Privacy policy

This Privacy Policy provides you with information about how and why we process personal data regarding our members. Art Of Ground Games Ltd. ("AOGG" or "we") operates the chain of BJJ Academies, AOGG. We are the Data Controller for the data that was processed in connection with this undertaking.

HOW WE USE PERSONAL DATA
‍Administration of memberships. To register you as a member with us and for us to be able to invoice and manage your membership, we process your name, national ID number, contact information, photo, membership type, and your communication with us. If you have a membership via a company agreement or a partner, we will also process information regarding your employer / the partner through which you have your membership. If you have a student membership, we will also be sure to process data regarding your place of study.

‍Exercise follow-up. To manage and follow up on your exercise with us, we will register your exercise history, i.e., your visits to our BJJ Academies, your enrolment and withdrawal from sessions, your participation in sessions, your use of personal trainers, and your general use of our services. If you want to share such information with us, we will also process information about your health, such as physical injuries or illnesses.

‍Purchases. If you make purchases in our online shop, or if you make purchases at one of our fitness centers which you link to your membership, we will, for bookkeeping purposes, process information regarding your purchases, i.e., what you purchased, the time of the purchase, and the amount.Rewards. To adapt your membership and our communication and marketing, we will use your exercise history to place you at a membership level.

‍Product development. To evaluate, improve, and optimize our exercise services, we will be able to process your responses to member surveys and analyze statistics of your use of our exercise services to understand our members' needs and preferences.

‍Studies. Occasionally, we recruit members for studies, surveys, or other research conducted by third parties. Participation is always voluntary. Unless you consent, we will not gain access to information from such studies at the individual level, but we may gain access to the results at an aggregated level.

‍Video surveillance. For security purposes, we might have video surveillance at our locations.We require a basis for the lawfulness of processing personal data under the GDPR. For administration of memberships, exercise follow-up, an online exercise, app functions, and exercise-related services, we would like to know what we need to do with our agreement with you. For purchases, it is necessary to fulfill a legal obligation. For product development, it is our legitimate interest in improvement and innovation. Our legitimate interest is to contribute to research and public information for studies. For video surveillance, it is necessary to prevent dangerous situations and safeguard considerations for the safety of our employees and members. Suppose we must process special categories of personal data (sensitive personal data) to provide you with our services. In that case, the basis for lawful processing is your consent, which you give via the Membership Terms and Conditions (GDPR, Article 6, no. 1 (a) and Article 7, no. 4).We may also process personal data for other purposes if you agree. If so, you may withdraw your consent at any time.We may also process personal data for other compatible purposes, e.g., bookkeeping, handling disputes and legal proceedings, and in case of acquisitions, mergers, or similar transactions.

‍HOW WE CONDUCT MARKETING

‍We'd like to inform our members about our services and offer you reasonable offers. So, we'll send you a newsletter and marketing, e.g., by email. We can use this communication based on where or how you've been doing it so that it becomes more relevant for you. If you no longer wish to receive marketing, you can use the unsubscribe link in the marketing correspondence you receive or visit "Member Account" on our website or gymdesk.com. So that you know, you cannot unsubscribe from the distribution of information that is not for marketing purposes.

‍HOW WE PROCESS INFORMATION ON SOCIAL MEDIA

‍If you visit our social media pages, we can view your reactions (uploads, likes, comments, etc.). We will also have access to anonymized statistics to gain insight into using our pages on social media. We have a joint processing liability for processing such data with the social media in question. The basis for our lawful processing of possible personal data in this connection is our legitimate interest in having a page on social media and having insight into how it is used. Please note that even if you delete your account or stop following us on social media, your reactions may still be accessible on our page.

WITH WHOM WE SHARE PERSONAL DATA

We will be sure to process your data confidentially. However, we need to share personal data with other undertakings to perform the purposes that are mentioned above in a reasonable manner:
‍Our member management software. We share information with suppliers, such as Gymdesk.com, that assist us in providing our services, e.g., IT suppliers. We have data processing agreements with our suppliers to ensure that the data are processed soundly and not used for other purposes.We may also share information with the authorities if we are ordered to do so. Also, we may share information about you with others if you'd like to.

HOW LONG DO WE STORE THE PERSONAL DATA

We store your data for as long as needed for the above reasons. After, we'll be sure to remove them. Unless you otherwise give your consent, this mainly involves the following:Data regarding member administration will be erased six months after the membership is terminated.Data regarding exercise-related services are continuously erased.

Finnish Bookkeeping (FAS) erases data regarding purchases after five years.Data used for product development are erased so we can anonymize them as soon as possible.Data used for recruitment to studies are erased shortly after recruitment.

Data regarding video surveillance are erased one week after the recordings were made unless it is likely that the tapes will need to be used or surrendered to the police. We may choose to anonymize the data instead of erasing them, i.e., we store the data without connecting them to you as an individual.

‍YOUR PRIVACY RIGHTS

‍You have several rights under the privacy regulatory framework, including the right to demand access, rectification, erasure, limitation, data reporting, and objecting to our processing of data about you. Please don't hesitate to contact us to invoke your rights. We'll respond to your question promptly, typically within one month. Several exceptions and limitations to these privacy rights may entail that we are unable or unwilling to allow you to exercise them.If you disagree with how we process your data, you may submit a complaint to the Norwegian Data Protection Authority. We would appreciate it if you contact us first so that we can clear up any misunderstanding.Feel free to send inquiries to info@artofgroundgames.com if you wish to exercise your rights, have other questions or comments, or would like to get more information about our processing of personal data.