/ data

Privacy Policy

Last updated: July 1, 2025

At Nordic Performance Training ApS, we prioritize protecting your personal data in compliance with GDPR. Our Privacy Policy outlines the data we collect, how we store it, and its intended use. We respect confidentiality and ensure responsible data handling. If you do not accept this policy, we may be unable to process orders or inquiries due to legal requirements.

Data Controller – How to Contact Us

Nordic Performance Training ApS is responsible for the processing of personal data collected from you. Our contact details are:

Nordic Performance Training ApS
Ved Amagerbanen 27
2300 Copenhagen
CVR: 39367572
Phone: 53896545 / 53886545
Email: contact@nordicperformancetraining.com

Purpose, Types of Data Collected, and Legal Basis for Processing

We collect data necessary for managing and monitoring our services. The types of information we collect include:

Contact Information

We collect your full name, age, gender, address, email, and other contact details to identify, communicate, and inform you as needed.

Service-Related Information

Information related to our services, including physiotherapy treatments, where we document health-related data as required by healthcare regulations. This includes medical notes for patient records per the Danish Healthcare Act and the Authorization Act. We may also receive medical data from other healthcare providers, such as your doctor, following legal provisions.

Payment Information

We collect data on purchase history, financial details, and transactions to maintain customer and supplier relationships.

Video Surveillance

Nordic Performance Training facilities are under surveillance for security purposes, with no audio recording.

Legal Basis for Processing

We process your data based on one or more of the following legal grounds:

Your consent
Performance of a contract
Legal obligations
Legitimate business interests (such as security, service improvement, and fraud prevention)

How We Use Your Information

Contact Information: Used for communication, service administration, handling inquiries, processing orders, customer surveys, and marketing.
Service-Related Information: Used to customize treatment plans and optimize diet and training programs based on individual needs.
Payment Information: Used for transaction processing.
Video Surveillance: Used to prevent and resolve security incidents and ensure a safe environment for members.
Legal Compliance: Used to fulfill legal and financial obligations, including bookkeeping and regulatory requirements.

How Your Information is Stored

In compliance with data protection laws, your personal data is stored securely. Data is saved on password-protected computers in controlled facilities, with periodic security audits to ensure compliance with user rights.

Medical records are securely stored either physically in locked cabinets or on password-protected computers accessible only to relevant personnel. Patient records are retained for five years as mandated by the Danish Patient Safety Authority.
Video recordings are stored for up to 30 days before automatic deletion. Only Nordic Performance Training ApS management has access to the footage, which will only be used in cases of legal violations or suspicions of such incidents.

Data Retention

Your personal data is retained as long as necessary to fulfill our obligations to you as a customer, or until deletion is requested. Data may be stored for up to two years, depending on its nature, after which it is either deleted or anonymized. The retention period depends on legal requirements and the purpose of data collection.

Under accounting and anti-money laundering laws, all transactional data, including contact and company details, must be kept for five years.

How Your Information is Shared

Under the Danish Healthcare Act, we are required to maintain confidentiality regarding your health and other sensitive data. However, internal sharing among relevant staff may occur when necessary.

Internal and External Sharing

Data may only be shared outside Nordic Performance Training ApS with your consent, except in specific cases where health information may be disclosed to other healthcare professionals, such as your doctor, under Danish law.
Your contact information is only accessible to your physiotherapist, trainer, or relevant staff assisting with services and sales.

Third-Party Service Providers

We share data with trusted third-party service providers:

Stripe, PaySafe and Acuity Scheduling – supporting technical infrastructure, booking, payment etc.
Legal and debt collection agencies – for contract enforcement, payments, and legal compliance.

Important Notes

Your data is never sold to third parties and will only be shared with authorities if legally required.
Nordic Performance Training ApS may use Google Analytics to collect site visit statistics, including IP addresses. By visiting our website, you agree to Google's privacy terms: www.google.com/privacy.
To unsubscribe from newsletters, follow the instructions in the footer of any email. For assistance, contact us at contact@nordicperformancetraining.com.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of access: You can request a copy of the data we process about you.
Right to rectification: You can request correction of inaccurate data.
Right to erasure: You may request deletion of your data under certain conditions.
Right to restrict processing: You can request restricted use of your data in specific cases.
Right to object: You can object to our data processing in some instances, including for direct marketing purposes.
Right to data portability: You can request that your data be transferred to another provider.

For more details, visit the Danish Data Protection Agency's website: www.datatilsynet.dk.

Supervisory Authority and Complaints

Regulatory oversight is conducted by the Danish Patient Safety Authority (www.stps.dk).
If you are dissatisfied with how we process your data, you have the right to file a complaint with the Danish Data Protection Agency: www.datatilsynet.dk.

Data Breaches

In the event of a suspected data breach involving Nordic Performance Training ApS or our third-party providers, we will assess potential impacts, notify affected users, and report to the Danish Data Protection Agency. If a breach is suspected, you will be contacted as soon as possible.

For any concerns regarding data security, contact us immediately.

Privacy Policy Updates

We continuously review and update our data processing policies. This document serves as the latest version of the Nordic Performance Training ApS Privacy Policy.

Cookies and Tracking

Google Analytics

We use Google Analytics to track website visits. Cookies are stored in your browser to recognize returning visitors, measure traffic, and enhance user experience. No personally identifiable data is processed.

Social Media Plugins

Our site uses tracking pixels from Facebook, Instagram, and YouTube. These platforms may place cookies on your device when you visit our website. Adjust your social media privacy settings to manage exposure to targeted advertising.

Contact Information

Nordic Performance Training ApS
Ved Amagerbanen 27
2300 Copenhagen
CVR: 39367572
Email: contact@nordicperformancetraining.com