Privacy Policy and Data Protection
§ 1. General Information
This Privacy Policy explains how personal data is collected, processed, and protected in connection with private educational services (tutoring and homework support) provided personally by an individual (hereinafter referred to as the Tutor or Administrator) representing Leksehest.no in Norway.
The processing of personal data is carried out in full compliance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).
§ 2. Purpose, Scope, and Legal Basis of Processing
Personal data is processed solely for purposes necessary for the proper organization and execution of tutoring sessions:
Performance of the agreement for educational services (GDPR Art. 6(1)(b)): Parent/guardian's name, surname, email address, phone number, payment details (e.g., Vipps number or bank account number). Student's name, age, grade, school, and subject areas requiring academic support.
Performance of legitimate interests (GDPR Art. 6(1)(f)): Communication, coordination of lesson schedules, archiving correspondence history, and preserving necessary documentation in the event of potential disputes or the need to verify the course of study.
§ 3. Status of Working Notes and Pedagogical Materials
All notes, observations, progress logs, and information about the Student's preparation represent the Tutor's internal working materials.
These materials are used exclusively for pedagogical purposes, in order to best adapt the methodology and curriculum to the Student's individual needs.
These analyses and notes are confidential and reflect a subjective assessment. They do not constitute official school documentation, expert educational evaluations, or formal pedagogical reports, and cannot be treated as official documents.
§ 4. Retention Period
Data is stored for periods strictly related to the purpose of processing and the legal requirements of the Kingdom of Norway:
Pedagogical data and correspondence: Stored for a period of up to 3 years from the end of cooperation, which is directly linked to the statutory limitation periods for contractual claims under Norwegian law (foreldelsesloven § 2).
Billing and financial data: Stored for a period of 5 years from the end of the financial year, in accordance with Norwegian accounting regulations.
§ 5. Confidentiality and Data Security
All personal data and information regarding the tutoring process are treated as strictly confidential. The Tutor does not share or entrust personal data to third parties (including schools, teachers, or public institutions) unless such obligation arises directly from applicable laws.
Digital data is stored securely on devices protected by password and certified encryption.
§ 6. Rights of Data Subjects
In accordance with GDPR, every Customer is entitled to:
Access their personal data and obtain a copy thereof.
Rectify (correct) their data.
Erase their data ('right to be forgotten') – with the exception of situations where further storage is necessary to fulfill the purposes specified in § 4(1) (e.g., safeguarding the legal interests of the parties).
Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if they believe that the processing of personal data violates applicable laws.