This “Privacy Policy” addresses any processing of personal data by Ambition Profile Academy AS ("Ambition Profile Academy", “us” or “we”) when you access Ambition Profile Academy’s platforms, products, services, technologies, and websites (“Platform Services”), or social media, and portals.
 

Ambition Profile Academy processes personal data both as a data controller and as a data processor. This Privacy Policy applies when we are the data controller and determine the purpose of the processing. When we act as the data processor, the relevant Service Agreement and Data Processing Agreement apply between Ambition Profile Academy and its customers.
 

1. Individuals who are subject to the processing of personal data
 

Ambition Profile Academy processes personal data related to the following data subjects:
 

i. Contact persons with our customers

ii. Contact persons with our suppliers and partners

iii. Users of Platform Services

iv. Participants in workshops, seminars, courses, and other events

v. Individuals sending us requests or who are otherwise in contact with us

​

2. Purposes, types of personal data, and legal bases
 

We have listed the typical purposes for our processing of personal data, the categories of personal data we typically process, and the legal bases for the processing below.
 

2.1. Establishing customer relationships

When contacting a potential customer or onboarding a customer, we will register the contact person’s details in our systems. We primarily gather the name, telephone number, and email address. The basis for this processing is outlined in GDPR Article 6 (1)(f), balancing of interests, where our interest lies in entering into an agreement with the customer, following up on this agreement, invoicing, and communicating with our customer.
 

2.2. Suppliers and partners

We process personal data about our contacts at suppliers and partners to manage the contracts and relationships with these entities. We mainly process the names, phone numbers, and email addresses of contact persons at each party. The basis for this processing is outlined in GDPR Article 6 (1) (f), where our legitimate interest is in fulfilling our agreements and managing our relationships with suppliers and partners.
 

2.3. The use of Platform Services

When you use our platform, we collect certain personal data to provide and improve our services. To access our services as a trainer, you'll need an account. When we create your user account, we collect personal data such as your name, email address, mobile phone number, role, language preferences, employer, and account credentials. The basis for this processing is outlined in GDPR Article 6 (1) (b).
 

When a respondent uses our platform, we collect and process certain personal data. Although respondents do not create an account, we register their name and email address to connect them to the surveys they complete. Additionally, we collect the answers provided during the survey and store the calculations of these answers, including the associated category under which they are categorized. This data is essential for presenting the survey results.  The basis for this processing is outlined in GDPR Article 6 (1) (a)
 

2.4. Cookies

We use cookies to ensure our Platform Services, i.e., website, function effectively and to enhance the user experience. Essential cookies are strictly necessary for the operation of our website, enabling core functionalities such as page navigation and access to secure areas. Without these cookies, the website cannot function properly. We use such essential cookies as follows: “Usercentrics for Wix” and “WIX”.

We also utilize analytics cookies to collect information about how visitors use our Platform Services, such as which pages are most frequently visited and if they encounter any error messages. This data helps us understand website performance, identify areas for improvement, and optimize your experience. These analytics cookies are turned off by default.
 

Functional cookies enable us to remember your preferences and choices (such as your user identity and language preference) to provide a more personalized and convenient experience on subsequent visits. These functional cookies are turned off by default.
 

You can manage your cookie preferences through your browser settings or by using the cookie consent settings on the website. You can also read more about these cookies in the cookie information on the website.
 

2.5. Events, seminars, and courses

We organize a variety of certifications, workshops, seminars, courses, and other events for our clients, partners, students, and other interested individuals. In connection with these events, we collect and process personal data about participants, typically including their name, email address, telephone number, any disclosed food allergies or other preferences, and details such as the company they work for. 

This personal data is processed primarily to manage event registrations effectively and to accommodate any specific dietary requirements or other preferences participants may have, ensuring a smooth and tailored experience. Should you choose not to provide the requested personal data, we may unfortunately be unable to process your event registration. 

