The Arctic Photographer

Privacy Policy

1. Who we are

This website (“Site”) is operated by Johtti Productions AS, registered in Norway under organization number 926086804
Our contact details are:
Address: Ávžžiluodda 873, 9520 Kautokeino
Email: [email protected]

We provide online courses and educational services through this Site.

2. Personal data we collect

We may collect and process the following types of personal data:

• Contact information (e.g., name, email address, phone number)

• Account details (e.g., username, password)

• Payment information (processed securely by our payment provider – we do not store credit card details)

• Course activity data (e.g., progress, completion, quiz results)

• Technical data (e.g., IP address, browser type, device information, cookies)

3. How we use your data

We process your personal data to:

• Provide and manage access to your online courses

• Handle payments and invoices

• Send you important service updates and support messages

• Improve our website and course content

• Comply with legal obligations

4. Legal basis for processing

We process your data based on one or more of the following legal grounds:

• Performance of a contract (GDPR art. 6(1)(b)) – to deliver the course you have purchased

• Legal obligation (art. 6(1)(c)) – for accounting and tax compliance

• Legitimate interests (art. 6(1)(f)) – to improve our services and protect our systems

• Consent (art. 6(1)(a)) – for optional activities like newsletters or marketing emails

5. Cookies

Our website uses cookies to ensure basic functionality and to analyze usage.
You can manage or disable cookies in your browser settings. 

6. Data sharing and processors

We only share personal data with trusted partners when necessary, such as:

• Payment processors (e.g., Stripe, PayPal)

• Learning management platforms (e.g., Teachable, Thinkific, Kajabi)

• Email and communication providers (e.g., ConvertKit, Sendinblue)

• Analytics services (e.g., Google Analytics – anonymized data)

All partners are bound by data processing agreements in accordance with GDPR.

7. Data storage and retention

We store your data securely within the EEA (European Economic Area).
We retain personal data only as long as necessary for the purposes stated above or as required by law (e.g., accounting records kept for 5 years under Norwegian law).

8. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you

• Correct or update inaccurate data

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• Data portability

• Withdraw consent (for consent-based processing)

• Lodge a complaint with Datatilsynet (The Norwegian Data Protection Authority) if you believe your rights have been violated

To exercise your rights, contact us at [email protected]

9. Data security

We use appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or loss.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.