Privacy notice.

Who is responsible for your data

The Nordic Learning Company AB (organisation number 559605-0954), Stockholm, Sweden, is the data controller for the personal data described here.

You can reach us about privacy at privacy@nordiclearning.se.

What we collect

We only ask for what we need to answer you and to run a course.

• Contact details: first name, last name, email address, role and organisation.
• Enquiry details: the course or topic you are interested in, preferred dates, group size, country, funding route and anything you write in the notes field.
• Booking details: billing name and address, VAT or reference numbers, and any dietary or access needs you choose to share with us.
• Course feedback: answers you give in our feedback forms.
• Technical data: standard server logs and a spam score from Google reCAPTCHA when you send the enquiry form.

Why we use it, and our legal basis

• To answer your enquiry and prepare a proposal. Legal basis: our legitimate interest in responding to people who contact us, and steps taken before a contract.
• To deliver a course you have booked, including joining details, certificates and invoicing. Legal basis: performance of a contract.
• To keep accounting records. Legal basis: a legal obligation under Swedish bookkeeping law.
• To send our newsletter. Legal basis: your consent, which you can withdraw at any time.
• To keep the enquiry form free of spam and abuse. Legal basis: our legitimate interest in protecting the site.

Special category data

Dietary needs or access requirements can reveal health or belief information. We ask for these only when you attend a course, we use them only to make the course work for you, and we delete them once the course is finished.

How long we keep it

• Enquiries that do not lead to a booking: 24 months after our last contact, then deleted.
• Participant and course records: 24 months after the course, so we can confirm attendance and reissue certificates.
• Invoices and accounting records: 7 years, as Swedish law requires.
• Newsletter contacts: until you unsubscribe.

Who else sees it

We never sell personal data and we never share it for advertising. We use a small number of service providers who process data on our behalf under written agreements:

• Our hosting and database provider, which stores this website and our course records.
• Our email provider, which delivers messages sent from our own domain.
• Google reCAPTCHA, which checks that form submissions are genuine.
• Our accountant and, where a course is funded by Erasmus+, the sending organisation or national agency that needs proof of attendance.

Where your data is stored

Our data is stored on servers in the European Union. If a provider needs to transfer data outside the EU or EEA, that transfer is covered by the European Commission's standard contractual clauses.

Your rights

Under the GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to limit how we use it, object to our use of it, or ask for it in a portable file. Where we rely on consent, you can withdraw it at any time.

Write to hej@nordiclearning.se and we will reply within 30 days. If you are not happy with our answer, you can complain to the Swedish Authority for Privacy Protection, IMY.

Cookies and tracking

This site uses no advertising cookies and no cross-site tracking. Google reCAPTCHA loads on the enquiry page only, and is used purely to block automated spam. Your browser may store small technical items needed to keep you signed in if you have a staff account.

Security

Access to our course records is limited to named staff, protected by a password and a second step from an authenticator app. Data is encrypted in transit over HTTPS and encrypted at rest by our hosting provider.

AI use and the EU AI Act

We use artificial intelligence in one public-facing place: the Course Concierge suggestion tool on the enquiry page and on the Schools and Organisations overview pages. It reads your description and suggests the most relevant courses, articles or resources.

Some website copy may have been drafted with AI assistance, but it is always reviewed and approved by a real person before it is published.

The Course Concierge is a suggestion tool, not a decision-making system. It cannot make a booking, confirm a place, enter a contract or make any legal decision on your behalf. A real person reviews and follows up on every enquiry.

It is not a high-risk AI system under the EU AI Act. We do not use automated scoring, profiling or biometric analysis.

• We tell you when AI is being used.
• Human oversight is always involved.
• You can ask us how a suggestion was produced.
• You can request a human review of any recommendation.

Changes to this notice

We update this notice when our practices change. This version was published in 2026.