Updated 7 October 2026. Controller: NORSKBRO REINBOTH, org.nr. 938 420 068, Konglevegen 11, 3801 Bø i Telemark. Contact: sverrereinboth.norskbro@gmail.com.
What we process and why
When you contact us or reserve a course, we use your name, email, message, selected course, reservation and payment status to answer you and arrange the course. The basis is steps before a contract and delivering the agreed service. Accounting records are kept to meet legal duties. Optional updates about new courses require your separate consent.
In Min Bro we process your account details, group membership, assignments, submissions, instructor feedback, messages, uploaded files and lesson requests. This supports your teaching. A profile photo is optional. We do not request sensitive personal details. Do not include health details, identity documents or other people’s private information in messages or uploads.
Who can access your data
Your own account opens your own student data. Group messages are visible to members of that group; private messages are visible to you and authorised course staff. Course administration is restricted to the owner. Public course pages show capacity totals, never student names or meeting links.
We use Supabase for authentication, database and private file storage, Netlify for the website, and Brevo for transactional email. The current database is in the EU. Email correspondence also uses Norskbro’s Gmail address. Hosting and email providers may process technical data outside the EEA; ask us for current details about processors and transfer safeguards.
Security and storage
Authentication uses protected password handling. Access is checked on the server. Files are stored in private buckets and opened after an access check. File type and size limits apply. Technical logs and a short-lived pseudonymous rate-limit value help protect the forms.
Course and message data are kept while needed for teaching, agreed follow-up and handling disputes. Completed enquiries and unnecessary uploads are reviewed for deletion. You may request account deletion; information required for accounting or unresolved claims may need to be retained separately. Accounting documentation normally has a five-year retention requirement.
Your rights
Contact us to request access, correction, deletion, restriction or a copy of your data, or to object to processing where applicable. You can withdraw optional marketing consent without affecting your course. You may complain to the Norwegian Data Protection Authority (Datatilsynet).
There is no advertising analytics on this version. The level test runs in your browser and does not automatically send your answers to us. It gives an approximate recommendation, not an official assessment.