Your data, treated with respect.
This statement explains what personal data Class2Class collects, why we collect it, who else processes it on our behalf, how long we keep it, and the rights you have. We publish privacy and accessibility commitments together — both are about respect for the people on the platform.
You control your data
Full GDPR rights — access, rectification, erasure, portability, and more — answered within 30 days. Contact our DPO directly.
No sale, no AI training
We never sell your data. Your work, messages, images, and recordings are never used to train AI models — ours or anyone else's.
EU-first storage
Primary platform data lives in the European Union. US transfers are covered by SCCs, the EU–US Data Privacy Framework where applicable, and Transfer Impact Assessments.
Children first
Teacher gatekeeping, parental consent for under-13s, no one-to-one DMs for minors. Children's data is given dedicated treatment in §7.
Sixteen sections, organised so you can find what you need.
Click any section to jump to it in the document below.
Class2Class Privacy & Accessibility Statement.
Last updated 28 April 2026.
Plain-language summary
This statement explains what personal data Class2Class collects, why we collect it, who else processes it on our behalf, how long we keep it, and the rights you have. It also covers our accessibility commitments — those live in a separate Accessibility Statement that we cross-reference. Where you spot something that's wrong, missing, or unclear, please tell us at [email protected] and we'll fix it.
This statement applies to teachers, school administrators, principals, coordinators, partners, parents and guardians, students, and anyone using Class2Class.org. Children's privacy is given dedicated treatment in §7. AI-driven features are given dedicated treatment in §6. Cookies are governed by our separate Cookie Policy, cross-referenced in §10.
Who we are
Class2Class ApS ("Class2Class", "we", "our", "us") operates the Class2Class.org platform. We are a Danish company. The data controller for personal data processed on the platform is:
| Controller | Class2Class ApS |
| CVR | 44991071 |
| Registered address | Østerbrogade 148, 1th, 2100 København Ø, Denmark |
| Data Protection Officer | Giancarlo Mena |
| DPO contact | [email protected] |
| EU representative | Not applicable (controller established in EU) |
| Lead supervisory authority | Datatilsynet (Danish Data Protection Authority) |
For data processed by Class2Class on behalf of a partner school (controller–processor relationship for student data under a signed Data Processing Agreement), the school is the controller and Class2Class is the processor. See §9.
What this statement covers
This statement covers personal data processing for:
- The Class2Class web platform(s) (under the domain
class2class.org) and any associated mobile experience, including subdomain web and mobile platforms. - The Teacher Resources area, including the AI Literacy and Responsible Use guide.
- Customer-support communications via [email protected], [email protected], and the in-platform support chatbot.
- AI-assisted features described in §6.
It does not cover personal data processed by your own school's systems or by external sites we link to. Those are governed by their own privacy notices.
What personal data we collect
We aim to collect only what we need to run the platform. The categories below are exhaustive as of this statement date.
3.1 What you provide directly
| Category | Examples | Who provides it | Why |
|---|---|---|---|
| Identity data | Name, email | Teachers, administrators (for themselves); teachers (for students they add) | Account creation, communication |
| Professional data | School name, job position, country | Teachers, administrators | Matching classrooms; verifying educational context |
| Educational context | Grade level, subjects taught, languages spoken, student age group | Teachers | Matching classrooms with compatible curricula and ages |
| Account credentials | Password (hashed) | All users | Account security |
| Project content | Project descriptions, posts, messages, reflections | All users contributing to a project | Educational collaboration |
| Project outputs | Documents, images, recordings created during a project | All users | Educational outputs |
| Parental consent (under-13) | Parent or guardian name; optional parent email | Teachers, on behalf of the parent or guardian, via the consent flow described in §7.4 | Audit trail for parental consent under GDPR Art. 8 and COPPA "school authorisation" |
We do not intentionally collect special categories of personal data (GDPR Art. 9) — health, religion, ethnicity, political opinions, sexual orientation, genetic data, biometric data for unique identification, trade-union membership. Where such information is incidentally shared in a project (for example, a student's reflection that mentions their religion or family background), it is handled with the same protections as other personal data and the teacher may remove it.
Photos and videos shared inside a project are educational content. They are not processed for biometric identification, not analysed by facial-recognition systems, and not used to uniquely identify any person. They are not biometric data within the meaning of GDPR Art. 9.
