Privacy Policy for Nordisk Kokkekunst Akademi

This Privacy Policy explains how Nordisk Kokkekunst Akademi collects, uses, stores, shares, and protects personal data in connection with its cooking-academy activities, including course registration, student administration, communication, marketing, website use, and related services.

Data controller: Nordisk Kokkekunst Akademi
Address: Dronningens gate 16, 0152 Oslo, Norway
Email: [email protected]
Phone: +47 22 38 74 61

1. Introduction and company information

Nordisk Kokkekunst Akademi is responsible for the processing of personal data collected in connection with its operations as a cooking academy. This Privacy Policy applies to personal data collected from students, prospective students, participants in workshops and events, website visitors, business partners, suppliers, and other individuals who interact with Nordisk Kokkekunst Akademi.

We process personal data in accordance with applicable privacy laws and principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

2. Data collection and processing

Nordisk Kokkekunst Akademi may collect and process the following categories of personal data:

• Identification data: name, date of birth, and similar identifiers.
• Contact data: address, email address, telephone number, and emergency contact details where relevant.
• Registration and course data: course selections, attendance records, dietary preferences, skill level, certifications, and participation history.
• Payment and billing data: invoicing information, payment status, transaction references, and accounting records.
• Communication data: correspondence by email, phone, forms, chat, or other channels.
• Technical data: IP address, browser type, device information, log data, and website usage data.
• Marketing preferences: consent choices, newsletter subscriptions, and communication preferences.
• Special category data: information such as allergies, dietary restrictions, or health-related information, where necessary for course participation, safety, or accommodation, and only where permitted by law.

We generally collect personal data directly from the individual concerned, but we may also receive data from third parties such as payment providers, booking platforms, referral partners, or public sources where lawful.

3. Purpose of data processing

Nordisk Kokkekunst Akademi processes personal data for the following purposes:

• to register participants for courses, workshops, and events;
• to manage student administration and provide educational services;
• to communicate with participants, applicants, customers, and business contacts;
• to process payments, issue invoices, and maintain accounting records;
• to tailor course content, including dietary and safety accommodations;
• to send service-related notices and important updates;
• to conduct marketing, newsletters, and promotional activities where permitted;
• to improve our website, services, operations, and customer experience;
• to comply with legal obligations, including accounting, tax, and recordkeeping requirements;
• to establish, exercise, or defend legal claims;
• to ensure security, prevent misuse, and protect our premises, systems, and users.

4. Legal basis for processing

We process personal data only when we have a valid legal basis. Depending on the context, the legal basis may include:

• Performance of a contract: where processing is necessary to provide courses, handle registrations, or fulfill related obligations.
• Compliance with legal obligations: where processing is required under accounting, tax, consumer, or other applicable laws.
• Legitimate interests: where processing is necessary for the legitimate interests of Nordisk Kokkekunst Akademi, provided those interests are not overridden by the individual’s rights and freedoms.
• Consent: where we rely on your consent, for example for certain marketing communications or the processing of specific sensitive information where required.
• Protection of vital interests: in limited cases, for example where emergency health information is needed to protect a participant’s safety.

Where we process special category data, such as allergy or health-related information, we do so only when strictly necessary and in accordance with applicable legal requirements.

5. Data sharing and third parties

Nordisk Kokkekunst Akademi may share personal data with third parties only when necessary and appropriate for the purposes described in this Privacy Policy. Such recipients may include:

• IT and cloud service providers;
• payment processors and banking partners;
• accountants, auditors, and legal advisors;
• booking, registration, and customer management platforms;
• marketing and communication service providers;
• delivery and logistics providers, where applicable;
• public authorities, courts, or regulators when required by law;
• insurance providers and claims handlers, where relevant.

We require third parties to protect personal data and to process it only on our instructions or as otherwise permitted by law. We do not sell personal data.

6. Data transfer to third countries

In some cases, personal data may be transferred to or accessed from countries outside Norway or the European Economic Area (EEA), for example when using international service providers or cloud-based tools.

Where such transfers occur, Nordisk Kokkekunst Akademi takes appropriate safeguards to ensure an adequate level of protection, which may include:

• adequacy decisions by competent authorities;
• standard contractual clauses or equivalent transfer mechanisms;
• additional technical and organizational measures where necessary.

You may contact us for further information about relevant transfer safeguards.

7. Storage duration

Nordisk Kokkekunst Akademi retains personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may depend on the type of data and purpose, including:

• Course and student records: retained for the duration of the relationship and for a reasonable period thereafter.
• Accounting and tax records: retained for the period required by applicable law.
• Marketing data: retained until consent is withdrawn or you object, unless another lawful basis applies.
• Communication records: retained as long as necessary to handle the inquiry and for follow-up or documentation purposes.
• Security logs: retained for a limited period unless needed for investigation or legal claims.

When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with our retention practices and legal obligations.

8. User rights (access, rectification, erasure, restriction, data portability, objection)

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: the right to obtain confirmation and a copy of the personal data we process about you.
• Rectification: the right to request correction of inaccurate or incomplete data.
• Erasure: the right to request deletion of your personal data in certain circumstances.
• Restriction: the right to request that we limit the processing of your data in certain situations.
• Data portability: the right to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
• Objection: the right to object to processing based on legitimate interests and to direct marketing at any time.

To exercise your rights, please contact Nordisk Kokkekunst Akademi using the contact details below. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.

9. Withdrawal of consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You may withdraw consent by contacting us at [email protected] or by using any unsubscribe or preference-management option provided in our communications, where available.

10. Right to complain

If you believe that Nordisk Kokkekunst Akademi has processed your personal data in violation of applicable privacy laws, you have the right to lodge a complaint with the competent supervisory authority.

You may also contact us first so that we can try to resolve your concern directly. We welcome the opportunity to address any questions or complaints regarding our privacy practices.

11. Data security

Nordisk Kokkekunst Akademi implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include:

• access controls and role-based permissions;
• secure passwords and authentication procedures;
• encryption or other protective technologies where appropriate;
• staff confidentiality obligations and privacy training;
• regular review of systems, processes, and security practices;
• backup and recovery procedures;
• physical security measures at our premises.

Although we take reasonable steps to protect personal data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.

12. Contact information

If you have questions about this Privacy Policy or our processing of personal data, or if you wish to exercise your rights, please contact:

Nordisk Kokkekunst Akademi
Dronningens gate 16, 0152 Oslo, Norway
Email: [email protected]
Phone: +47 22 38 74 61

13. Changes to privacy policy

Nordisk Kokkekunst Akademi may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. The updated version will be published in an appropriate manner, and the date of the latest revision may be indicated where applicable.

We encourage you to review this Privacy Policy periodically to stay informed about how we process personal data.