Privacy Policy and Data Protection Information
Last updated: 7 September 2026
Art-Ed Hub takes the privacy and security of its members and users seriously. This Privacy Policy explains what personal data we collect, why we process it, the services that may process data on our behalf, how we protect it, and the rights available to individuals under applicable data-protection law.
Art-Ed Hub is based in Norway and processes personal data in accordance with applicable Norwegian data-protection legislation and the General Data Protection Regulation (GDPR).
1. Who We Are
Art-Ed Hub is an independent educational platform providing memberships, digital educational resources, professional learning, workshops and related services.
The data controller for personal data processed through Art-Ed Hub is:
Art-Ed Hub De Marco
Norwegian organisation number: 934980603
Norway
Website: www.art-edhub.com
Email: info@art-edhub.com
For most activity on the Art-Ed Hub website, Art-Ed Hub determines why and how personal data is processed and therefore acts as the data controller.
Where a school or organisation establishes a specific arrangement under which Art-Ed Hub processes personal data solely on its documented instructions, the respective controller and processor responsibilities will be agreed as required by applicable data-protection law.
2. Personal Data We Collect
The personal data we process depends on how you use Art-Ed Hub.
This may include:
name;
email address;
school, organisation or professional affiliation where provided;
username and account information;
membership type and membership status;
purchase and transaction records;
billing information necessary to administer payments and invoices;
correspondence sent to Art-Ed Hub;
support requests;
workshop or professional-learning booking information;
IP address, browser, device and technical information generated when the website is accessed;
cookie preferences and limited website-usage information.
Payments made through the website are processed by our payment provider. Art-Ed Hub does not receive or store complete payment-card details.
We do not ask users to provide special-category personal data, such as medical information, religious beliefs, political opinions, sexual orientation or biometric data, as part of ordinary membership use.
Please do not provide sensitive personal information through Art-Ed Hub unless it is genuinely necessary and has been specifically requested.
3. How We Collect Personal Data
Personal data may be collected when you:
create or receive an Art-Ed Hub account;
purchase a membership, resource, workshop or other service;
contact us;
subscribe to communications;
participate in a workshop or professional-learning activity;
use the website or logged-in member areas;
are provided with access through a school or organisational arrangement.
Where a school or organisation provides account information to Art-Ed Hub on behalf of a member or student, the school or organisation is responsible for ensuring that it has an appropriate lawful basis for providing that information.
4. Why We Process Personal Data
We process personal data where necessary to:
create and administer user accounts;
provide access to purchased memberships and resources;
process payments and maintain transaction records;
provide workshops, professional learning and other services;
respond to enquiries and support requests;
maintain the security and operation of the website;
prevent misuse, fraud or unauthorised account access;
communicate important information about a membership or service;
send optional news or updates where permitted;
comply with accounting, tax and other legal obligations;
understand and improve the operation of the website and our services.
We do not sell personal data.
We do not use Art-Ed Hub member data to create advertising profiles for sale to third parties.
5. Legal Basis for Processing
Depending on the activity involved, Art-Ed Hub may process personal data on one or more of the following legal bases under Article 6 GDPR:
Contract
Where processing is necessary to provide a membership, resource, workshop or service that you have requested or purchased.
Legal obligation
Where information must be retained or processed to comply with accounting, taxation or other legal requirements.
Legitimate interests
Where processing is reasonably necessary for the operation, administration, security and improvement of Art-Ed Hub and does not override the rights and interests of the individual concerned.
Consent
Where consent is the appropriate basis, for example for certain optional communications or non-essential cookies. Consent can be withdrawn at any time.
6. Schools, Teachers and Student Accounts
Art-Ed Hub is primarily a professional educational platform.
Students do not independently purchase Art-Ed Hub memberships.
In some circumstances, a school, teacher or organisation may arrange authorised student access to specific areas or resources. Where this occurs, Art-Ed Hub seeks to process only the minimum personal information required to create and manage that access, normally a name, school email address or username, account status and access period.
Schools remain responsible for determining the lawful basis on which they provide student information to Art-Ed Hub and for providing any privacy information required within their own educational context.
Art-Ed Hub does not intentionally require students to submit sensitive personal information through their accounts.
7. Data Minimisation
We aim to collect only the personal data reasonably necessary to provide and operate Art-Ed Hub.
We do not intentionally collect information simply because it may be useful in the future.
Where personal data is no longer required for the purpose for which it was collected, it will be deleted, anonymised or retained only where another lawful reason requires us to keep it.
8. Security Measures
Art-Ed Hub applies technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.
Measures used within the Art-Ed Hub service include, where applicable:
encrypted HTTPS connections between users and the website;
controlled access to website administration and member-management systems;
individual user accounts and authentication;
restrictions on administrative access to personal data;
use of established hosting, payment and content-delivery providers;
maintenance and updating of website software and plugins;
website and hosting backups;
security tools and infrastructure provided by our hosting and technology providers;
separation of full payment-card information from Art-Ed Hub systems by using a specialist payment processor;
responding to suspected unauthorised access, misuse or security incidents.
Access to personal data is limited to people and service providers who require it to operate or support Art-Ed Hub.
No method of electronic storage or internet transmission can be guaranteed to be completely secure. Art-Ed Hub therefore uses measures appropriate to the nature and scale of the personal data processed and reviews its arrangements as the platform and its services develop.
9. Service Providers and Subprocessors
Art-Ed Hub uses third-party services to operate the website and provide its services.
