Privacy Policy

1. Introduction and Company Information

This Privacy Policy explains how Nordisk Læringshus ApS (“we”, “us”, or “our”) collects, uses, discloses, and protects personal data in connection with our school activities and related services.

Data controller: Nordisk Læringshus ApS
Address: Nørrebrogade 45, 2200 København N, Denmark
Email: [email protected]
Phone: +45 32 74 89 16

We process personal data in accordance with applicable privacy and data protection laws, including the General Data Protection Regulation (GDPR) and relevant Danish data protection legislation.

2. Data Collection and Processing

We may collect and process the following categories of personal data, depending on your relationship with us:

• Identification data: name, date of birth, student ID, and similar identifiers.
• Contact data: address, email address, telephone number, and emergency contact details.
• Educational data: enrollment information, attendance, grades, assessments, learning support needs, and academic progress.
• Administrative data: payment information, invoicing details, agreements, and correspondence.
• Technical data: IP address, device information, browser type, and usage data from our website or digital services.
• Special categories of data: where necessary and permitted by law, we may process health information, learning support needs, or other sensitive information relevant to education, safeguarding, or student welfare.

We collect personal data directly from you, from parents or guardians, from educational authorities where applicable, and from third parties involved in the provision of educational services, subject to legal requirements.

3. Purpose of Data Processing

We process personal data for the following purposes:

• to provide education, teaching, and related student services;
• to administer enrollment, attendance, examinations, and academic records;
• to communicate with students, parents, guardians, and relevant authorities;
• to support student welfare, safeguarding, and learning support;
• to manage billing, payments, and contractual matters;
• to comply with legal and regulatory obligations;
• to maintain security, prevent misuse, and protect our premises, systems, and users;
• to improve our services, website, and internal operations;
• to handle inquiries, complaints, and disputes.

4. Legal Basis for Processing

We only process personal data where we have a valid legal basis. Depending on the context, our processing may be based on:

• Performance of a contract: where processing is necessary to provide educational services or related agreements.
• Legal obligation: where processing is required to comply with applicable laws, regulations, or official requests.
• Legitimate interests: where processing is necessary for our legitimate interests, such as administration, security, and service improvement, provided that these interests are not overridden by your rights and freedoms.
• Consent: where we rely on your consent, for example for certain communications, optional services, or specific processing of sensitive data where required by law.
• Public interest or exercise of official authority: where applicable in the educational context under relevant law.

For special categories of personal data, we process such data only where a lawful exception applies, such as explicit consent, legal obligations, or where necessary for reasons related to education, safeguarding, or substantial public interest under applicable law.

5. Data Sharing and Third Parties

We may share personal data with third parties only where necessary and lawful, including:

• IT and hosting providers;
• administrative, accounting, and payment service providers;
• communication and email service providers;
• educational support providers and learning platform vendors;
• public authorities, regulators, or law enforcement where required by law;
• professional advisers, such as lawyers, auditors, and consultants;
• other parties with your consent or at your request.

We require third parties to handle personal data securely and in accordance with applicable data protection requirements. They may only process data on our instructions or as otherwise permitted by law.

6. Data Transfer to Third Countries

In some cases, personal data may be transferred to or accessed from countries outside the European Economic Area (EEA). If such transfers occur, we will ensure appropriate safeguards are in place, such as:

• an adequacy decision by the European Commission;
• standard contractual clauses approved by the European Commission;
• additional technical and organizational measures where necessary;
• other lawful transfer mechanisms permitted under applicable law.

Where required, you may request information about the safeguards used for international transfers by contacting us using the details below.

7. Storage Duration

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, educational, and reporting obligations.

• Student and educational records: retained for the period required by applicable educational and archival rules.
• Financial and accounting records: retained for the period required by tax and accounting laws.
• Communication and inquiry data: retained for as long as needed to handle the matter and for a reasonable period thereafter.
• Consent-based processing: retained until consent is withdrawn, unless another legal basis applies.

When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with applicable law and our retention procedures.

8. User Rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Right of access: to obtain confirmation and a copy of the personal data we process about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of personal data in certain circumstances.
• Right to restriction: to request that we limit processing in certain situations.
• Right to data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller.
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.

Please note that these rights are not absolute and may be subject to legal exceptions, particularly in the educational context where we must retain or process certain data to comply with legal obligations or to provide educational services.

9. Withdrawal of Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we may no longer be able to provide certain optional services or features. We will inform you if this is the case.

10. Right to Complain

If you have concerns about how we process personal data, we encourage you to contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the relevant supervisory authority, including:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
Website: www.datatilsynet.dk

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include:

• access controls and role-based permissions;
• password protection and authentication measures;
• encryption where appropriate;
• secure storage and backup procedures;
• staff training and confidentiality obligations;
• regular review of security practices and incident response procedures.

While we strive to protect personal data, no system can be guaranteed to be completely secure. In the event of a personal data breach, we will take appropriate action in accordance with applicable law.

12. Contact Information

If you have questions about this Privacy Policy or our processing of personal data, or if you wish to exercise your rights, please contact us:

Nordisk Læringshus ApS
Nørrebrogade 45, 2200 København N, Denmark
Email: [email protected]
Phone: +45 32 74 89 16

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated version will be published with a revised effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how we process personal data.