Privacy Policy

Introduction

Eko Holding AS (hereafter "we," "us," or "our company") is committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal data. This Privacy Policy explains our data practices in compliance with the General Data Protection Regulation (GDPR), Norwegian data protection law (Lov om personopplysninger), and advertising platform regulations from Google Ads and Meta.

Our business address is Skolebakken 144, 2323 Ingeberg, Norway. We operate an educational website providing artificial intelligence courses and learning resources to learners throughout Canada. Our service area is Canada, and all correspondence can be directed to [email protected] or +47 64 94 12 00.

Section 1: Cookie Categories and Management

We use three categories of cookies on this website. Each category serves a distinct purpose, and your consent is required for certain categories.

Essential Cookies

Essential cookies are required for core website functionality, user security, and session management. These cookies enable basic features such as navigating pages, maintaining your logged-in status, and protecting against fraud. Essential cookies are activated automatically without requiring your consent.

• Examples: session_id, csrf_token, cookie_consent_status
• Consent required: No
• Retention period: Session duration or up to 12 months for preference storage

Analytics Cookies

Analytics cookies collect anonymized data about how visitors use our website. This includes information about page visits, time spent on pages, user interactions, and device characteristics. We use Google Analytics 4 to measure website performance and understand user behavior. Analytics cookies are activated only after you accept them.

• Purpose: Website traffic measurement, user behavior analysis, performance improvement
• Tools: Google Analytics 4
• Examples: _ga, _ga_XXXXXXX, _gid, _gat
• Consent required: Yes
• Retention period: Up to 14 months

Marketing and Advertising Cookies

Marketing and advertising cookies enable personalized advertising, conversion tracking, and remarketing across different platforms. These cookies track your interactions with our website and may be used by advertising partners to show you relevant ads. Marketing cookies are activated only after you accept them.

• Purpose: Remarketing, personalized ad delivery, conversion tracking, campaign measurement
• Consent required: Yes
• Retention period: Up to 540 days (Google Ads default)
• Additional disclosure: See Section 2 below for detailed sub-disclosures

Manage Cookie Preferences: You may adjust your cookie preferences at any time by clicking the "Manage cookie preferences" link in the footer of this website or through the cookie consent panel that appears when you first visit.

Section 2: Marketing Cookies — Mandatory Sub-Disclosures

The following disclosures apply specifically to marketing and advertising cookies used on this website:

Third-Party Ad Serving

Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet. This means that after you visit our site, you may see our advertisements displayed across Google services and partner websites.

Advertising Partners

We work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms. These partners use data collected from your visits to our website to show you relevant ads that match your interests and behaviors.

Remarketing

We use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit. Remarketing allows us to stay in contact with people who have shown interest in our educational programs.

YouTube and Display Network

Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network. These ads are targeted based on your browsing history and interests related to artificial intelligence education.

Tracking Technologies in Use

We use the following tracking technologies on this website:

• Cookies (first-party and third-party)
• Tracking pixels (Google Ads tag via gtag.js, Meta Pixel)
• Device identifiers (browser fingerprint, IP address)
• Conversion event tags

Advertising Measurement and Conversion Tracking

We use conversion tracking to understand which advertisements lead to actions on our website, such as form submissions, course inquiries, or contact requests. This allows us to measure campaign effectiveness and allocate advertising budget appropriately. Conversion data may be shared with Google Ads and Meta for optimization and reporting purposes.

Advertising Technologies Active on This Site

The following advertising and analytics technologies are active on this website:

• Google Ads (gtag.js and Google Tag Manager)
• Google Analytics 4
• Google Remarketing Tag
• Meta Pixel (Facebook and Instagram)

Opting Out From Personalized Advertising

You may opt out of personalized advertising at any time using the tools below. Opting out does not remove advertisements entirely — you will continue to see non-personalized advertisements based on your current page content.

• Google Ads Settings — manage your Google personalized advertising preferences
• Your Online Choices (EU) — opt out from EU/EEA providers
• Network Advertising Initiative — opt out from NAI member companies
• Digital Advertising Alliance — opt out from DAA member companies

Cookie Preference Management

You may manage your cookie preferences at any time by clicking Manage cookie preferences in the footer of this website. This link triggers the cookie consent panel where you can accept or reject each cookie category independently. Essential cookies cannot be disabled, as they are necessary for website security and functionality.

