Introduction
TOPPFORMEN is provided by SOLBERG TECHFIT (org. no. 934649729). We process personal data in accordance with the Norwegian Personal Data Act and the EU GDPR. This Policy explains what we collect, why, how we use it, with whom we share it, how long we retain it, and your rights.
Data Controller
The data controller is SOLBERG TECHFIT (org. no. 934649729)
Storevarveien 86A
3159 Melsomvik
Contact: support@toppformen.no .
Data We Collect
• Account data: name, email, username and mobile number. • Timestamps: account creation, last login and activity. • Training/nutrition data you add: history, preferences, selected strength/endurance programs. • Optional calorie calculator: age, sex, weight, activity level, calorie and macro goals (stored only in your account). • Communications: chat messages and feedback. • Technical data: IP address, device/browser details, security logs.
Free text and sensitive data
The free-text fields are intended for brief session notes (e.g., how it felt, intensity). Do not enter sensitive personal data such as medications, diagnoses, or health information. You are responsible for the content you submit.
Sources of Personal Data
We collect data directly from you when you register and use the service. We receive payment-related confirmations from our payment provider (Vipps) when you create or update a payment agreement.
Purposes – How We Use Data
We use data to deliver and tailor the service (training/meal features), manage trials, subscriptions and payments via Vipps, improve functionality and user experience, and ensure stability and security.
Legal Bases
• Contract (GDPR Art. 6(1)(b)): operation of the account and delivery of the service. • Legal obligation (Art. 6(1)(c)): bookkeeping of payment transactions. • Legitimate interest (Art. 6(1)(f)): improving the service, abuse prevention and security. • Consent (Art. 6(1)(a) and, where applicable, 9(2)(a)): voluntary add-ons such as newsletters or certain optional features. Consent can be withdrawn at any time in the same easy way as it was given.
Sharing and Recipients
We share only when necessary: (i) payment provider (Vipps) to handle payments and subscription status, (ii) operations/hosting providers for secure storage and operation of the service, and (iii) email/notification services for communications we send on your behalf. Data from the calorie calculator is not shared and is visible only to you. Any other sharing occurs only with your consent or where required by law. Data Processing Agreements are in place with all vendors.
Where Data Is Stored
Personal data is stored within the EU/EEA, primarily in Sweden.
Transfers Outside the EU/EEA
As a rule, we do not transfer personal data outside the EU/EEA. If such a transfer should occur (e.g., vendor support), it will rely on a valid transfer mechanism, typically the EU Standard Contractual Clauses (SCC) with appropriate supplementary measures.
Retention
We retain personal and training data while your account is active. When the account is closed, such data is deleted or anonymised within 6 months. Transaction and accounting records are kept for 5 years in accordance with bookkeeping rules.
Security
We use encryption in transit and at rest, role-based access controls, security logging, and multi-factor authentication where relevant. In the event of a personal data breach, we will notify the Supervisory Authority and affected users without undue delay and no later than 72 hours.
Automated Decisions
We do not carry out automated individual decision-making or profiling that produces legal effects or similarly significantly affects you.
Cookies
We use cookies for preferences (e.g., language/dark mode) and basic analytics. For non-essential cookies we obtain valid consent before activation. You can decline as easily as accept, and change your choice at any time in settings.
Children
The service is for users aged 18+. We do not knowingly collect data about children.
Changes to this Policy
We may update this Policy. Material changes will be announced with reasonable notice before taking effect and published on this page.
Your Rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to object. Where processing relies on consent, you may withdraw it at any time. We may request necessary identity verification before fulfilling a request. We will respond without undue delay and no later than 30 days. You also have the right to lodge a complaint with the Norwegian Data Protection Authority. See the Contact section for how to reach us.
Contact
Privacy enquiries can be sent to support@toppformen.no.
You may also complain to the Norwegian Data Protection Authority if you believe the processing is unlawful.