The International Myopraktikk Organization (TIMO)

1. Introduction

This policy describes how The International Myopraktikk Organization (TIMO) collects, stores, and manages personal data in accordance with the EU General Data Protection Regulation (GDPR).
It applies to students, license holders, and collaboration partners directly involved in the organization’s educational or professional activities.
It does not apply to general visitors of our public website.

TIMO treats all personal information with respect, transparency, and responsibility.
We collect only the data necessary for legitimate educational and administrative purposes, and we never sell or share data with external parties for commercial use.

2. Data Controller

The International Myopraktikk Organization (TIMO)
Organization number: 923 268 537
Address: c/o Stig Runar Hopen, Slettvollvegen 130, 7730 Beitstad, Norway
E-mail: stig-runar@hopenmuskelterapi.no
Website: myopraktikk.org

3. Scope of this policy

This policy covers all personal data processed by TIMO in relation to:

• Students enrolled in educational programs

• License holders registered through TIMO

• Teachers, examiners, and administrative collaborators

It does not concern anonymous visitors who browse the public website without submitting personal information.

4. Purpose of processing

Personal data is processed only for clearly defined and legitimate purposes, including:

• Administration of education and examinations

• Issuance of diplomas and maintenance of license records

• Academic feedback and communication

• Publication of officially licensed myopraktors on myopraktikk.org

• Internal organization and quality assurance

No sensitive health or private data is collected or stored.

5. Data processing and storage

All data processing and storage are handled securely through Google Workspace for Education, provided by Google Ireland Limited.
This includes services such as:

• Google Drive (file storage and document sharing)

• Google Classroom (student assignments and communication)

• Google Gmail (official communication)

• Google Forms (data collection and feedback)

Google acts as data processor on behalf of TIMO under the
Google Workspace for Education Data Processing Agreement (DPA), which complies with the EU Standard Contractual Clauses (SCC) for international data transfer.

6. Data access and security

• Access to personal data is limited to authorized staff within the administration and teaching faculty.

• Students only have access to their own educational files.

• All users are required to maintain secure passwords and lock their devices when not in use.

• Two-factor authentication is optional but may be implemented if available through Google Workspace.

TIMO considers this an appropriate level of security relative to the nature and volume of the data processed.

7. Data retention

• Student and license data are retained as long as necessary for educational and administrative purposes.

• Diplomas, licenses, and final theses are stored permanently as part of academic documentation.

• Temporary student assignments are deleted when no longer needed.

• Ethical assessments or disciplinary records, if any, are kept when relevant to academic or licensing decisions.

8. Images, statements, and communication

Photographs or statements may be used in teaching or internal academic contexts under the principle of legitimate interest.
TIMO and associated students may use such material in information or marketing contexts only when the portrayal is neutral or positive for the individual concerned.

Any student or partner may opt out of such use by sending an e-mail to:
stig-runar@hopenmuskelterapi.no

9. Rights of data subjects

In accordance with the GDPR, individuals have the right to:

• Request access to their personal data

• Request correction of inaccurate information

• Request deletion of data (where legally applicable)

• Restrict or object to certain types of processing

• Withdraw consent for optional use of images or statements

All requests can be made by e-mail to: stig-runar@hopenmuskelterapi.no

10. Contact

Questions regarding data protection or GDPR compliance can be directed to:
Stig Runar Hopen – Data Controller
E-mail: stig-runar@hopenmuskelterapi.no
Phone: +47 917 43 025
Website: myopraktikk.org

Summary

TIMO handles personal information responsibly and transparently.
Only necessary data are collected, securely stored, and used for legitimate educational and administrative purposes within Google Workspace for Education.
General website visitors are not subject to data processing under this policy.