Section 3: Consent Requirements and Recording

When you first visit our website, a cookie consent banner appears at the bottom right of the page. This banner provides three options:

• Accept All: Activates essential, analytics, and marketing cookies
• Reject Non-Essential: Activates only essential cookies; analytics and marketing cookies remain inactive
• Manage Preferences: Opens a panel allowing you to toggle each cookie category individually

Analytics and marketing cookies are activated only after you explicitly accept them. Your consent choice is stored in localStorage for 12 months. We do not activate Google Analytics 4 or Meta Pixel until consent is given. By clicking "Accept All Cookies," you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

EEA and UK User Rights

Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

Withdrawal of Consent

You may withdraw consent at any time by clicking "Manage cookie preferences" in the website footer or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid. You will not face any penalty or service disruption for withdrawing consent.

Section 4: Data Sharing With Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. The recipients and data categories shared include:

Google LLC

We share cookie identifiers, conversion events, anonymized behavioral data, and remarketing lists with Google. Google processes this data to deliver personalized advertisements, measure campaign performance, and understand user interests. Processing is governed by Google's Privacy Policy. Data transfers operate under Standard Contractual Clauses where applicable.

Meta Platforms, Inc.

We share pixel events, conversion data, and custom audiences with Meta. Meta processes this data to deliver personalized ads on Facebook and Instagram, measure ad campaign effectiveness, and create audience segments. Processing is governed by Meta's Data Policy. Data transfers operate under Standard Contractual Clauses where applicable.

Data Protection Safeguards

We do not sell personal data to third parties. All transfers to Google and Meta operate under Standard Contractual Clauses approved by the European Commission, which provide appropriate safeguards for personal data. Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly to understand how they process data.

Section 5: Lead Forms and Contact Requests

When you submit a contact form, request information about a course, or register interest in our services, we collect the information you provide. This typically includes your full name, email address, phone number, selected course of interest, and message content.

Legal Basis for Processing

We process form submission data under two legal bases:

• Consent (GDPR Art. 6.1.a): You consent to data collection when you submit the form
• Performance of a Contract (GDPR Art. 6.1.b): Where a service relationship exists or is anticipated, we process data to fulfill that relationship

Data Retention

Form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law. You may request deletion of your data at any time by contacting us at [email protected].

Privacy Notification at Submission

A link to this Privacy Policy appears adjacent to every form submission button on this website. Submitting a form constitutes acknowledgment and acceptance of this Privacy Policy. Your data will be used to respond to your inquiry and provide information about our educational programs.

Section 6: Google Services and Advertising

This website uses the following Google services:

Google Analytics 4

Google Analytics 4 collects anonymized usage data including page visits, session duration, device information, and behavioral signals. IP anonymization is enabled to protect your privacy. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on.

Google Ads Conversion Tracking

We record when a user completes a defined action (form submission, course inquiry, or similar) after clicking one of our ads. This data is used solely for measuring ad campaign performance and understanding which advertisements drive engagement with our educational programs.

Google Remarketing

We use Google remarketing to show ads to previous visitors across Google's network. Remarketing lists are created based on website behavior only and are not created from sensitive data categories such as health information, financial data, religion, or sexual orientation.

Google Tag Manager

We use Google Tag Manager to deploy tracking tags on our behalf. GTM itself does not collect personal data; it acts as a container for the tags listed above (Google Analytics, conversion tracking, remarketing).

Google's Privacy Terms

Google's advertising products are governed by Google's Advertising Policies. Please review Google's policies to understand how Google processes data collected from our website.

Section 7: Meta Advertising Services

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel records the following:

• Page views and time spent on the website
• Specific conversion events (form submissions, course inquiries)
• Custom audience membership for retargeting purposes

Non-Sensitive Data Commitment

We do not use the Meta Pixel to collect sensitive personal data, nor do we target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta's Data Controller Role

Meta acts as an independent data controller for data collected via its Pixel and processed within Meta's own platform. Meta's processing of this data is governed by Meta's Data Policy.

