Processing of personal data when BDO is organising courses

BDO organises external courses providing auditors and accountants with continuing education hours. As organiser, BDO must prepare and retain course documentation pursuant to the Auditors Act section 5-1 and the Act on Authorisation of Accountants section 3-4. This documentation contains personal data such as the name of the lecturer, his/her background/competence, the names of the participants and their contact information, company name and position. The course documentation is retained for five years after the end of the calendar year when the training was carried out, ref. the Auditors Act section 5-1 and the Act on Authorisation of Accountants section 3-4.

The legal basis for processing this personal data is:

• GDPR Article 6 (1)(c) (legal obligation), the Auditors Act and the Act on Authorisation of Accountants 

After the course, BDO can submit evaluation forms to the participants. The legal basis for this process is our legitimate interest in improving our courses, ref. GDPR Article 6 (1)(f) (legitimate interest).