Privacy Policy for Norskstudio

Last Updated: March 14, 2025

Introduction

Welcome to Norskstudio. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

1. Important Information and Who We Are

Purpose of This Privacy Policy

This privacy policy aims to give you information on how Norskstudio collects and processes your personal data through your use of this application, including any data you may provide when you create an account, use our services, or interact with our application.

This privacy policy is compliant with the Norwegian Personal Data Act (Personopplysningsloven) which implements the EU General Data Protection Regulation (GDPR) in Norwegian law, as well as other applicable Norwegian privacy regulations.

Data Controller

Ekspertkanalen.no is the controller responsible for your personal data (collectively referred to as "we", "us" or "our" in this privacy policy), registered in Norway and subject to Norwegian data protection laws.

2. The Data We Collect About You

We may collect, use, store and transfer different kinds of personal data about you as follows:

  • Identity Data includes email address.
  • Profile Data includes your profile picture (if provided through a federated login).
  • Usage Data includes information about how you use our application, such as quiz results, learning progress, and achievements.
  • Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this application.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data).

3. How We Collect Your Personal Data

We use different methods to collect data from and about you including through:

  • Direct interactions. You may give us your Identity and Profile Data by creating an account.
  • Automated technologies or interactions. As you interact with our application, we automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies.
  • Third parties. We may receive personal data about you from third parties such as Google, if you choose to login using a federated identity provider.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal obligation.

Purposes for Which We Will Use Your Personal Data

  • To register you as a new user
  • To provide and improve our language learning services
  • To manage our relationship with you
  • To administer and protect our business and this application
  • To track your progress and provide personalized learning experiences
  • To analyze usage patterns to improve our application

5. Data Storage and Security

Your data is stored in Supabase with appropriate security rules that restrict access to your personal data. Our application is hosted on Vercel with European servers. We have implemented measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements under Norwegian law.

Specifically:

  • Account information: Retained as long as your account is active. After account deletion, this data will be removed within 30 days.
  • Quiz and progress data: Retained for the lifetime of your account to enable progress tracking.
  • Usage data: Retained for 26 months in our analytics platform.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, as well as the applicable Norwegian legal requirements.

7. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Right to withdraw consent.

If you wish to exercise any of these rights, please contact us.

8. Analytics

We use Google Analytics to help us understand how our users use the application. Google Analytics uses cookies to collect information about how you interact with our website. This information is used to compile reports and to help us improve our application.

We have implemented the following measures to ensure our use of Google Analytics is more privacy-friendly:

  • We have enabled IP anonymization, which means your IP address is truncated within EU member states before being transmitted to Google servers
  • We have disabled data sharing with Google products and services
  • We have configured data retention settings to minimize storage duration
  • We have accepted the data processing amendment provided by Google

Despite these measures, please be aware that Google may transfer and process data on servers located outside of the EU. By using our service, you consent to this potential transfer of data.

9. International Transfers

Our Supabase database and Vercel hosting services are located within the European Union, meaning your main application data is processed and stored within the EEA in compliance with Norwegian data protection laws.

However, limited data may be transferred outside the European Economic Area (EEA) when using Google Analytics as discussed in Section 8. When such transfers occur, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • Transferring your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
  • Using standard contractual clauses (SCCs) approved by the European Commission which give personal data the same protection it has in Europe.
  • Relying on approved certification mechanisms or codes of conduct for international data transfers.

We regularly review our data processing activities to minimize international data transfers whenever possible.

10. Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this application may become inaccessible or not function properly.

11. Changes to This Privacy Policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date at the top.

12. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

Ekspertkanalen.no
Email: post@ekspertkanalen.no

Norwegian Data Protection Authority

You have the right to make a complaint at any time to the Norwegian Data Protection Authority (Datatilsynet), Norway's supervisory authority for data protection issues (www.datatilsynet.no). We would, however, appreciate the chance to deal with your concerns before you approach Datatilsynet, so please contact us in the first instance.

Norwegian Business Information

Our business is registered in Norway with organization number 934291115.

Contact information
Ekspertkanalen
Email: post@ekspertkanalen.no
Address: Stasjonsveien 50 C, 1467 Strømmen

Noe du savner?

© Ekspertkanalen.no 2025