3.2 What we collect automatically
| Category | Examples | Why | Legal basis |
|---|---|---|---|
| Device information | Browser type, IP address, operating system | Security, troubleshooting, accessibility | Legitimate interest |
| Usage data | Features accessed, time on page, navigation patterns | Platform improvement | Legitimate interest |
| Cookies and similar | Session identifiers, preferences | Platform functionality (essential); analytics and marketing (with consent) | See Cookie Policy |
| Time zone & language | Detected from browser settings | Localisation, scheduling | Legitimate interest |
Why we use personal data, and the legal basis
| Purpose | Legal basis (GDPR Art. 6) | What this looks like |
|---|---|---|
| Create and manage your account | Contract performance — Art. 6(1)(b) | Sign-up, sign-in, profile, password reset |
| Match classrooms and facilitate projects | Contract performance — Art. 6(1)(b) | Matching, project setup, in-project communication |
| Moderate content and enforce the Ethical Guidelines | Legitimate interest — Art. 6(1)(f); legal obligation — Art. 6(1)(c) where applicable | Reviewing flagged content, applying the Coexistence Policy |
| Improve the platform | Legitimate interest — Art. 6(1)(f) | Aggregate analytics, A/B testing of features |
| Send marketing communications | Consent — Art. 6(1)(a) | Newsletter, programme announcements (with opt-in) |
| Provide customer support (human + AI) | Contract performance — Art. 6(1)(b); legitimate interest — Art. 6(1)(f) for pre-contract inquiries | Responding to questions, AI-assisted triage |
| Generate completion certificates | Contract performance — Art. 6(1)(b) | Certificate generation for completed projects |
| Comply with legal obligations | Legal obligation — Art. 6(1)(c) | Tax, accounting, regulatory record-keeping |
| Protect platform security | Legitimate interest — Art. 6(1)(f) | Logging, fraud prevention, abuse detection |
Where the legal basis is consent, you can withdraw consent at any time. Where the legal basis is legitimate interest, you can object — see §11.
Visual retention schedule
We keep personal data only as long as we need it. Below is the consolidated retention schedule, derived from the Records of Processing Activities (ROPA) and the Data Processing Agreement with partner organisations.
| Data category | Retention period | Why | Then |
|---|---|---|---|
| Account data (name, email, role, school) | Duration of active account + 90 days to 2 years after termination | Account recovery, dispute resolution, fraud prevention, legal record-keeping | Securely deleted or anonymised |
| Project content (posts, reflections, images, recordings) | Duration of the account; teacher may request removal at any time | Continuity of the educational record | Securely deleted on account termination or earlier on request |
| Communications (in-platform messages) | Duration of the account + 90 days to 2 years after termination | Continuity, dispute resolution | Securely deleted or anonymised |
| Support tickets | 2 years from ticket closure | Quality assurance, dispute resolution | Securely deleted |
| Security logs (IP, access times, auth events) | 90 days rolling; longer for incidents (typically 2 years from incident) | Security monitoring, incident response | Automatic purge after retention window |
| Analytics data (Mixpanel, Google Analytics) | Per sub-processor policy (typically 14–26 months) | Platform improvement | Anonymisation at sub-processor |
| Marketing consent records | Until you withdraw + suppression list (indefinite) | Honour your unsubscribe; prevent re-contact | Suppression list retained |
| Parental consent records (under-13) | Duration of the student's account + 5 years after closure | GDPR Art. 7(1) burden of proof; COPPA evidence | Securely deleted |
| Anonymous reports + investigation case files | Minimum 5 years from case closure | EU Whistleblower Directive Art. 18; Reports Handling Procedure §10 | Personal data anonymised where the underlying purpose no longer requires it |
| Certificates of completion | Duration of the account + 5 years | Verification of certificate authenticity | Securely deleted |
| Legal & compliance records (tax, accounting) | 5–7 years per Danish law | Legal obligation | Securely deleted at end of retention window |
Where Class2Class is the processor (for partner-school student data under a signed DPA), the retention period in the DPA governs. The retention windows above are the controller-side retention for data Class2Class controls directly.
AI features and how they handle your data
Class2Class operates AI features under the principle "You Decide. AI Helps." — humans remain the decision-makers; AI is assistive only.
