Legal
Privacy Policy.
How we collect, use, and protect personal data, under the EU General Data Protection Regulation (GDPR) and Danish law.
Draft, pending legal review.
This document is a working draft prepared to describe our current practices. It is not yet a final legal notice and will be reviewed by qualified counsel before publication as our formal policy.
1. Data controller
Nordic Education Academy is the data controller for personal data processed through this website.
Nordic Education Academy · Copenhagen, Denmark
Email: info@nordiceducationacademy.com
A Danish CVR (business registration) number is not currently listed on this page.
2. What we collect
When you submit the contact form on this website, we collect the information you choose to provide: typically your name, email address, organisation, and the message you write. We do not use analytics or advertising cookies that identify you personally.
3. Why we process it, and the legal basis
We use this information solely to respond to your enquiry, understand whether we are a fit for your school, and follow up on the conversation you initiated. The legal basis under GDPR Article 6(1)(b) is that processing is necessary to take steps at your request prior to entering into any engagement, and Article 6(1)(f), our legitimate interest in responding to unsolicited business enquiries.
4. Retention
Enquiry data is retained for up to 24 months from your last contact with us, after which it is deleted unless we have an active or ongoing engagement with your organisation. If we enter a formal engagement, records related to that engagement are retained for the period required by Danish accounting and contract law (typically five years).
5. Who receives your data
Access to enquiry data is limited to the founders and any staff directly supporting them. We use a small number of standard business tools (email, form processing, and hosting) whose providers act as data processors under GDPR-compliant agreements. We do not sell personal data and we do not share it with third parties for marketing.
6. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data ("right to be forgotten").
- Object to processing based on legitimate interest.
- Withdraw any consent you previously gave.
- Lodge a complaint with the Danish Data Protection Authority (Datatilsynet), datatilsynet.dk.
To exercise any of these rights, email info@nordiceducationacademy.com.
7. Changes to this policy
We will update this page when our practices change or when our final legal review is complete. The current version was last updated on 2026-07-25.
Questions? Contact us.