Privacy notice

Who is responsible

Gymnastic Academy is responsible for personal data collected through gymacademy.org. Questions about privacy can be sent to kenneth@gymacademy.org or raised by phone on +45 93 89 85 55.

Data we collect

The information depends on how you use the site. We collect only the data needed for the relevant purpose.

• Contact details and the contents of an enquiry.
• Gymnast and guardian details, eligibility declarations, registration status and communication records for Nørderiet.
• Invoice number, delivery, payment and reconciliation status from e-conomic. Gymnastic Academy does not receive full card details.
• After a place is confirmed, operational details such as emergency contacts, dietary requirements and relevant medical needs.
• Anonymized, cookieless website usage and performance data through Vercel Web Analytics and Speed Insights.

Why we process it

We process data to answer enquiries, administer registrations and waitlists, assess declared eligibility, collect payment, prepare and deliver camps, keep appropriate records, protect the service and meet applicable legal obligations. Where consent is required, it is requested at the point of collection.

Services that support the website

We use service providers only for defined operational purposes. These include Vercel for hosting and cookieless analytics, Sanity for editorial content, Supabase for protected registration records and capacity assignment, Resend for transactional email, and e-conomic with pensopay for invoicing and payment processing. Each provider processes data under its own safeguards and applicable terms.

Strictly necessary access cookies

After a secure Nørderiet email link is opened, the site uses a scoped, HTTP-only access cookie to keep the relevant payment or participant-details form available in that browser without retaining the email credential in the address bar. The payment and participant-details cookies are limited to their relevant service paths, use SameSite=Strict, and expire no later than fourteen days. They are not used for advertising or analytics.

Retention and security

We keep personal data only for as long as it is needed for the stated purpose, dispute handling, accounting or other legal obligations. Registration records are access-controlled, and sensitive operational details are not requested from people who remain on the waitlist.

Your rights

Depending on the circumstances and applicable law, you may ask for access, correction, deletion, restriction, objection or data portability, and you may withdraw consent where processing relies on consent. Contact kenneth@gymacademy.org to make a request. You may also complain to the Danish Data Protection Agency.