Our processing of this data is necessary for the performance of a contract with the participant, in accordance with Article 6(1)(b) of the GDPR. When we process sensitive information, such as health data pertaining to food allergies, we will explicitly obtain your consent for this specific purpose, aligning with the requirements of Article 9(2)(a) of the GDPR.
 

2.6. Other inquiries

We also receive requests from students, representatives of businesses, public authorities, or private individuals through various channels such as email or telephone. In handling these requests, we may process personal data including your name, telephone number, email address, the subject matter of your request, and any other information you provide in connection with it. Typically, the consequence of not providing such personal data is that we will be unable to process and respond to your request effectively. This processing is based on a balancing of interests, in accordance with Article 6(1)(f) of the GDPR, where our legitimate interest lies in being able to respond to and follow up on these inquiries. Should a request lead to the establishment of a client relationship or a recruitment process, the personal data will then be processed in accordance with the relevant sections of this policy as outlined above.
 

2.7. Marketing

We distribute newsletters, event invitations, and other relevant information via email to contact persons registered in our client database and to others who have explicitly consented to receive such communications. Recipients of our newsletters or other communications can easily unsubscribe from these services at any time by using the dedicated link provided within our emails. The legal basis for sending these emails to contact persons at our existing clients is our legitimate interest in maintaining and developing client relationships by providing legal news and relevant information about our services, as outlined in Article 6(1)(f) of the GDPR and consistent with Section 15(3) of the Norwegian Marketing Control Act. In other contexts not involving existing client relationships, our marketing communications are based on the explicit consent of the individual concerned, in accordance with Section 15(1) of the Norwegian Marketing Act and Article 6(1)(a) of the GDPR.

2.8. Social media

We maintain pages on various social media platforms. In connection with these pages, we process personal data such as your name, any comments you post, your likes, or any other information you choose to make available to us through these platforms. This processing is conducted based on a balance of interests, as per Article 6(1)(f) of the GDPR, where our legitimate interest is to effectively manage and utilize social media pages to readily connect with customers, students, and other interested parties.
 

When you "like" or become a member of Ambition Profile Academy's social media profiles, your personal data will be shared with the relevant platform. The same applies to other activities on Ambition Profile Academy's social media pages, such as content you post and posts you like. The relevant platform will also be responsible for the personal data it collects and processes. More information about this processing and your rights follows from the individual platform's privacy policy.

 

3. Parties with whom we share personal data

 

Our suppliers, particularly platform service providers, may process personal data if such data is stored with them or otherwise made accessible to them. These suppliers operate strictly under a data processing agreement and our direct instructions, ensuring they can only use personal data for the purposes we have defined and which are detailed within this privacy policy. 

We do not disclose personal data in any other instances or through any other means beyond what is described in this privacy policy, unless the client explicitly encourages or consents to such disclosure, or if disclosure is legally mandated. 
 

Your personal data, where we are the data controller, may also be subject to processing or storage outside the EU/EEA. In such circumstances, we guarantee that your personal data benefits from sufficient security safeguards in line with GDPR Chapter V, typically achieved through the EU's standard contractual clauses for data transfers or by transferring data to countries that have received an adequacy decision from the European Commission.
 

4. Data retention
 

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Upon expiry of the retention period, personal data shall be securely deleted or anonymized. This essentially means the following:

i. Contact persons with our customers: Is retained for the duration of the active customer relationship, and then for 7-10 years after the relationship ends for financial and contractual records, or 1-3 years for general communication data not subject to specific legal retention periods, unless consent for marketing is maintained.
 

ii. Contact persons with our suppliers and partners: Is retained for the duration of the active relationship, and then for 5 years after the relationship ends for financial and contractual records, or 1-3 years for general communication data not subject to specific legal retention periods.

iii. Users of Platform Services: Is retained as long as the account is active; upon deactivation or deletion, core account data is typically held for 30-90 days for recovery, with transaction data related to accounting or reporting for 5 years, and anonymized usage data retained for longer periods for service improvement.
 

iv. Participants in certifications, workshops ,seminars, courses, and other events: Data for event participants is retained for 1-3 years after the event to handle post-event queries and feedback, with financial transaction data retained for 5 years, and marketing consent honored until withdrawn.

