Privacy Policy
Sustainable Nordic Solutions | Nystrøm Consulting ENK Last updated: June 2026
1. Data Controller
Nystrøm Consulting ENK is the data controller responsible for the processing of personal data in connection with the services offered under the brand name Sustainable Nordic Solutions.
Organisation number: 935 017 297 Contact email: contact@sustainablenordicsolutions.com
2. Personal Data Collected
We collect only the personal data necessary to deliver our services. Depending on the service used, this may include:
Name
Email address
Company name and organisation number
Billing information
Programme access and usage data
Subscription status and history
Correspondence and questions submitted as part of the Sustainability Radar Pro subscription
3. Purpose of Processing
Personal data is processed for the following purposes:
Delivery of and access management for the Sustainable Success Blueprint programme
Delivery of the Sustainability Radar subscription, including monthly email distribution
Responding to questions submitted by Sustainability Radar Pro subscribers
Communication with clients regarding their services
Invoicing, payment processing, and accounting
Compliance with applicable legal obligations
4. Legal Basis
Processing is based on the following legal grounds under GDPR:
Contractual necessity: processing required to fulfil the service agreement with the Client Legal obligation: processing required to comply with Norwegian accounting and tax legislation Legitimate interest: where relevant, for service improvement and security purposes
5. Data Processors
We use trusted third-party service providers to deliver our services. These providers act as data processors and process personal data only in accordance with our instructions and applicable data protection law.
Squarespace, website hosting TrainerCentral, programme delivery and access management Stripe, payment processing Mailchimp, email distribution for Sustainability Radar Zapier, automated integration between Stripe and Mailchimp Fiken, invoicing and accounting
Some of these providers may transfer personal data outside the EEA. Where this occurs, appropriate safeguards are in place in accordance with GDPR Chapter V.
6. Storage and Retention
Personal data is stored only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable Norwegian accounting and legal regulations. Subscription and programme data is retained for the duration of the client relationship and for up to five years thereafter in accordance with Norwegian bookkeeping legislation.
7. Data Subject Rights
Under GDPR, you have the following rights regarding your personal data:
The right to request access to the personal data we hold about you
The right to request correction of inaccurate or incomplete data
The right to request deletion of your data where no legal basis for retention applies
The right to object to or request restriction of certain processing
The right to data portability where processing is based on consent or contract
Requests can be submitted to: contact@sustainablenordicsolutions.com
We will respond within 30 days. In complex cases this period may be extended by a further two months, of which you will be notified.
8. Data Security
Appropriate technical and organisational measures are in place to protect personal data against unauthorised access, loss, alteration, or misuse. Access to personal data is limited to what is necessary to deliver the services described.
9. Complaints
If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet): www.datatilsynet.no
10. Changes to This Policy
This Privacy Policy may be updated when necessary, for example when new services are introduced or when service providers change. The most recent version will always be available on our website. Material changes will be communicated to active subscribers and programme participants by email.