Privacy Policy — NSDev AS

Data Controller

2. Scope

This Policy applies to:

• Visitors to our website
• Customers and business partners
• Users of our digital and cloud services
• Trainees, workshop participants, and students
• Individuals contacting us for inquiries or demos

It covers data collected both online (websites, apps, analytics) and offline (emails, contracts, meetings, and events).

3. Personal Data We Collect

A) Information you provide directly:

• Name, email, phone number, company, job title
• Login details (securely encrypted)
• Billing and payment details
• Training registrations and support requests

B) Information collected automatically:

• IP address, region, device, browser
• Language preference and time on site
• Referral source and cookie data (only with consent)

C) Technical and security data:

• Login attempts
• Firewall events, intrusion logs
• Penetration test results (if contractually agreed)
• Forensic records if legally required

D) Data from partners:

• Hosting providers, payment systems
• Learning platforms
• Clients sharing user lists for onboarding

We do not intentionally collect sensitive data such as religion or biometric information. If it is received accidentally, it will be securely deleted.

4. Legal Basis for Processing

• Contractual necessity – to deliver services
• Legitimate interests – security and performance
• Legal obligation – accounting and tax compliance
• Consent – analytics or marketing (withdraw anytime)
• Public or vital interest – rare legal cases

5. Why We Use Personal Data

• Deliver software and digital services
• Manage accounts and provide support
• Maintain security and performance
• Improve website and user experience
• Process invoices, contracts, and payments
• Issue certificates and verify attendance
• Comply with legal duties

We never sell your data.

6. Cookies and Tracking

We use essential cookies for website functionality and security. Optional cookies are enabled only with consent. You may change cookie settings at any time. Full details are available in our Cookie Policy.

7. Data Sharing and International Transfers

• Cloud/hosting providers
• Analytics platforms
• Communication systems
• Payment processors
• Legal or accounting advisors

All partners must sign GDPR-compliant DPAs. Transfers outside the EEA are protected using SCCs, adequacy decisions, and encryption.

8. Data Retention

Data is deleted or anonymized after retention period ends.

9. Your Rights

• Access your data
• Correct inaccurate information
• Request deletion
• Restrict or object to processing
• Receive data in portable format
• Withdraw consent at any time

Requests can be sent to info@nsdev.no. Responses within 30 days. Complaints can be submitted to Datatilsynet at www.datatilsynet.no.

10. Children’s Data

Our services are not intended for children under 13. We do not knowingly collect children’s data. Any such data will be deleted immediately.

11. Information Security

• TLS encryption
• Secure data storage
• Firewalls and intrusion detection
• Multi-factor authentication
• Regular penetration testing

While no system is risk-free, we apply industry standards to protect personal data.

12. Automated Decision-Making and AI

Some tools use automation or AI, but no legally binding decisions are made without human involvement. Users may request more information or object if applicable.

13. Social Media and External Links

External sites such as LinkedIn or YouTube have their own privacy policies. We are not responsible once you leave our website.

14. Payments

Payments are processed by licensed providers. We do not store full card details — only records required by law.

15. Business Customers

If a company provides employee or student data, it is responsible for lawful sharing. NSDev acts as a processor under contract.

16. Data Breaches

• Notify affected users
• Inform Datatilsynet if required
• Provide guidance for safety

17. Data Minimization and Storage

We collect only necessary data and store it securely within the EEA. If processed outside the EEA, additional safeguards apply.

18. Changes to This Policy

This Policy may be updated. The latest version is indicated by the date above. Significant updates may be announced.

19. Contact Us