Privacy policy

1. Data controller

DRIVING TRAFIKKSKOLE AS, organisation number 813 169 142, is the data controller. Our address is Kirkeveien 213, 3140 Nøtterøy, Norway. Contact us at post@drivingtrafikkskole.no or +47 33 40 70 00.

2. Data, purposes, and legal bases

When you contact us, we process your name, email address, phone number, and the content you send. We use it to answer and follow up your request. The legal basis is steps before a contract or performance of a contract (GDPR Article 6(1)(b)), or our legitimate interest in answering requests (Article 6(1)(f)).

When you order a course or training, we can also process your address, date of birth, chosen course, location, and guardian contact details. We use the data to manage the order, provide the training, document the customer relationship, and invoice. The legal basis is our contract with you (Article 6(1)(b)) and duties under accounting and road traffic rules (Article 6(1)(c)).

For safe operation, the site can process your IP address, time, browser data, and technical events. Cloudflare Turnstile checks that a form is sent by a person. The legal basis is our legitimate interest in stopping abuse and keeping the service safe (Article 6(1)(f)).

If you consent to statistics or marketing, Google and Meta services can process online identifiers and data about how you use the site. The legal basis is your consent (Article 6(1)(a)). You can change your choice at any time on the cookie page. Google Maps loads only when you choose to open a map.

3. Students under 18

We ask for guardian contact details when needed for a student under 18. Do not put a national identity number, health data, or other sensitive data in free-text fields unless we ask for it through a suitable secure channel.

4. Recipients and processors

Staff members who need the data can access it. We use suppliers for form delivery and email (Mikalsen Utvikling), student and course management (TABS), hosting and security (Cloudflare), and accounting. If you consent to tracking, Google and Meta can receive data. If you open a map, Google can receive data. Suppliers process data only for agreed purposes. We do not sell personal data.

5. Transfers outside the EEA

Some suppliers, including Google, Meta, and Cloudflare, can process data outside the EEA. When this happens, the transfer must use a valid safeguard, such as the European Commission's standard contractual clauses and needed extra measures.

6. Retention

• Requests that do not lead to a customer relationship are deleted no later than 12 months after the matter is closed.
• Customer, course, and training data is stored during the customer relationship and then while a specific legal duty or possible legal claim makes storage necessary.
• Accounting records are normally stored for 5 years after the end of the financial year, as required by Norwegian accounting rules.
• Your cookie consent choice is stored for 182 days. Other cookie periods are listed on the cookie page.
• Copies in backups are deleted when the backups rotate under our regular routines.

7. Your rights

When the conditions apply, you can ask for:

• access to and a copy of your data
• correction of wrong or incomplete data
• deletion or restriction of processing
• to object to processing based on legitimate interests
• data portability for some data
• to withdraw consent without affecting processing that was lawful before withdrawal

Send a request to post@drivingtrafikkskole.no. We can ask for needed information to confirm your identity. You can also complain to the Norwegian Data Protection Authority.

8. Automated decisions

We do not make decisions with legal or similarly important effects for you only through automated processing. If you consent to marketing, ad services can use data to choose which ads to show.

9. Cookies

See the cookie page for the current list and to change your consent choices.

10. Changes

We update this policy when our processing or the rules change. For important changes, we give clear notice and ask for new consent when needed.