Privacy Policy – VDA Training

1. Data Controller

VDA Training (hereinafter referred to as “we”, “us”, or “the portal”) is the data controller for personal data processed in connection with the use of our training portal and the delivery of courses, training, and certification.

Contact information:
Email: post@vdalifting.no
Phone: +47 476 95 959
Address: Vestheimvegen 17, 4250 Kopervik, Norway

---

2. Purpose of Processing

We process personal data in order to provide courses and training services, including:

• user account registration

• delivery of courses and e-learning

• documentation of competence and certification

• issuance of course certificates and diplomas

• monitoring course progress and results

• administration of customers and companies within the portal

• system operation, security, and service improvement

---

3. Categories of Personal Data Processed

We may process the following information:

• name

• email address

• telephone number (if registered)

• employer or company affiliation

• course participation and progress

• test results and certifications

• login activity and technical logs (IP address and timestamps)

We only process personal data necessary to fulfil the purposes described above.

---

4. Legal Basis for Processing (GDPR Article 6)

Processing is based on the following legal grounds:

• Contract (GDPR Article 6(1)(b)) — when training is ordered or completed.

• Legal obligation (Article 6(1)(c)) — where documentation of training is required by regulations or standards.

• Legitimate interest (Article 6(1)(f)) — for secure system operation, quality assurance, and service development.

Processing is normally not based on consent, as the personal data is necessary to deliver the service.

---

5. Data Retention

Personal data is stored as long as necessary to:

• document completed training

• fulfil contractual obligations

• comply with legal requirements

Course results and certifications may be retained for longer periods where necessary to document competence or support audits.

Personal data is deleted or anonymised when retention is no longer required.

---

6. Sharing of Personal Data

Personal data is not shared with unauthorised parties.

Information may be shared with:

• employers or clients who have ordered the training

• system suppliers and data processors responsible for operating the solution

• public authorities where required by law

All data processors are subject to data processing agreements.

---

7. Information Security

We implement technical and organisational measures to protect personal data against unauthorised access, alteration, or loss. Access to personal data is restricted to authorised personnel only.

---

8. Cookies and Technical Logs

The portal uses necessary cookies and technical logs for:

• login and authentication

• secure system operation

• storage of user preferences

These are required for the service to function properly.

---

9. Your Rights

You have the right to:

• access your personal data

• correct inaccurate information

• request deletion where applicable

• restrict processing

• data portability where relevant

Requests may be submitted using the contact information provided above.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe processing violates applicable data protection legislation.

---

10. Changes to This Policy

This privacy policy may be updated when necessary. Significant changes will be made available through the portal.

Last updated: 26 February 2026