Privacy Policy

Controller: 10th Planet Bergen
Org. no.: 935687500
Address: Tidemandsgate 11, 5045 Bergen
Email: 10thpbergen@gmail.com
Phone: +4748408513
Website: 10pbergen.com
Effective date: 11.08.2025

We take privacy seriously. This notice explains what personal data we process, for what purposes, the legal bases, retention periods, with whom we share data, and your rights under the GDPR and Norwegian law.

1) Data we collect

  • Identity & contact: first name, last name, email, phone, address, date of birth.

  • Membership details: selected plan, start date, binding, freezes, participation in classes/events.

  • Student status: confirmation of active studies and any student ID (for student pricing).

  • Payment data: processed by Stripe (card, payment token, transactions). We receive necessary references only (e.g., last 4 digits, status)—not full card details.

  • Communications: emails/messages and our responses.

  • NIF‑related data: information required for registration in Min idrett and the relevant federation (e.g., name, DOB, contact info).

2) Purposes and legal bases

  • Administer memberships and training (contract performance, GDPR art. 6(1)(b)).

  • Billing, debt collection, bookkeeping (legal obligation/bookkeeping laws, art. 6(1)(c); legitimate interests for collection, art. 6(1)(f)).

  • Reporting to NIF/Idrettskrets/federation (contract/legitimate interests, art. 6(1)(b)/(f)).

  • Security/access control and member follow‑up (legitimate interests, art. 6(1)(f)).

  • Marketing to members (legitimate interests; you may opt out at any time). Outside a membership relationship, we rely on consent.

3) Sources

We collect data directly from you at signup/Checkout and during subsequent interactions. We may supplement with public sources (e.g., address register) to maintain accurate records.

4) Sharing and recipients

  • Stripe (payments). Stripe is an independent controller for payment processing.

  • NIF (Min idrett), Vestland Idrettskrets, and Norges Kampsportforbund (member registry, insurance, licenses/reporting).

  • IT providers (Squarespace, email, cloud storage) as processors under data processing agreements.

  • Debt collection partner for unpaid claims, in accordance with law.

5) Transfers outside the EEA

Some providers (e.g., Stripe, Squarespace) may process data outside the EEA. We safeguard transfers using EU Standard Contractual Clauses (SCCs) and supplementary measures as needed.

6) Retention

  • Membership data: for the duration of membership and up to 24 months after termination to handle inquiries/returns/claims.

  • Accounting data (transactions, invoices): 5 years after the end of the fiscal year (bookkeeping laws).

  • Communications: up to 12 months after last contact unless needed longer.

7) Your rights

You have the right to access, rectification, erasure (where we have no legal duty to retain), restriction, data portability, and to object to processing based on legitimate interests.
To exercise your rights, contact us at [EMAIL]. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (www.datatilsynet.no).

8) Security

We apply access controls, encryption where appropriate, and limit access to personal data to authorized personnel with a need‑to‑know.

9) Children and guardians

For members under 18, we obtain guardian consent where required. Guardians’ contact details are stored with the member profile.

10) Cookies

Our website (Squarespace) and Stripe Checkout may use cookies for essential functions and analytics. See our separate Cookie Notice at 10pbergen.com/cookies for details and choices.

11) Changes to this notice

We may update this notice. Material changes will be announced on our website and/or via email.

Contact

10th Planet Bergen Jiu Jitsu Idrettslag
Tidemandsgate 11, 5005 Bergen • 10thpbergen@gmail.com • +4748408513 • 10pbergen.com