Privacy policy

Who is responsible

Nordic Data Center Academy is run by SDC AS (organisation number 937 806 434), Svidalsvegen 282, 6847 Vassenden, Norway. SDC AS is the controller for the personal data described here. SDC AS also runs SDC-Platform (sdc-platform.com). Write to us at hello@nordicdatacenteracademy.com with any question about this policy or about your data.

What we collect

When you register your interest we store:

• your name, work email address, company and country;
• the levels you are interested in (Professional, Specialist, Expert, or not sure yet);
• your consent choices and the version of the consent text you saw;
• a reference for your registration, the time you registered, and whether our emails were sent.

We also process technical data to protect the form: your IP address is used briefly to limit the number of requests and to run the security check, and is not stored with your registration. Error reports contain no name, email address or security-check token. Analytics run only if you accept them (see the cookie notice).

Why we use your data, and on what basis

• To keep your registration, send you a confirmation and contact you when course dates for the levels you chose, or closely related courses, are published. Basis: your consent (GDPR Article 6(1)(a)).
• To send you occasional news about new courses and dates, only if you ticked the optional box. Basis: your consent (Article 6(1)(a)).
• To protect the form against abuse and keep the service secure. Basis: our legitimate interest (Article 6(1)(f)).
• To measure how the site is used, only after you accept analytics. Basis: your consent (Article 6(1)(a)).

A registration of interest is not an order and creates no purchase. You can withdraw your consent at any time. Withdrawing does not affect processing done before.

We do not sell your data, and we do not share your registration with EPI. When you book a course later, we share only what is needed to deliver your course and exam, and we tell you about it when you book.

Who receives your data

We use these processors, under data processing agreements:

• Supabase: database for registrations, stored in the EU (Frankfurt).
• Vercel: hosting of this website.
• Resend: delivery of the confirmation email and our internal notification.
• Cloudflare Turnstile: security check on the form.
• Upstash: request limiting (IP address, short-lived), in the EU (Frankfurt).
• Sentry: error monitoring, without personal data from the form.
• PostHog: product analytics, only after you accept analytics.

Some of these providers are established in the United States or may process data outside the EEA. Where that happens, the transfer relies on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

How long we keep it

We delete your registration 24 months after you registered, or earlier if you withdraw your consent or ask us to.

Your rights

You have the right to:

• ask for access to the data we hold about you;
• have incorrect data corrected;
• have your data deleted;
• restrict or object to processing, and receive your data in a portable format;
• withdraw your consent at any time.

To use these rights, write to hello@nordicdatacenteracademy.com and include the reference from your confirmation. We reply within one month. You can also complain to the Norwegian Data Protection Authority (Datatilsynet), or to the data protection authority where you live or work.

Changes to this policy

We update this page when our processing changes. The date at the top shows the latest change.