D-Fetch AS Org. no. 922 218 730 Last updated: 24.02.20261.
1. Who We Are
D-Fetch AS (“D-Fetch”, “we”, “us”, “our”) is a Norwegian software company providing the GymPerformance solution to gym operators internationally. We operate in the European Economic Area (EEA), the United Kingdom, the United States and Brazil. This Privacy Notice explains how we process personal data when you:
Visit our websites Contact us Request a demo Engage in business discussions Subscribe to marketing communications
For this processing, D-Fetch acts as data controller.
2. Applicable Laws
Dependingon your location, your data may be protected under: EU General Data Protection Regulation (GDPR) UK GDPR and Data Protection Act 2018 Brazil Lei Geral de Proteção de Dados (LGPD) Applicable U.S. state privacy laws (such as CCPA/CPRA where relevant)We apply ahigh, GDPR-level standard globally.
3. Personal Data We Collect
3.1 Website Usage Data
We may collect: IP address Browser and device information Pages visited Time and duration of visit Referral source
Legal basis: Legitimate interest (security and improvement) Consent (where required for analytics or marketing cookies)
3.2 Business Contact Data
If you contact us or request a demo: Name Business email Company Job title Communication history
If yousubscribe to newsletters: Name Email Preferences
Legal basis: Consent (withdrawable at any time) We do not sell personal data.
4. Cookies
We use cookies for: Essential functionality Analytics Website performance
Wherelegally required (EEA, UK, Brazil), we request consent for non-essentialcookies.
5. Sharing of Personal Data We may share personal data with: Hosting providers (EEA-based infrastructure) Cloud and IT service providers Email and CRM systems Professional advisers Authorities where legally requiredAll providers are subject to contractual safeguards.
6. International Transfers
Because weoperate internationally, your data may be transferred across borders.
Where datais transferred outside: The EEA The UK Brazil We implement appropriate safeguards, such as: EU Standard Contractual Clauses (SCCs) UK International Data Transfer Addendum Adequacy decisions (where applicable)
7. Data Retention
We retain data only as long as necessary: Demo requests & enquiries: up to 24 months Marketing contacts: until withdrawal or inactivity Active business contacts: duration of relationship Website analytics: limited retention per cookie settings
8. Your Rights
Dependingon your jurisdiction, you may have the right to: Access your data Correct inaccurate data Request deletion Restrict processing Object to processing Data portability Withdraw consent Lodge a complaint with a supervisory authority Supervisoryauthorities include: Norway: Datatilsynet UK: Information Commissioner’s Office (ICO) Brazil: ANPD (Autoridade Nacional de Proteção de Dados) U.S.: Relevant state authorities where applicable