The principal providers currently involved in processing or transmitting user information include:
SiteGround
Purpose: Website hosting, website infrastructure, security and backup services.
Personal data associated with website accounts and use of the Art-Ed Hub website may be stored or processed within SiteGround infrastructure.
SiteGround provides data-processing terms and technical and organisational security measures for customers subject to GDPR.
Stripe
Purpose: Payment processing and transaction administration.
When a payment is made through Art-Ed Hub, payment information is processed through Stripe. Art-Ed Hub does not receive or store complete payment-card numbers.
Stripe may act as a data processor or, for certain payment, fraud-prevention and regulatory activities, as an independent data controller.
Stripe maintains a Data Processing Agreement and international-transfer safeguards applicable to its services.
bunny.net
Purpose: Video hosting, streaming and content-delivery services.
Art-Ed Hub uses bunny.net to deliver some video and digital content.
As part of delivering content, bunny.net infrastructure may process limited technical information such as IP information, browser information, request information and streaming-performance data.
bunny.net provides GDPR information and a Data Processing Agreement for its services.
Other technical services
Art-Ed Hub may use additional limited technical services, plugins or embedded tools required for website operation.
Where a third party processes personal data on behalf of Art-Ed Hub, we seek to use providers that offer appropriate data-protection and security safeguards.
This list may be updated if the technology used to operate Art-Ed Hub changes.
10. Data Processing Agreements
Where Art-Ed Hub appoints a provider to process personal data on its behalf, we seek to ensure that an appropriate contractual data-processing arrangement is in place where required by Article 28 GDPR.
Where a school or organisation requires a Data Processing Agreement because Art-Ed Hub is processing personal data specifically on that organisation’s behalf, please contact info@art-edhub.com.
Whether a Data Processing Agreement is required will depend on the particular service and the respective roles of Art-Ed Hub and the school or organisation.
11. International Data Transfers
Some technology providers used by Art-Ed Hub operate internationally.
This means that limited personal data may sometimes be processed outside Norway or the European Economic Area.
Where GDPR requires safeguards for an international transfer, Art-Ed Hub seeks to use providers that rely on a legally recognised transfer mechanism, such as:
an adequacy decision;
the EU-US Data Privacy Framework where applicable;
European Commission Standard Contractual Clauses; or
another lawful transfer mechanism recognised under applicable data-protection law.
Because global technology providers may change their infrastructure and subprocessors, their current privacy and transfer documentation should be consulted where detailed technical information about a particular provider is required.
12. Cookies and Website Technologies
Art-Ed Hub uses cookies and similar technologies required to operate the website and, where applicable, to understand website use or provide embedded functionality.
Non-essential cookies should only be used in accordance with the choices available through the website’s cookie-consent system.
More information is available in the separate Cookie Policy linked from the Art-Ed Hub website.
13. Data Retention
Personal data is kept only for as long as there is a legitimate purpose or legal requirement to retain it.
In general:
account information is retained while an account or membership remains active and for a reasonable period afterwards where needed for administration;
correspondence and support information may be retained where necessary to manage an ongoing or previous service;
transaction, invoice and accounting records are retained for the period required under applicable Norwegian accounting and tax law;
optional marketing information is retained until consent is withdrawn, the individual unsubscribes, or the information is no longer required;
technical and security information may be retained for limited periods where necessary to maintain website security, investigate misuse or resolve technical problems.
Where information is no longer required, it will be deleted or anonymised where reasonably practicable.
14. Your Data Protection Rights
Depending on the circumstances, individuals have rights under GDPR including the right to:
obtain information about how their personal data is processed;
request access to personal data held about them;
request correction of inaccurate or incomplete personal data;
request deletion of personal data where the legal requirements for deletion are met;
request restriction of processing;
object to certain processing based on legitimate interests;
withdraw consent where processing is based on consent;
receive personal data in a portable format where the right to data portability applies;
lodge a complaint with a competent data-protection supervisory authority.
Not every right applies in every circumstance. For example, some information may need to be retained because of legal obligations.
Requests can be made by emailing info@art-edhub.com.
We may need to verify the identity of the person making a request before releasing or changing personal data.
15. Automated Decision-Making
Art-Ed Hub does not currently use personal data to make solely automated decisions that produce legal or similarly significant effects on users.
16. Data Breaches and Security Incidents
If Art-Ed Hub becomes aware of a personal-data breach, we will assess the nature and likely consequences of the incident and take appropriate steps to contain and investigate it.
Where notification to a supervisory authority or affected individuals is required under applicable data-protection law, Art-Ed Hub will make those notifications in accordance with the relevant legal requirements.
If you believe that an Art-Ed Hub account or personal information has been compromised, please contact info@art-edhub.com as soon as possible.
17. Data Protection Authority
Art-Ed Hub is established in Norway.
The relevant Norwegian supervisory authority is:
Datatilsynet – Norwegian Data Protection Authority
Individuals also have the right, where applicable, to contact the data-protection authority in the country in which they live or work.
18. Changes to This Policy
Art-Ed Hub may update this Privacy Policy as its services, technology or legal obligations change.
The current version and date will always be published on this page.
Where a change materially affects how existing users’ personal data is processed, additional notice will be provided where required.
19. Contact
Questions about privacy, data protection, security or the processing of personal data can be sent to:
Art-Ed Hub De Marco
Norwegian organisation number: 934980603
Norway
Email: info@art-edhub.com
Website: www.art-edhub.com
Schools, organisations and Data Protection Officers may also contact us at this address regarding data-processing arrangements, security information or Data Processing Agreements.