 

v. Individuals sending us requests or who are otherwise in contact with us: Personal data from individuals sending us requests or otherwise in contact is retained for 6 months to 1 year after the inquiry is resolved, or longer if the inquiry leads to a potential business relationship.
 

5. Your privacy rights
 

Under prevailing data protection regulations, you possess a range of entitlements concerning your personal information. We have outlined these rights below for your understanding. Should you wish to exercise any of these rights, please contact us.

 

5.1. Revocation of consent

If you have previously permitted us to send you newsletters, invitations to events, or similar, you have the option to revoke this consent at any time. We have implemented mechanisms, usually a link in communications, that allow you to opt out easily. Any other instances where you have given consent to process your personal data can also be revoked by contacting us directly.

 

5.2. Right of access

You are entitled to request access to the personal data we hold about you, provided that this does not conflict with our obligations of confidentiality. To safeguard against unauthorized disclosure and ensure that personal data is provided to the correct individual, it may be necessary for access requests to be submitted in writing or for your identity to be verified through alternative means.

 

5.3. Correction and deletion

You have the prerogative to request that we rectify any inaccurate personal data pertaining to you or that we erase your personal data. While we endeavor to fulfill all requests for data deletion whenever feasible, we may be unable to do so if compelling legitimate grounds exist for retaining the data. An example of such a reason would be our legal obligation to store certain personal data for documentary purposes.  Please be aware that the deletion of data related to the operation of our Platform Services may consequently impair our ability to provide those services to you.

 

5.4. Limitation of data processing

In certain circumstances, you may request that we temporarily suspend the processing of your personal data. This may happen if you claim that your personal data is inaccurate, in which case you can ask for a restriction on processing while we verify its accuracy Additionally, if the processing of your personal data is considered unlawful, you have the right to request that its processing be limited instead of having the data deleted entirely. A restriction can also be requested if we no longer need your personal data for its original purpose, or if you formally object to the processing of your personal data as described in the following section.

 

5.5. Objection to Data Processing

You retain the right to object to the processing of your personal data for direct marketing activities at any time. Additionally, you may object to the processing of your personal data that is based on Article 6 (1) (e) or (f) of the GDPR, especially when such objections are based on your specific situation. Unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, fundamental rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims, we will stop processing the personal data.

​

5.6. Data portability

In certain situations, you may have a general right to request the transfer of your personal data to another legal entity or controller in a widely used, machine-readable format. When technically feasible, we can assist with the direct transmission of this personal data to the designated organization.

​

5.7. Lodging a complaint regarding the processing

If you have any concerns or would like to file a complaint regarding our handling of your personal data, please reach out. Alternatively, you can submit a formal complaint directly to the appropriate data protection authority.

​

6. Safeguarding personal data
 

We have meticulously implemented a range of technical and organizational security measures to ensure that all personal data is handled in a secure and protected manner. Our commitment involves conducting regular evaluations of the security protocols across all systems utilized for personal data management. Furthermore, we have established contractual agreements with the suppliers of these systems, obligating them to uphold an adequate and robust level of data security.

 

7. Revisions to this privacy policy

This privacy policy will undergo periodic revisions and updates. You will consistently be informed should any substantial modifications be introduced. Where necessary, we will seek or refresh consents. The most current version of our privacy statement will always be readily accessible on our official website.

 

8. Contact details

Please contact us if you have any questions or wish to exercise your rights. Our contact details are as follows:
 

Ambition Profile Academy AS
Org.nr: 935219590
Harald Hårfagres gate 14
3046 Drammen
NORWAY 
 

Email: info@ambitionprofile.com