Privacy policy

Last updated: September 18, 2025

This Privacy Policy explains how FLA ("FLA", "we", "our", "us") collects, uses, stores, and protects your personal data when you visit our website, sign up for our services, participate in our community, or purchase from our webshop.

Who we are

At FLA, we care about your privacy. We only collect the information we need to run our courses, webshop, and community,  and we keep it safe. This page explains what data we collect, why we use it, and how you can control it.FLA is a Danish non-commercial association (forening). We are responsible for your data when you use our services.

Data controller:
Female Leadership Academy (FLA)
CVR-no: DK41181079
Rovsingsgade 68, 2100 Copenhagen Ø, Denmark
Email: contact@fla-leadership.com

What personal data we collect and why

We only collect the personal data that is necessary for specific, lawful purposes. The data we process typically falls into the following categories:

Contact and identification Data
Name, email address, phone number, mailing address
Purpose: Managing communication, registration, support, account creation

Technical and usage Data
IP address, browser type, device data, pages visited, user preferences, session logs
Purpose: Website functionality, analytics, service improvement, security

Communication and marketing Data
Newsletter subscriptions, user preferences, interaction with campaigns or content
Purpose: Delivering newsletters, updates, and tailored communication

Webshop transactions and payment data
Purchase history, billing address, shipping details, order confirmations, and payment information (note: no credit card data is stored directly)
Purpose: Processing purchases, invoicing, tax compliance, delivery

Profile and engagement data
Community interactions, account login records, course activity, preferences, survey responses, support history
Purpose: Membership and learning platform access, service personalization, customer support

Recruitment data
CVs, application letters, LinkedIn profiles, interview notes, job history, contact details
Purpose: Evaluating and processing job applications, making hiring decisions, and maintaining a recruitment pipeline

Why we use your data

We use your data only for clear purposes:

To provide our services (manage your account, deliver orders, give access to courses/community)
To handle payments and invoices
To send you service updates (like order confirmations)
To send you newsletters or marketing (if you’ve agreed)
To improve our website and services (using cookies and analytics, with consent)
To keep our systems secure and prevent fraud
To meet legal requirements (e.g., bookkeeping and tax rules)

How we store and protect your data

We use secure, access-controlled systems with encryption and GDPR-compliant hosting. Your data is:

Stored within the EU or transferred with valid safeguards (e.g., Standard Contractual Clauses)
Accessed only by authorized personnel
Protected against unauthorized access or disclosure

Your rights

You have the following rights under GDPR and Danish law:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent at any time (Art. 7 GDPR)

To exercise your rights, please contact us at contact@fla-leadership.com. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at www.datatilsynet.dk.

Cookies and tracking technologies

We use cookies and similar technologies to:

Ensure site functionality
Measure performance and user behavior
Deliver personalized content or marketing

You can manage your cookie preferences at any time through our cookie consent tool. For more details, see our [Cookie Policy].

How long we keep data

We keep your data only as long as needed:

Account and community data: until you close your account
Orders and invoices: 5 years (as required by Danish accounting law)
Marketing consent: until you unsubscribe or after 2 years of no activity
Technical logs/analytics: usually 12–24 months
Recruitment data: normally 6–12 months

Sharing and transfers of data

We do not sell your personal data. We may share data with trusted third-party service providers who support our operations (e.g., hosting, login, communication, and platform infrastructure). All such providers acting as data processors on our behalf are contractually bound under Article 28 GDPR.Some of our providers are located outside the EU/EEA. These service providers have publicly committed to GDPR compliance and support their services with recognized safeguards.Where data is transferred internationally, we ensure that appropriate protection is in place through one or more of the following:

Transfers to countries with an EU adequacy decision
Standard Contractual Clauses (SCCs) approved by the European Commission
Supplementary contractual, technical, and organizational measures as required

We engage only with providers that demonstrate a high standard of data protection and conduct regular assessments to maintain compliance with applicable regulations.

Changes to this policy

We may update this Privacy Policy to reflect legal or operational changes. The latest version will always be available on our website. If we make significant changes, we will notify you directly.