6.1 The AI systems we use
| AI feature | What it does | Provider | Risk class |
|---|---|---|---|
| Customer-support chatbot (Chatbase) | Answers questions about Class2Class via a chat interface; routes complex cases to human support | Chatbase, Inc. (US — SCCs + TIA + no-AI-training) | Limited-risk (Art. 50 transparency) |
| Project Creation Assistant — text generation | Suggests project structure, learning objectives, activities, timelines to teachers when they create a new project | OpenAI (US, standard API: no-training-by-default; 30-day retention for abuse monitoring) + Vercel (EU regions for hosting) | Non-high-risk under Art. 6(3)(b) |
| Project Image Generation (Gemini "Nano Banana") | Generates project cover images; teacher chooses whether to use the generated image | Google (US, Gemini 2.5 Flash Image API, DPF-certified + SCCs + no-AI-training) | Non-high-risk under Art. 6(3)(b) |
| Internal Analytics Assistant (Claude) | Class2Class staff use Claude to query our data warehouse for product, marketing, and platform-health analytics. Not user-facing. | Anthropic (US — SCCs + TIA + no-AI-training) | Limited-risk / non-high-risk; staff-only |
We document the basis of these classifications in our standalone Article 6(3) AI Risk Classification Assessment v.1.0, available on request to supervisory authorities and partner schools.
6.2 Our commitments on AI
- No automated decisions about students. We do not use AI to make automated decisions about a student — not about grades, placements, or behaviour. Any decision that materially affects a student is taken by a human.
- No use of your data for AI training. We do not use your work, messages, images, or session recordings to train AI models — neither our own nor any third party's. This is contractually required of every AI sub-processor.
- AI identifies itself. Where you interact directly with an AI system on Class2Class — at present, the customer-support chatbot — the system identifies itself as AI before the conversation starts, in accordance with EU AI Act Article 50(1). The Project Creation Assistant and the Project Image Generation feature do not "interact directly" within the meaning of Article 50 — they are tools the teacher invokes and reviews; outputs reach the teacher as draft suggestions, not as conversation.
- Human oversight on flags. No content is removed, suspended, or escalated based on an AI flag alone — a human moderator reviews every flag.
- AI literacy for staff and teachers. Our staff complete annual training on AI literacy, the Ethical Guidelines, safeguarding, and reports handling. Teachers using AI features attest, when accepting our Terms & Conditions, that they will read and apply our public AI Literacy and Responsible Use guide before using AI features with students.
You can read the full AI Literacy and Responsible Use guide in our Teacher Resources.
6.3 If you do not want AI to process your data
The customer-support chatbot is one entry point to support — you can email [email protected] directly to reach human support without engaging the chatbot. The Project Creation Assistant (text generation and image generation for project covers) is activated only when a teacher chooses to invoke it on a draft project.
Children and minors — what we do differently
Class2Class welcomes students of all ages, including students under 13 with parental consent. Because most of our students are minors, child protection is built into the platform rather than added at the edges.
7.1 Minimum age and verification
The minimum age to use Class2Class is 13. Students under 13 may use the platform only where their teacher has obtained parental or guardian consent and has confirmed that consent in our platform consent flow. Teachers are responsible for verifying that the student is at least 13 (or for obtaining parental consent for students under 13). Adults may not use Class2Class as students.
7.2 Teacher gatekeeping
Students cannot register directly. Every student account is created and managed by a teacher. This gatekeeping model:
- Reduces the risk of a child sharing personal data with us without an adult in the loop
- Ensures every student on the platform is connected to a teacher who is responsible for them
- Allows teachers to delete inappropriate content immediately and to remove students from projects when needed
7.3 Under-13 and under-16 messaging restrictions
| Age band | Restriction |
|---|---|
| Under 13 | One-to-one direct messaging is not available. Communication happens in group spaces or is teacher-mediated. |
| Under 16 | One-to-one direct messaging is not available. Group chats only. |
| 16+ | Standard platform messaging, subject to the Ethical Guidelines |
7.4 Parental consent for students under 13
For students under 13:
- The teacher attests, via the platform consent flow, that the parent or guardian has been informed about Class2Class, has understood what data the student will share and how the student will use the platform, and has agreed.
- This attestation is recorded with the teacher's identity, the student's identity, the version of the attestation text shown, and the timestamp — these records are retained for 5 years after the student's account closes (see §5).
- The recognised legal frameworks are the COPPA "school authorisation" model in the United States and GDPR Article 8 elsewhere (which permits the controller to make reasonable efforts to verify parental authority).
