1. ENERGY
  2. Our core principles

GDPR

Our core principles
principles

We process only the information we need, for the purpose we have stated, and no longer than necessary.

Our principles

  • We collect only what we actually need.
  • We use the information for the purpose we have stated.
  • We do not store it any longer than necessary.
  • We protect it against unauthorised access.

When do we process information about you?

When you join, when you use the gym, and when you are in contact with us.

Your rights

You have the right to access, rectification and erasure, and to complain to Datatilsynet, the Norwegian Data Protection Authority. See the privacy policy.

About this text

The text on this page is reproduced from energyfitness.no, retrieved 3 August 2026. If you are in any doubt, the version ENERGY publishes on its own domain is the one that applies. Any questions, take them up with us at hei@energyfitness.no.

Scope

When this policy
applies

This statement applies to you as an individual when ENERGY Fitness AS, which runs ENERGY Fitness, is the data controller for personal data about you. That is, when you use our services and we decide the purpose of the processing and which methods, means and security measures are to be used.

It does not apply where someone else is the data controller, even if you reach that controller's services through ours.

Information linked to your membership, such as contact details, invoices, visit history and membership administration, is available in the Membro app, and that is also where you update your details yourself. If you want a full overview of what we process about you, request access at hei@energyfitness.no. About Membro

Information we normally process

Which data we process depends on which services you have an agreement for or actually use.

  • Name, phone number, email address, postal address, date of birth and gender, in connection with registering as a customer or user.
  • Usernames and passwords for access to our services.
  • Payment information, such as creditworthiness and other relevant bank and account details.
  • Credit information and credit checks are processed in connection with setting up memberships and collecting outstanding amounts.
  • Information about your customer account and our communication with you.
  • ENERGY Fitness does not store credit card details. They are held by our payment services provider, and all communication with the provider is encrypted.
  • Some information comes from external sources, such as payment and delivery services or analytics companies. This can be credit information and credit ratings, information we need in order to authenticate you, or demographic information.

Who we share data with

This is how ENERGY itself describes who the data may be shared with, and where it is processed.

Payment and collection

Acquirer for payment services, debt collection agencies and credit reference agencies.

Suppliers acting on our behalf

Companies we have an agreement with, and that carry out work on our behalf.

Where you have given consent

Others you have given us your consent to share information with, for example an accountant or an accountancy firm.

In a reorganisation

Potential partners in a sale, purchase, merger or other reorganisation of the company.

Public authorities

Where we are required to disclose information.

Outside the EU and EEA

We use both Norwegian and foreign partners, and we transfer information only to recipients that have committed to adequate privacy and security safeguards. Transfers outside the EU or the EEA are made under the EU standard data processing agreement.

Security, retention
and age limits

The information is secured through physical, technical and administrative measures, including encryption via TLS and SSL and strict requirements for our staff. When we develop services, privacy and data protection are built in, and we carry out privacy assessments to identify and limit risk.

We process your information for as long as it is necessary to achieve the purpose of the processing. After that it is deleted, unless the law requires us to keep it longer.

Children means people under 18. Children over 15 can consent to the processing of non-sensitive data, and ENERGY Fitness has a minimum age of 15 for training on your own, 14 in Stord. Whether a member under 18 can give consent themselves depends on the activity and the privacy risk.

The statement is reviewed every year, so that any necessary updates and changes are included. See also the privacy policy.

Questions about privacy?

Send us an email and we will reply.

No minimum termOn a standard membership
The Membro appEasy access and check-in
Get started todayENERGY Start included

NOK 49 until NovemberThen NOK 459 a month

Join now