Privacy Policy

1. Introduction

Basss Holding AS ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, submit contact forms, or interact with our educational programs and services.

Please read this Privacy Policy carefully. By accessing and using our website, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our website.

2. Information We Collect

2.1 Information You Provide Directly

We may collect information that you voluntarily provide when you:

• Complete contact forms on our website
• Request information about our courses or programs
• Send us emails or messages
• Register for educational programs or workshops
• Subscribe to our educational resources or newsletters

Information collected may include:

• Full name
• Email address
• Phone number
• Mailing address
• Course preferences and learning interests
• Message content and comments

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical information:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website or search engine
• Device type and screen resolution
• Clickstream data
• Cookies and similar tracking technologies

This information is collected through cookies, web beacons, pixel tags, and similar technologies to help us understand user behavior, improve website functionality, and provide a better user experience.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Analytics providers that track website usage
• Email service providers managing our communications
• Form submission platforms that process contact requests
• Security services that protect against fraud and spam

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Educational Service Delivery

• To deliver PC courses and computer skills educational programs
• To provide course materials, tutorials, and learning resources
• To track participant progress in educational programs
• To issue certificates of completion where applicable
• To respond to educational inquiries and course requests

3.2 Communication

• To respond to your inquiries, questions, and requests
• To send course updates, announcements, and educational content
• To provide notifications about course schedules and program changes
• To send newsletters with educational information and resources (only with consent)
• To follow up on course registrations and educational progress

3.3 Website Improvement

• To analyze website usage patterns and user behavior
• To improve website design, functionality, and user experience
• To optimize course content and educational materials
• To troubleshoot technical issues and errors
• To conduct website performance testing

3.4 Legal and Security

• To comply with legal obligations and regulatory requirements
• To protect against fraud, spam, and unauthorized access
• To investigate and resolve disputes
• To enforce our Terms of Use and other agreements
• To protect the rights, property, and safety of the Company and users

3.5 Marketing and Engagement

• To send promotional information about new courses (only with consent)
• To inform you about educational workshops and webinars
• To conduct surveys and gather feedback on our programs
• To personalize your website experience

4. Legal Basis for Processing

Under the Norwegian Personal Data Act (Personopplysningsloven) and the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Consent: Where you have explicitly consented to processing for specific purposes
• Contract Performance: To fulfill our obligations when you enroll in educational programs
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interests: To improve our services, website security, and fraud prevention

5. How We Share Your Information

5.1 Service Providers

We may share personal information with trusted third-party service providers who assist us in operating our website and delivering educational services, including:

• Email service providers for sending communications
• Website hosting and cloud storage providers
• Analytics providers for website performance tracking
• Payment processors for handling transactions (if applicable)
• Security and fraud prevention services

These providers are contractually obligated to use your information only as necessary to provide services to us and are required to maintain the confidentiality and security of your data.

5.2 Legal Requirements

We may disclose your personal information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect the legal rights, privacy, and safety of the Company, users, and the public
• Enforce our Terms of Use and other agreements
• Detect and prevent fraud, security issues, or technical problems

5.3 Business Transfers

If Basss Holding AS is involved in a merger, acquisition, bankruptcy, or asset sale, your personal information may be transferred as part of that transaction. We will provide notice if such a change in ownership or control of your personal information occurs.

5.4 No Sale of Information

We do not sell, trade, or rent your personal information to third parties for their marketing purposes. Your information is shared only as described in this Privacy Policy.

6. Data Security

We implement comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, and destruction. These measures include:

• HTTPS encryption for secure data transmission
• SSL/TLS security protocols
• Firewalls and intrusion detection systems
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee confidentiality agreements and data protection training
• Secure data storage and backup procedures

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You use our website and provide your information at your own risk.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Retention periods vary depending on the type of information and the purpose of processing:

• Contact Information: Retained for the duration of our business relationship and 2 years after the last interaction
• Course Enrollment Data: Retained for the duration of course participation and 3 years thereafter for record-keeping purposes
• Website Analytics: Typically retained for 26 months
• Marketing Communications: Retained until you unsubscribe or request deletion
• Legal Disputes: Retained for the duration of any dispute and as required by law

When information is no longer needed, we securely delete or anonymize it. You may request deletion of your personal data at any time, subject to legal obligations and contractual requirements.