- Teachers must not confirm consent unless parents or guardians have actually been informed and have agreed.
If you are a parent or guardian and want to:
- Withdraw consent: write to [email protected]. We will block the student's access immediately. The student's project work and learning records are retained while consent is withdrawn (see §7.5). You can also ask your child's teacher to withdraw consent on the platform — they have features to do so.
- Have the student's account fully deleted: write to [email protected]. This is stronger than consent withdrawal — we will delete the account and the data, with the legally-required retention exceptions (see §5), and confirm in writing what has been deleted.
- Ask what data we hold about your child (access right): write to [email protected].
- Correct or update something: write to [email protected], or ask the student's teacher to update the record where they hold the relevant information.
We respond to parental data-rights requests within 30 calendar days as required by GDPR Article 12(3).
7.5 Withdrawal of consent and the block screen
When a parent or guardian withdraws consent, the student cannot navigate or use the platform — a block screen prevents access. The account itself is not deleted while the block is in place; the student's project work and learning records are retained, so that consent can be restored without loss of the educational record. The block remains in place until the teacher confirms in the consent flow that consent has been re-obtained.
7.6 Child-friendly summary
A short, plain-language summary of how we handle children's data — written for students aged 13–18 themselves — is published at class2class.org/privacy-for-students. We encourage teachers to introduce it in class.
International transfers — where your data goes
Class2Class is a Danish company. Our primary data storage is in the European Union (Xano EU). Some of our sub-processors are established outside the European Economic Area (EEA), so a portion of your personal data is transferred to the United States or other third countries to deliver specific services (analytics, the customer-support chatbot, marketing tools where you have given consent).
For each US-based sub-processor we rely on the European Commission's Standard Contractual Clauses (SCCs) supplemented by a Transfer Impact Assessment (TIA) that we maintain internally per the Schrems II judgment and EDPB Recommendations 01/2020. The TIA is reviewed annually and on every change to a sub-processor's data location or contractual terms.
Where a sub-processor is certified under the EU–U.S. Data Privacy Framework (DPF) — for example, Google LLC, which covers Google Analytics, Google Cloud / BigQuery, and Google's Gemini API — we additionally rely on the European Commission's Adequacy Decision (EU) 2023/1795 of 10 July 2023 as a primary transfer basis. SCCs are retained as a fallback mechanism; the TIA is still maintained.
The current sub-processors and their transfer mechanisms are listed in our public Sub-processor List. Highlights:
- Bubble (US — SCCs + TIA)
- Mixpanel (US — SCCs + TIA)
- Google Analytics (US — Google LLC DPF-certified + SCCs as fallback + TIA + IP anonymisation)
- Meta (US — SCCs + TIA, marketing only with consent)
- Chatbase (US — SCCs + TIA + contractual no-AI-training-on-user-data commitment)
- OpenAI (US — SCCs + TIA; standard API with no-training-by-default and 30-day retention for abuse monitoring; powers the Project Creation Assistant text generation, teacher-only)
- Google (Gemini API) (US — Google LLC DPF-certified + SCCs as fallback + TIA + contractual no-AI-training-on-user-data commitment; powers Project Image Generation, teacher-only)
- Anthropic (Claude AI) (US — SCCs + TIA + contractual no-AI-training-on-user-data commitment; staff-only internal analytics over the BigQuery data warehouse)
EU-based sub-processors (no transfer outside EEA): Xano (EU residency confirmed), Brevo, WordPress, Vercel (EU regions configured for the Project Creation Assistant frontend), Google Cloud — BigQuery (EU regions for the centralised data warehouse), Airbyte (EU deployment for the ETL pipelines that load BigQuery).
Sub-processors
We engage sub-processors to deliver parts of the platform — for example, the database, the email service, the customer-support chatbot. Every sub-processor:
- Has been reviewed before engagement and at least annually thereafter
- Is listed publicly at class2class.org/data-processing-agreement
We notify partners and schools at least 30 calendar days in advance of any addition, replacement, or material change to the sub-processor list, via the contact on file under their signed DPA. Partners and schools may object on reasonable data-protection grounds within 15 calendar days. Individual users (teachers, parents) who want to be notified of material changes can write to [email protected].
We do not sell your personal data to anyone. Sub-processors are bound to use Class2Class data only to deliver the service for which they are engaged.
