Privacy Policy

1. Who we are

AI Mission Hub is a nonprofit innovation platform registered in Norway (Org. no. 937 571 399). We are the data controller for the personal data described in this policy. If you contact us about privacy, we act on your request ourselves rather than passing it to a third party.

2. Scope of this policy

This policy covers personal data we process through this website and through our Community, Academy, Lab and Research activities, including events, applications and newsletters. It does not cover third-party sites we link to, such as WhatsApp, LinkedIn or event platforms, which operate under their own policies.

3. Data we collect

• Identity and contact data: name, email address, organisation, role and country, where you provide them.
• Application and enquiry data: the information you submit through community, programme, challenge, partner, Lab Network and contact forms.
• Event data: registrations, attendance and, where relevant, dietary or accessibility needs you choose to share.
• Communication data: messages you send us and your newsletter subscription status.
• Technical and usage data: IP address, browser and device type, pages viewed and referring source, collected in aggregate to understand site performance.

4. Data we do not want

Please do not send us special category data (for example health, religious or political information) or confidential commercial material unless we have specifically asked for it. If you send sensitive information we do not need, we delete it.

5. Why we process your data and on what legal basis

• To respond to enquiries and administer applications — legitimate interests, or performance of a contract where you enrol in a programme.
• To run events and programmes, including participant lists and logistics — contract or legitimate interests.
• To send newsletters and programme updates — your consent, which you can withdraw at any time using the unsubscribe link in any email.
• To operate, secure and improve this website — legitimate interests.
• To meet legal, accounting and reporting obligations — compliance with a legal obligation.

6. Sharing your data

We share personal data only with processors who help us deliver our work — for example email delivery, form handling, hosting, analytics and event registration providers — under agreements that limit them to acting on our instructions. We also share data where required by law. We do not sell personal data, and we do not share it for third-party advertising.

7. International transfers

Some of our providers operate outside the EEA. Where that happens, we rely on adequacy decisions or the EU Standard Contractual Clauses, together with appropriate technical safeguards such as encryption in transit.

8. How long we keep data

• Enquiries and unsuccessful applications: up to 12 months after our last contact.
• Community and programme participation records: for the duration of participation and up to 24 months afterwards.
• Newsletter subscriptions: until you unsubscribe, plus a minimal suppression record so we do not contact you again.
• Accounting and statutory records: for the retention period required by Norwegian law.
• Aggregated analytics: retained in non-identifying form.

9. How we protect your data

We use encrypted connections, access controls limited to the people who need the data, reputable providers with their own security programmes, and a practice of collecting the minimum data necessary. No online service can be completely secure, but we review our tools and access regularly and act promptly if an incident occurs.

10. Your rights

• Access a copy of the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Request erasure of data we no longer need to keep.
• Restrict or object to processing based on legitimate interests.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting processing that already took place.

11. Making a request or complaint

Contact us through the contact page and we will respond within 30 days. If you are not satisfied with our response, you have the right to complain to the Norwegian Data Protection Authority (Datatilsynet) or to the supervisory authority in your country of residence.

12. Cookies and analytics

We use only the cookies needed to run the site and privacy-respecting analytics to understand aggregate usage, such as which pages are visited. We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings; essential functionality may be affected.

13. Children

Our programmes and this website are intended for people aged 16 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

14. Automated decisions and AI

We do not make decisions about you by automated means alone, and we do not use the personal data you submit to train AI models.

15. Changes to this policy

We may update this policy as our activities develop. The date below shows when it was last revised, and material changes will be communicated to active participants and subscribers.