Managing Your Meta Ad Preferences

To manage your ad preferences on Meta platforms, visit Facebook Ad Preferences. You can control how Meta uses your data for personalized advertising.

Section 8: Prohibited Content Self-Declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories. We explicitly do not offer or advertise the following:

• Weapons or dangerous items
• Controlled substances or drugs
• Counterfeit or fraudulent goods
• Unlicensed gambling services
• Adult content or services
• Services making misleading health or financial claims

All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full. Our AI education programs are legitimate, structured learning offerings that do not promise income, employment guarantees, investment returns, or automated profits.

Section 9: Landing Page Integrity Statement

The content of this website accurately represents the products and services advertised. We do not engage in bait-and-switch practices. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website. Every user sees the same content, course offerings, pricing information, and contact methods regardless of how they arrived at our site.

Section 10: Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors without verifiable parental consent. If we discover that data has been collected from a person under 16 without appropriate consent, we will delete it promptly. Contact us at [email protected] if you believe we have received data from a minor.

Section 11: International Data Transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. These clauses ensure that your data receives a similar level of protection as it would in the EEA. A copy of the applicable SCCs can be requested by contacting us directly at [email protected].

Section 12: Your Data Rights (GDPR Articles 15-22)

If you are located in the EEA or UK, you have the following rights under the GDPR:

Right of Access (Article 15)

You have the right to request a copy of all data we hold about you. We will provide this information in a structured, commonly used format.

Right of Rectification (Article 16)

You have the right to correct inaccurate or incomplete data held about you. We will correct such data upon your request.

Right of Erasure (Article 17)

You have the right to request deletion of your data (the "right to be forgotten") under certain circumstances. We will delete your data unless we have a legal obligation to retain it.

Right to Restrict Processing (Article 18)

You have the right to restrict how we process your data in certain situations. We will limit processing to storage only if you exercise this right.

Right to Data Portability (Article 20)

You have the right to receive your data in a structured, machine-readable format and to transmit it to another controller. We will provide your data in a portable format upon request.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interest. We will cease processing if you exercise this right unless we can demonstrate compelling reasons to continue.

Right to Withdraw Consent (Article 7.3)

You may revoke consent at any time without penalty. Withdrawal does not affect the lawfulness of processing that occurred while consent was valid.

How to Exercise Your Rights

To exercise any of these rights, email us at [email protected] with a clear description of your request. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

• EU users: European Data Protection Board (EDPB)
• UK users: Information Commissioner's Office (ICO)

Section 13: What Data We Collect

We collect the following categories of data:

From Forms and Contact Requests

• Full name
• Email address
• Phone number
• Selected course of interest
• Message content and inquiry details

From Website Interactions

• IP address
• Browser type and version
• Device type and operating system
• Cookies and tracking identifiers
• Usage data (pages visited, time on site, click paths)

From Advertising and Analytics

• Conversion events (form submissions, course inquiries)
• Remarketing list membership
• Advertising interaction data

Section 14: Legal Basis for Processing

For each data type, we process data under the following legal bases:

Contact Form Data

• Consent (Art. 6.1.a): You consent when you submit the form
• Contract Performance (Art. 6.1.b): We process data to respond to your inquiry and provide course information

Analytics Data

• Consent (Art. 6.1.a): Analytics cookies are activated only after you accept them

Marketing and Remarketing Data

• Consent (Art. 6.1.a): Marketing cookies are activated only after you accept them

Security and Fraud Prevention

• Legitimate Interest (Art. 6.1.f): We process data to protect our website and users from fraud and abuse

Section 15: Data Retention Periods

We retain data for the following periods:

• Contact form submissions: 2 years from submission date
• Analytics data (Google Analytics 4): 14 months
• Marketing cookies (Google Ads): Up to 540 days
• Email communications: Duration of relationship plus 1 year
• Server logs: 90 days
• Cookie consent records: 3 years (for audit compliance)

Contact Information for Privacy Matters

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about our data practices, please contact us:

Eko Holding AS
Skolebakken 144
2323 Ingeberg
Norway
Email: [email protected]
Phone: +47 64 94 12 00

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. For significant changes, we may provide additional notice or request your renewed consent. Your continued use of the website following notification of changes constitutes your acceptance of the updated Privacy Policy.