Cookies
Cookies and similar technologies are governed by our separate Cookie Policy. The Cookie Policy describes the four categories of cookies we use (Necessary, Functional, Statistical, Marketing), the cookies in each category, our consent banner, and how to change your preferences at any time.
We do not use cookie walls. You can use the essential platform features without consenting to non-essential cookies.
Your rights
Under the GDPR, you have the following rights in respect of your personal data. We honour all of them, with the limited exceptions described in the GDPR itself (for example, where a deletion request would conflict with our legal obligations).
| Right | What it means | How to use it |
|---|---|---|
| Access (Art. 15) | Receive a copy of the personal data we hold about you | Write to [email protected] |
| Rectification (Art. 16) | Correct inaccurate or out-of-date data | Use the in-platform profile screens, or write to [email protected] |
| Erasure (Art. 17) | Request deletion of your data, subject to legal retention | Write to [email protected] |
| Restriction (Art. 18) | Limit how we process your data while a question or dispute is resolved | Write to [email protected] |
| Portability (Art. 20) | Receive your data in a structured, machine-readable format | Write to [email protected] |
| Object (Art. 21) | Object to processing based on legitimate interest, on grounds relating to your particular situation | Write to [email protected] |
| Withdraw consent (Art. 7(3)) | Withdraw consent for processing based on consent (e.g. marketing, non-essential cookies) — does not affect processing already lawfully done | Use the in-platform settings, the unsubscribe link in marketing emails, or write to [email protected] |
| No solely automated decisions (Art. 22) | Class2Class does not make solely automated decisions about you that produce legal or similarly significant effects | Documented in §6.2 |
| Lodge a complaint | Complain to a data protection authority | Datatilsynet — [email protected]; or your own national supervisory authority |
We respond to data-rights requests within 30 calendar days of receipt (GDPR Art. 12(3)). Where a request is unusually complex, we may extend by up to 60 additional days, with written notice to you and the reason for the extension. There is no fee for these requests, except where the request is manifestly unfounded or excessive.
If your request relates to a child's data, see §7.4.
Security
We implement appropriate technical and organisational measures to protect your personal data, in line with GDPR Article 32. Highlights:
- Encryption in transit — TLS 1.2+ across all connections to the platform.
- Encryption at rest — provided by Xano in the EU storage layer.
- Password storage — passwords are stored using bcrypt, the modern adaptive hashing algorithm recommended by OWASP and NIST SP 800-63B. Hashing is performed in our backend layer (Xano).
- Role-based access control — Class2Class staff access to personal data is restricted by role and logged.
- Multi-factor authentication — required for administrative access to platform infrastructure.
- Sub-processor due diligence — every sub-processor has been reviewed and has a signed DPA.
- Regular security audits — annual security reviews, supplemented by ad-hoc reviews on incident or material change.
- Incident response — a documented Data Breach Response Procedure covers detection, classification, regulatory notification within 72 hours under GDPR Art. 33, and notification to affected individuals under Art. 34 where required.
We have completed a Data Protection Impact Assessment (DPIA) for the platform that identifies and mitigates 10 core risks, with overall residual risk assessed as Low to Moderate (acceptable). The DPIA is reviewed annually.
Changes to this statement
We may update this statement to reflect changes in our services, applicable law, or our compliance commitments.
| Change type | What we do |
|---|---|
| Material change (e.g. new processing purpose, new sub-processor category, change in retention) | Notify users at least 14 calendar days in advance via the email on the account or via a platform announcement; partner schools are notified per the signed DPA |
| Minor change (e.g. typographical correction, clarification, update to a sub-processor URL) | Apply directly; the version number and "Last updated" date at the top always reflect the current state |
Continued use of the platform after the notice period constitutes acceptance of the revised statement. If you do not agree, you can close your account during the notice period — see Terms & Conditions §9.5.
Accessibility
Our standalone Accessibility Statement describes our commitment to WCAG 2.1 Level AA and the European Accessibility Act.
If a feature of this Privacy & Accessibility statement (or any other document we publish) is not accessible to you in its current form, write to [email protected] (subject "Accessibility") and we will provide it in an alternative format.
