Privacy Policy

Last updated: 17 August 2026

nOmy Group ApS ("nOmy", "we", "us") is committed to protecting your personal data. This policy explains what we collect, why we collect it, how we keep it safe, and what rights you have under the GDPR and other applicable data protection laws.

Controller: nOmy Group ApS, Villestoftevej 12, 2770 Kastrup, Danmark.

Privacy contact: Privacy contact: [TO BE PROVIDED BY nOmy]

1. What we collect

Account information: name, email address, phone number, job title and workplace.
Organisation data: the company, school or team that invited you, plus any content, tasks and schedules created by administrators.
Learning and work records: course progress, test scores, task logs, verified skills, HACCP checks and production logs.
Device and usage data: browser type, language preference and crash reports to keep the platform reliable.
Communications: messages, broadcasts and support requests sent through the platform.

2. Why we process your data

To provide the training, task and compliance services your organisation signed up for.
To verify and record skills in your personal Skills Passport.
To keep the platform secure and prevent fraud or misuse.
To improve the product based on aggregated, non-identifiable usage patterns.

3. Legal basis

We process personal data on the basis of contract performance (providing the service to your organisation), legitimate interest (security and product improvement), and compliance with legal obligations such as food safety record-keeping.

4. Data sharing

We do not sell personal data. Data is shared only with:

Your organisation's authorised administrators and managers.
Trusted infrastructure providers (cloud hosting, authentication, email delivery) bound by data-processing agreements.
Third-party verification bodies when you explicitly share your Skills Passport QR code.

5. Security

We use Row Level Security, organisation isolation, encrypted storage, invite-only registration and role-based access. All data is stored in the EU/EEA or in jurisdictions with adequate protection.

6. Your rights

You have the right to access, correct, export and delete your personal data. You can download your data and request deletion from your profile page. For other requests, contact the privacy contact above.

7. Retention

We keep your account data for as long as your organisation maintains an active relationship with nOmy. Skills Passport entries are retained so you can prove your verified skills even after leaving an organisation, unless you request deletion.