Privacy
How the Norwegian Medic Challenge handles personal data: what we collect, why, how long we keep it, and what you can ask us to do about it.
Who is responsible
The Norwegian Reservist Federation (NROF), Postboks 1550 Sentrum, 0015 Oslo, is the data controller for personal data processed in connection with the Norwegian Medic Challenge. Contact: post@medicchallenge.no.
What we collect, and why
- Visit statistics. This website sets no tracking cookies. We collect anonymous, aggregated visit statistics (pages viewed, country, device type) that cannot be linked to you as a person.
- Settings stored in your browser. If you switch the site to night mode, or dismiss the notice at the bottom of the page, that choice is saved in your own browser so we do not have to ask again. It stays on your device, is never sent to us, and clearing your browser data removes it.
- Registrations of interest. If you register interest as a team, a partner or a volunteer, we collect your name, email, phone number, country and organization, plus what you tell us in the fields of that form. We use it to come back to you about NMC27 and for nothing else, and we do not pass it to anyone outside the organizing committee. Legal basis: carrying out the steps you have asked us to take.
- Team applications. When applications open, we collect the information needed to assess and select teams: team and organization details, member names, roles, qualification levels and contact details for the team leader. Legal basis: carrying out the steps you request before entering the competition.
- Participants. Selected teams provide practical information before the event (dietary needs, next of kin, insurance-related details). This is collected separately, used only for running the event safely, and deleted after it.
- Photo and video. The event is photographed and filmed. Individual consent is collected from each participant before the event. Published images follow that consent.
- Email contact. If you write to us, we use your address to answer you and for nothing else.
How long we keep it
- InterestRegistrations of interest are deleted after NMC27, or as soon as you ask us to, whichever comes first. Ask by replying to any email from us.
- ApplicationsApplications from teams that are not selected are deleted no later than three months after the event.
- ParticipantsPractical participant data is deleted after the event. Records needed for accounting and insurance are kept as required by law.
- ResultsCompetition results (team names, organizations and scores) are part of the event's public record.
Your rights
You can ask for access to, correction of, or deletion of personal data we hold about you, and you can withdraw consent at any time. Contact post@medicchallenge.no. You can also complain to Datatilsynet, the Norwegian Data Protection Authority.
Three suppliers process data on our instruction and on our behalf: Vercel, which runs the website; Neon, which holds the database; and Resend, which sends the confirmation emails. All three are configured to keep the data within the EU. This policy is updated when what we collect changes, and it will be updated again before the application form opens in September 2026.