Privacy Policy

Last updated: 15th January 2026

Data Controller Information

This privacy policy applies to brenovakti.top AS, a Norwegian company with registration number 927381467. We are the data controller responsible for your personal data when you use our website and services.

Contact Details:
brenovakti.top AS
Kirkegata 73, 0162 Oslo, Norway
Email: [email protected]
Phone: +47 21 48 79 76

Data We Collect

When you visit brenovakti.top or use our services, we may collect various types of personal data to provide and improve our gym membership retention analytics services. The data we collect includes information you provide directly to us and information we collect automatically through your use of our website.

Information You Provide

• Contact information (name, email address, phone number)
• Company information (gym name, business details)
• Communication preferences
• Messages and enquiries sent through our contact forms
• Account information when you register for our services

Information We Collect Automatically

• Website usage data (pages visited, time spent, click patterns)
• Technical information (IP address, browser type, device information)
• Cookie data and tracking preferences
• Referral sources and marketing campaign interactions

How We Use Your Information

We use the personal data we collect for various purposes related to providing our gym membership retention analytics services and maintaining our business relationship with you. The use of your data is always based on a lawful basis under GDPR and is limited to what is necessary for the specified purposes.

Service Provision

• Providing analytics dashboards and retention insights
• Processing your enquiries and support requests
• Delivering consultations and demonstrations
• Managing your account and service subscriptions

Communication

• Responding to your contact requests and questions
• Sending service updates and important notifications
• Providing customer support and technical assistance
• Marketing communications (with your consent)

Business Operations

• Improving our website and services
• Analysing usage patterns and user preferences
• Ensuring security and preventing fraud
• Complying with legal obligations

Legal Basis for Processing

Under GDPR, we process your personal data based on the following lawful bases:

• Contract Performance: When processing is necessary for providing our services
• Legitimate Interests: For website analytics, security, and business development
• Consent: For marketing communications and optional cookies
• Legal Obligation: When required by applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with trusted service providers who assist us in operating our website and delivering our services, including:

• Analytics providers (Google Analytics)
• Advertising platforms (Google Ads)
• Email service providers
• Cloud hosting services
• Customer support platforms

All third-party processors are required to maintain appropriate security measures and use your data only as instructed by us.

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Generally, we retain personal data for the following periods:

• Contact enquiries: 3 years from last contact
• Customer account data: Duration of service relationship plus 7 years
• Website analytics data: 26 months
• Marketing data: Until consent is withdrawn or 3 years of inactivity

Your Rights

Under GDPR, you have several rights regarding your personal data:

• Right of Access: Request information about the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us at [email protected] or +47 21 48 79 76.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure data transmission, regular security assessments, and staff training on data protection.

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "last updated" date.

Contact Information

If you have any questions about this privacy policy or our data practices, please contact us:

• Email: [email protected]
• Phone: +47 21 48 79 76
• Post: brenovakti.top AS, Kirkegata 73, 0162 Oslo, Norway

Supervisory Authority

You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe we have not handled your personal data in accordance with data protection laws.

Datatilsynet: www.datatilsynet.no