8. Your Rights and Choices

Under Norwegian and European data protection laws, you have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request access to the personal data we hold about you and to receive a copy of that data in a structured, commonly used, and machine-readable format.

8.2 Right to Rectification

You have the right to request correction of inaccurate, incomplete, or outdated personal information. We will update your information promptly upon request.

8.3 Right to Erasure

You have the right to request deletion of your personal data, subject to certain exceptions (such as legal obligations or active contracts). This is commonly known as the "right to be forgotten."

8.4 Right to Restrict Processing

You have the right to request that we restrict or suspend the processing of your personal data in certain circumstances, such as while we verify the accuracy of disputed information.

8.5 Right to Data Portability

You have the right to request that we provide your personal data in a portable format and, where feasible, to transmit it directly to another data controller.

8.6 Right to Object

You have the right to object to processing of your personal data for direct marketing, profiling, or legitimate interest purposes. We will cease such processing upon your objection.

8.7 Withdrawal of Consent

Where we process your data based on consent, you may withdraw that consent at any time by contacting us. Withdrawal will not affect the lawfulness of processing before the withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in Section 12. We will respond to your request within 30 days (or as required by law). We may request verification of your identity to ensure security and prevent unauthorized access.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use our website. We use both session-based cookies (which expire when you close your browser) and persistent cookies (which remain on your device).

9.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality, security, and form submission
• Analytics Cookies: Help us understand website usage patterns and improve performance
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track your interactions for personalized content and advertising (only with consent)

9.3 Cookie Consent

We obtain your consent before placing non-essential cookies on your device. You may control cookie preferences through our cookie management banner or adjust settings in your browser. Disabling cookies may affect website functionality.

9.4 Other Tracking Technologies

We may also use web beacons, pixel tags, and similar tracking technologies to measure website activity, track email open rates, and analyze user behavior. These technologies function similarly to cookies.

9.5 Third-Party Tracking

Third-party analytics providers, such as Google Analytics, may place cookies on your device to track website usage. You can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser extension.

10. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services that are not operated by Basss Holding AS. This Privacy Policy applies only to information collected through our website. We are not responsible for the privacy practices of third-party sites and services.

We encourage you to review the privacy policies of any third-party services before providing your personal information. Clicking on external links is at your own risk.

11. Children's Privacy

Our website and educational programs are not intentionally directed to children under 13 years of age. We do not knowingly collect personal information from children under 13 without parental consent. If we become aware that we have collected personal information from a child under 13 without appropriate parental consent, we will take steps to delete such information promptly.

For users between 13 and 18 years of age, we limit data collection and use stricter privacy protections in compliance with applicable laws.

12. International Data Transfers

Basss Holding AS is based in Norway. When you provide personal information, it may be processed and stored in Norway or transferred to other countries where we operate. These countries may have different data protection laws than your country of residence.

When we transfer data internationally, we implement appropriate safeguards, including standard contractual clauses approved by the European Commission. By using our website and providing your information, you consent to such international transfers subject to this Privacy Policy and applicable laws.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you an email notification.

Your continued use of our website following the posting of changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

15. Compliance with Norwegian and European Law

This Privacy Policy complies with:

• Norwegian Personal Data Act (Personopplysningsloven, LOV-2018-06-15-38)
• General Data Protection Regulation (GDPR) (EU) 2016/679
• Norwegian Data Protection Authority (Datatilsynet) guidelines
• Norwegian Electronic Communications Act (Ekommerceloven)

This Privacy Policy is governed by the laws of Norway. Any disputes arising from this Privacy Policy shall be subject to the jurisdiction of Norwegian courts.