• Rectification: Request correction of inaccurate or incomplete records.
• Erasure ("Right to be Forgotten"): Request deletion of personal data where legal retention grounds no longer apply.
• Restriction & Objection: Object to processing based on legitimate interests or request temporary processing restrictions.
• Data Portability: Obtain your personal data in a structured, machine-readable format.
• Lodge a Complaint: File a grievance with the Norwegian Data Protection Authority (Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, www.datatilsynet.no).

8. Contact for Privacy Inquiries

To exercise any data rights or submit inquiries regarding our privacy standards, contact:

TACADEMY AS – Data Protection Officer
Brandstadkollen 7, 1550 Hølen, Norway
Email: [email protected]
Telephone: +47 64 98 21 40