Privacy policy
Last updated: 3.6.2026
1. Introduction
Stord Academy ("we", "us", or "our") operates the course registration portal at www.stordacademy.no (the "Portal"). The Portal is used by employees of Aker Solutions and its partners at Aker Stord Yard to register for and manage course participation.
This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and what rights you have. We are committed to handling your personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and applicable Norwegian data protection law.
2. Data Controller
The data controller responsible for personal data processed through the Portal is:
Aker Solutions ASA
Kjøtteinsvegen 40
Contact: egil.solvoll@akersolutions.com
3. Types of Users and Data We Collect
The Portal supports two types of users, each with a different data footprint:
3.1 Guest Users
You may register for a course without creating an account. As a guest, we collect:
- Email address — required for all guest enrollments.
- Employee ID — required only for courses restricted to internal Aker Solutions or partner employees, to verify eligibility for enrollment.
No account is created and no password is stored. Guest enrollments are linked solely to the email address and/or employee ID you provide.
3.2 Registered Users
You may create a user account to keep a record of your course history, upcoming registrations, and completion status. When creating an account, we collect:
- Email address
- Password (stored in hashed form — we never store your password in plain text)
- Employee ID (optional, or required when your account is used to enroll in employee-restricted courses)
- Course enrollment history and completion records
You may create an account at any time, including after a prior guest enrollment. When an account is created, we will automatically match and link any existing guest enrollments that share the same email address and/or employee ID to your new account.
4. Purpose and Legal Basis for Processing
We process your personal data for the following purposes:
Course enrollment and administration We use your email address to confirm your enrollment, send reminders, communicate course updates, notify you of cancellations, and provide any other information necessary for your participation. Legal basis: Performance of a contract / legitimate interests (Article 6(1)(b) and (f) GDPR).
Verifying employee eligibility For courses restricted to internal employees or specific partner groups, your employee ID is used solely to verify that you are eligible to enroll. It is not used for any other purpose. Legal basis: Legitimate interests (Article 6(1)(f) GDPR) — ensuring course access is restricted to eligible participants.
Account management and course history If you create a user account, we store your enrollment history and completion records so you can access them at any time. Completion records may also be synchronised with external training systems, including Aker's Training Portal LMS (trainingportal.no), to maintain a consolidated record of your training activity across Aker's platforms. Legal basis: Performance of a contract (Article 6(1)(b) GDPR).
Linking guest enrollments to a registered account When you create an account, we match prior guest enrollment records to your account based on your email address and/or employee ID, so your full course history is available in one place. Legal basis: Legitimate interests (Article 6(1)(f) GDPR) — providing continuity of course records.
5. Automatic Deletion of Guest Enrollment Data
Guest enrollment data is retained only for as long as necessary. Guest records that have not been linked to a registered user account will be automatically deleted after a 6 months period.
Once a guest enrollment has been matched and linked to a registered user account, the data is retained as part of the account record and is no longer subject to automatic guest-data deletion.
If you wish to have your guest enrollment data deleted before the automatic deletion period expires, please contact us using the details in Section 9.
6. Data Sharing and Processors
We do not sell or share your personal data with third parties for marketing purposes.
Personal data may be shared with the following categories of recipients:
- Technology service providers and hosting partners who operate or maintain the Portal on our behalf, acting as data processors under a data processing agreement.
- Aker's Training Portal LMS (trainingportal.no) — course enrollment data, attendance, and completion records are shared with this system to maintain a consolidated record of your training activity across Aker's platforms.
- Course administrators and instructors within Aker Solutions or partner organisations, solely to the extent necessary to manage attendance and course delivery.
- Public authorities, where required by law.
All data processors are contractually required to handle personal data only on our documented instructions and in accordance with applicable data protection law.
7. Data Retention
We retain personal data for no longer than necessary for the purposes for which it was collected:
- Guest enrollment data: deleted automatically after the retention period described in Section 5, unless linked to a registered account.
- Registered user account data: retained for as long as your account is active, and for a reasonable period thereafter to allow for account recovery or to satisfy any legal obligations.
- Course completion records: may be retained for a longer period where required to document training obligations or comply with applicable workplace regulations.
You may request deletion of your account and associated data at any time, subject to any overriding legal retention obligations.
8. Your Rights
Under the GDPR, you have the following rights in relation to your personal data:
- Right of access — you may request a copy of the personal data we hold about you.
- Right to rectification — you may ask us to correct inaccurate or incomplete data.
- Right to erasure — you may ask us to delete your personal data, subject to applicable legal obligations.
- Right to restriction of processing — you may ask us to limit how we use your data in certain circumstances.
- Right to data portability — you may request your data in a structured, commonly used format.
- Right to object — you may object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us using the details in Section 9. We will respond within 30 days. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.
9. Contact Us
If you have any questions about this Privacy Policy, or wish to exercise your data protection rights, please contact us at:
Egil Solvoll
Email: egil.solvoll@akersolutions.com
Address: Kjøtteinsvegen 40, 5411 Stord
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email. We encourage you to review this policy periodically.