Privacy Policy
Effective Date: January 1, 2026 • Last Reviewed: September 2026
1. Data Controller Identification
The entity responsible for processing data collected through this educational web portal is:
| Entity Name | CARDIAC DA |
|---|---|
| Organization Number (Org.nr) | 937 710 445 |
| Authorized Representative | Tino Hennig |
| Registered Address | c/o Jeanette Bye, Trondheimsveien 27, 0560 Oslo, Norway |
| Contact Email | [email protected] |
| Supervisory Authority | Datatilsynet (The Norwegian Data Protection Authority) |
2. Nature of Data Collected
As an educational information service, CARDIAC DA practices strict data minimization:
- Voluntary Communications: When you submit an inquiry through our editorial desk, we process your provided name, email address, inquiry topic, and message content solely to respond to your request.
- Technical & Log Data: Standard server access logs (IP address, browser type, timestamp, requested URI) are processed for infrastructure security, network protection, and DDoS prevention.
- No Special Category Health Data: We do NOT collect, store, or profile sensitive medical records, biometric data, or patient histories.
3. Legal Bases for Processing
We process personal information under the following Article 6 GDPR lawful bases:
- Article 6(1)(b) Contract / Service Request: Responding to user inquiries and educational queries submitted via our contact forms.
- Article 6(1)(f) Legitimate Interests: Ensuring portal cybersecurity, maintaining platform availability, and optimizing educational content layout.
- Article 6(1)(c) Legal Obligation: Fulfilling accounting, auditing, and regulatory requirements under Norwegian corporate law.
4. Data Retention Periods
Communication inquiries are retained for a maximum of 12 months from resolution unless ongoing correspondence is requested. Server security log files are automatically purged after 30 days.
5. User Rights Under GDPR
Under European and Norwegian privacy regulations, you are entitled to:
- Right of Access (Article 15 GDPR) • obtain confirmation of processed personal data.
- Right to Rectification (Article 16 GDPR) • request correction of inaccurate data.
- Right to Erasure (Article 17 GDPR) • request deletion of personal information.
- Right to Restrict Processing (Article 18 GDPR) and Data Portability (Article 20 GDPR).
- Right to lodge a complaint with Datatilsynet (www.datatilsynet.no).
6. International Transfers & Third Parties
We do not sell, license, or monetize personal information. Any technical hosting infrastructure utilized is situated within the European Economic Area (EEA) or operates under Standard Contractual Clauses ensuring equivalent privacy safeguards.
7. Privacy Contact Point
To exercise your statutory rights or submit privacy-related inquiries, please direct correspondence to:
CARDIAC DA — Privacy Officer
Trondheimsveien 27, 0560 Oslo, Norway
Email: [email protected]