Introduction

This document describes how DTU Wind and Energy Systems collects, stores, and processes your personal data in connection with professional courses and programmes offered by the department.
This includes the DigiWind lifelong learning portfolio and the Online Master of Wind Energy (WEM). The information below covers all activities in which DTU Wind and Energy Systems processes personal data related to these programmes, including:
•  Marketing communications such as newsletters, course announcements, and webinar invitations
•  Registration for and participation in masterclass webinars and events
•  Administration of course enrolment and payment
•  Storage and processing of contact information in our CRM system (Microsoft Dynamics 365 Customer Insights)
•  Issuance of digital course certificates
•  Analysis and statistics to improve our programmes and communications
 

1. Data controller
The data controller is:

Technical University of Denmark (DTU)
DTU Wind and Energy Systems
Frederiksborgvej 399
4000 Roskilde
Denmark

Contact: courses@windenergy.dtu.dk
 

2. Data Protection Officer
DTU has appointed a Data Protection Officer (DPO). If you have questions about how DTU processes your personal data, you can contact the DPO:

DTU
Att. DPO
Anker Engelunds Vej 1
Bygning 101A
2800 Kongens Lyngby

Email: dpo@dtu.dk
Tel: +45 45 25 25 25
 

3. Purposes of the processing

DTU Wind and Energy Systems processes your personal data for the following purposes:
•  To send you information about professional courses and programmes offered by DTU Wind and Energy Systems, including course announcements, newsletters, webinar invitations, and related updates.
•  To administer your registration for and participation in masterclass webinars and events.
•  To administer course enrolment and payment.
•  To issue digital course certificates upon completion of a course.
•  To follow up with relevant information about programmes, activities, and offerings related to your areas of interest.
•  To produce analyses, statistics, and reports to improve our programmes and communications.
 

4. Legal basis

DTU processes your personal data on the following legal grounds:

Article 6(1)(a) - Consent: Where you have given your consent to receive marketing communications from DTU Wind and Energy Systems. You may withdraw your consent at any time (see section 10).
Article 6(1)(b) - Contract: Where processing is necessary for the performance of a contract to which you are party, such as course enrolment and payment, or for taking steps at your request prior to entering into a contract.
Article 6(1)(e) - Public interest: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in DTU. As a public research and educational institution, DTU processes personal data under this legal basis when it is necessary for the delivery of educational activities, including enrolment, course administration, and certification. This also applies to processing carried out in connection with research, knowledge dissemination, and collaboration with external partners, where such activities fall within the university's institutional mandate.

5. Categories of personal data

DTU Wind and Energy Systems processes the following categories of personal data about you:
•  Name (first name and last name)
•  Email address
•  Company or organisation (if provided)
•  Job title (if provided)
•  Country (if provided)
•  Information about your course participation, event registrations, and certificate issuance
•  Communication preferences and consent status

DTU does not process sensitive personal data (special categories of data) in connection with these activities.
 

6. Source of your data

Your personal data is collected in connection with your participation in or interest in professional courses and programmes offered by DTU Wind and Energy Systems. This includes data provided by you through registration forms, event sign-ups, or direct communication.
In some cases, your data may also originate from third-party platforms through which you have expressed interest in DTU Wind courses, such as Coursera or partner institutions. Where this is the case, the data has been collected with appropriate consent or on the basis of another lawful ground.
 

7. Recipients of your data
Your personal data will not be disclosed to third parties unless DTU is legally obligated to do so or it is necessary for the administration of the programme.
DTU uses external service providers (data processors) to support its activities. When DTU uses external providers, this is always governed by a written data processing agreement. Providers are required to follow DTU's instructions and are subject to ongoing oversight to ensure that processing complies with applicable data protection rules and DTU's security requirements.
The primary data processors for DTU Wind course activities are:
•  Microsoft (Dynamics 365 Customer Insights) for CRM, marketing communications, and event management
•  Conference Manager for course registration and payment processing
•  Diplomasafe for issuance of digital course certificates
 

8. Transfer to third countries
In some cases, your personal data may be transferred to countries outside the EU and EEA, for example when DTU uses IT providers based outside this area. These providers act as data processors and process data in accordance with DTU's instructions.
To ensure an adequate level of protection, such transfers are made with appropriate safeguards, such as binding corporate rules (BCR), EU standard contractual clauses (SCC), or other approved transfer mechanisms, including the EU-US Data Privacy Framework.
 

9. Retention period
DTU Wind and Energy Systems retains your personal data for as long as it is necessary for the purposes described in this document. The specific retention periods depend on the processing activity:

Marketing communications (newsletters, course announcements, webinar invitations): Your contact data is deleted within 1 month of consent withdrawal or unsubscribe. If you have not engaged with any communication for 24 months, DTU will either request renewed consent or delete your data.
Webinar registration and participation: Data related to your webinar registration and attendance is retained for 24 months after the event.
Course enrolment and payment: Enrolment and payment data is retained for 5 years after the end of the financial year in which the transaction took place, in accordance in accordance with the Executive Order on Central Government Accounting, Executive Order No. 116 a  or when relevant in accordance with  Danish bookkeeping legislation (bogforingsloven). 
Follow-up and interest-based communication: Your data is retained for as long as you have an active consent. Upon withdrawal, your data is deleted from these activities within 6 months. Contacts with no engagement for 24 months will be asked to renew consent or will be deleted.
Analysis and statistics: Personal data used for analysis and reporting is anonymised or aggregated within 12 months. Once anonymised, the data is no longer personal data and may be retained indefinitely for statistical purposes.
Where data is processed for multiple purposes, it is retained until the longest applicable retention period has expired. Data required for legal purposes will be retained in accordance with applicable rules, regardless of the above periods.
Your personal data will be deleted or archived when it is no longer necessary to fulfil the obligations, tasks, and legitimate purposes described above.
This will typically take place no later than five years after you are no longer enrolled at DTU. 
DTU is required by law to retain certain personal data for a longer period and to transfer such data to the Danish National Archives in accordance with Danish archival legislation. This applies, for example, to information about your Danish civil registration number (CPR number), your enrolment period, and your examination results.
 

10. Right to withdraw consent
Where processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
You can withdraw your consent by:
•  Clicking the unsubscribe link included in any marketing email from DTU Wind and Energy Systems
•  Contacting us at courses@windenergy.dtu.dk
 

11. Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
Right of access: You have the right to request access to the personal data DTU processes about you.
Right to rectification: You have the right to request that inaccurate personal data about you be corrected.
Right to erasure: In certain circumstances, you have the right to request that your personal data be deleted.
Right to restriction: In certain circumstances, you have the right to request that the processing of your personal data be restricted.
Right to data portability: In certain circumstances, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to object: You have the right to object to the processing of your personal data, including processing for direct marketing purposes.

To exercise any of these rights, please contact DTU's Data Protection Officer (see section 2).
 

Right to lodge a complaint

If you are dissatisfied with how DTU processes your personal data, you have the right to lodge a complaint with the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark

Email: dt@datatilsynet.dk
Website: www.datatilsynet.dk

DTU Wind and Energy Systems  |  Privacy Information  |  July 2026