Contact
| If you want to | Use this contact |
|---|---|
| Exercise a data right (access, rectification, erasure, restriction, portability, object, withdraw consent) | [email protected] |
| Ask a privacy question | [email protected] |
| Raise a safeguarding concern about a minor | [email protected] (Anton Skriver, Safeguarding contact) or [email protected] |
| Raise an ethical concern (general) | [email protected] |
| Raise an ethical concern that involves a Class2Class team member | [email protected] (Jørgen Balle Olesen, CEO) |
| Raise an ethical concern that involves the CEO | [email protected] (Independent Reviewer) |
| Raise an anonymous concern | Anonymous Reports Form |
| Lodge a complaint with a supervisory authority | Datatilsynet — [email protected], or your own national authority |
The full reporting framework is described in the Ethical Guidelines §10 and in the Reports Handling and Whistleblower Procedure.
Related documents
- Terms & Conditions v.2.0
- Cookie Policy
- Sub-processor List
- Accessibility Statement
- Ethical Guidelines
- Code of Conduct
- Child-friendly Privacy Summary
- AI Literacy and Responsible Use guide
If any of these documents conflicts with this statement on a matter of substance, we apply the most protective interpretation for the data subject and resolve the conflict at the next document review. Tell us at [email protected] and we will fix it.
The questions we get most often.
Do you sell my data?
No. We do not sell your personal data to anyone — never have, never will. Sub-processors are bound to use Class2Class data only to deliver the service for which they are engaged. See §9 for the full statement.
Do you train AI models on my work?
No. We do not use your work, messages, images, or session recordings to train AI models — neither our own nor any third party's. This is contractually required of every AI sub-processor we use (Chatbase, OpenAI, Google Gemini, Anthropic). See §6.2 for the detail.
Where is my data stored?
Most platform data lives in the European Union — our backend on Xano with EU residency, our data warehouse on Google Cloud BigQuery in EU regions, the Project Creation Assistant frontend hosted on Vercel in EU regions.
Some sub-processors are based in the US (Mixpanel, OpenAI for the Project Creation Assistant text generation, Google for the Gemini image API). Those transfers are covered by Standard Contractual Clauses, the EU–US Data Privacy Framework where applicable, and a Transfer Impact Assessment we maintain internally. Section 8 has the full picture; Section 9 lists every sub-processor.
How do I exercise my GDPR rights?
Write to our Data Protection Officer at [email protected]. We respond within 30 calendar days, in line with GDPR Article 12(3). For unusually complex requests we may extend by up to 60 days with written notice.
Section 11 has the full table of rights with links. There is no fee.
My child is on Class2Class — what are my rights as a parent?
You can withdraw consent at any time (we'll block the student's access immediately while keeping their work intact in case consent is restored). You can request full account deletion, ask what data we hold, request corrections, and lodge a complaint with a supervisory authority.
Write to [email protected] for any of the above. For safeguarding concerns about your child's experience, write to Anton Skriver at [email protected]. Section 7 has the dedicated treatment of children's privacy.
How are passwords stored?
Passwords are stored using bcrypt, the modern adaptive hashing algorithm recommended by OWASP and NIST SP 800-63B. Hashing is performed in our backend layer (Xano in the EU). We never store passwords in plain text. See §12 for the full security posture.
How will I know if you change this Policy?
For material changes — new processing purpose, new sub-processor category, change in retention — we notify users at least 14 calendar days in advance via email and a platform announcement, and partner schools per the signed DPA. The "Last updated" date at the top of the statement always reflects the current version. See §13.
My school is using Class2Class — is the platform GDPR-compliant for partner schools?
Yes. Where Class2Class processes student data on behalf of a school, the school is the controller and Class2Class is the processor under a signed Data Processing Agreement. The DPA covers Article 28(3) requirements end-to-end, including a sub-processor list, transfer mechanisms, breach notification SLAs, and AI-specific TOMs.
If you are a school administrator considering Class2Class, write to [email protected] for the current DPA template.
Have a privacy concern? Tell us.
Reports made in good faith are taken seriously, kept confidential, and protected from any form of retaliation. You can also lodge a complaint directly with Datatilsynet (the Danish Data Protection Authority) or your own national supervisory authority.
- Data rights & privacyGiancarlo Mena (DPO) — [email protected]
- Safeguarding (about a minor)Anton Skriver — [email protected]
- General concern[email protected]
- Concern about the CEOIndependent Reviewer — [email protected]
- Supervisory authorityDatatilsynet — [email protected]
Have a question we didn't answer?
We update this statement when our services change, when applicable law changes, or when our compliance commitments tighten. Suggestions for improvement are welcome — write to our DPO at [email protected].
Email the DPO