Privacy policy
How North Coast Education AB collects and processes personal data when you visit the website, buy training or take a course with us.
Data controller
North Coast Education AB, company registration number 559246-9547, Skomakargatan 56, 972 41 Luleå, Sweden, which runs Kompetensportalen under the Norrkusten brand, is the controller for the processing. Contact us at info@norrkusten.se with questions about your data.
What data we process
- Account data: name, email address, which organisation you belong to and password (stored encrypted with our login provider).
- Purchase data: company name, company registration number, invoice or buyer reference, purchase history and payment method. Card numbers are never handled by us, only by our payment provider.
- Stored in your browser: the registration number you last started an order with is kept in the browser's local storage, so you need not type it again. For a sole trader it is the owner's personal identity number. It stays there until you start an order with another number or clear the site's data in your browser.
- Course data: which courses you have been assigned, how far you have got, answers to knowledge questions, results and the course certificates and certificate numbers issued.
- Technical data: IP address, device and browser information and visit statistics — see our cookie policy .
Why we process the data, and on what legal basis
- Performance of the contract: giving you access to the courses you bought, recording results, issuing course certificates and handling payment.
- Legal obligation: keeping accounting records under the Swedish Bookkeeping Act, and in some cases documenting completed training.
- Legitimate interest: developing and securing the platform, handling support cases and being able to verify that an issued course certificate is genuine.
- Consent: cookies for analytics and marketing, and mailings you have signed up for yourself. Consent can be withdrawn at any time.
Who we share data with
We never sell your data. To deliver the service we use processors who handle data on our behalf: providers of hosting and database, payments (Stripe), email delivery and — if you have consented — tools for analytics and advertising: Google Tag Manager, Google Analytics, Google Ads, Meta Pixel and the LinkedIn Insight Tag.
Some of these providers may process data outside the EU/EEA. Where that happens, the transfer is based on the European Commission's standard contractual clauses or on an adequacy decision.
If your employer bought the training for you, the employer can see that the licence was assigned to you and whether the course has been completed and passed. Your individual answers to the knowledge questions are not shared.
How long we keep the data
- Account data: as long as the account is active, and deleted when the account is closed.
- Course results and course certificates: kept as long as the certificate has to be verifiable, normally five years, since employers and authorities may need to check valid proof of training.
- Accounting records: seven years under the Swedish Bookkeeping Act.
- Cookies: for the periods stated in our cookie policy.
Your rights
You have the right to request access to your data, to have inaccurate data corrected, to request erasure or restriction, to object to processing based on legitimate interest, and to receive your data in a machine-readable format (data portability). Under Min profil in the portal you change your own job title, email address and password. The name is not changed there, because it appears on the certificates – a change of name is requested through the support form, as are access requests and erasure. Contact us at info@norrkusten.se and we will help you. Note that issued certificates may have to be kept as evidence of completed training.
If you believe we process your data incorrectly you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.