Privacy
Privacy notice
How we collect, use, store and protect personal data on this website.
Last updated: 21 October 2026
1. Introduction
Welcome to OlyTeam.no.
We take your privacy seriously. This privacy notice explains how we collect, use, store and protect personal data when you visit our website, request information, contact us or use available partner features.
OlyTeam.no is an independent information platform operated by a partner. The website presents information about OlyLife, products, technology, wellbeing and partner programmes.
The website is not necessarily an official website owned or operated by OlyLife. Any affiliations, endorsements and roles are to be understood in accordance with the information provided on the website.
We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).
2. Who is the controller?
The controller is the business or person that determines the purposes and means of the processing of personal data.
For OlyTeam.no, the controller details are:
- Website: https://olyteam.no
If the website is operated by an independent partner, it is normally that person or business that is the controller for data whose purposes and means of processing they themselves determine.
Other businesses may be independent controllers for their own services.
Please contact us if you have any questions about how your personal data is processed.
3. What personal data do we collect?
We only collect personal data that is necessary for the relevant purposes.
3.1 Data you provide to us voluntarily
When you fill in a contact form, request information or contact us, we may process the following data:
- Name
- Email address
- Telephone number, if you provide it
- Country or geographical area, where relevant
- The content of your message
- Other information you choose to give us
We ask you not to send sensitive personal data through ordinary contact forms or email unless this is strictly necessary and has been agreed in advance.
3.2 Data relating to partner features
If the website offers partner login or other features for registered partners, we may process the data necessary to administer access.
This may include:
- Username or partner ID
- Email address
- Information about the user account and access rights
- Time of login
- Security logs and records of relevant account activity
- Information necessary to handle enquiries about the account
Any information about commissions, payments, orders or partner status is processed only if such features are actually offered through the website and there is a valid legal basis for the processing.
3.3 Technical data
When you visit the website, the server may automatically record certain technical data, for example:
- IP address
- Time of the visit
- Which page was visited
- Browser type and operating system
- Technical error messages
- Information necessary to maintain security
Such data is used primarily for technical operation, troubleshooting, security and the prevention of misuse.
3.4 Cookies
The website may use cookies and similar technologies.
Necessary cookies may be used to make the website work, for example for login and security.
Analytics, statistics and marketing cookies are to be used only where the necessary consent or another valid legal basis exists and the requirements of applicable regulations are met.
You should be able to obtain information about which cookies are used, what they do and how you can change your consent.
We will not assume that analytics or marketing cookies are in use until the actual configuration of the website has been checked.
4. Why do we process personal data?
Personal data may be processed for the following purposes:
Responding to enquiries
We use contact details to answer questions, provide requested information and follow up our dialogue with you.
Administering user accounts
If the website offers partner login, we use the necessary data to administer user access and protect the accounts.
Operating and securing the website
Technical data may be used to detect errors, prevent unauthorised access and protect the website against misuse.
Improving the website
If we use lawful web analytics, relevant data may be used to understand how the website is used and to improve its content and functionality.
Sending information and marketing
If you ask to receive news, product information or marketing material, we may process your contact details for this purpose where there is a valid legal basis.
You should be able to withdraw any consent to marketing easily.
Complying with legal obligations
We may process and retain data where this is necessary to comply with statutory requirements or to deal with legal claims.
We do not use personal data for other purposes that are incompatible with the purposes for which it was originally collected.
5. Legal basis for the processing
All processing of personal data must have a valid legal basis under Article 6 GDPR.
Depending on the purpose, we may base the processing on the following:
Consent – Article 6(1)(a) GDPR
Used where you have voluntarily given valid consent, for example to certain forms of electronic marketing or non-essential cookies.
You may withdraw your consent at any time. This does not affect the lawfulness of processing that took place before consent was withdrawn.
Contract – Article 6(1)(b) GDPR
Used where the processing is necessary to enter into or perform a contract with you, for example if you use a service that requires a user account.
Legal obligation – Article 6(1)(c) GDPR
Used where we are legally obliged to process or retain certain data.
Legitimate interests – Article 6(1)(f) GDPR
May be used where we have a legitimate interest, for example in securing the website, preventing misuse or handling necessary technical logs, provided that the interest outweighs the consideration of your rights and freedoms.
We assess which legal basis is appropriate for each individual purpose. We do not automatically rely on all of the legal bases for all processing.
6. Who do we share personal data with?
We do not sell your personal data.
Data may be made available to the following categories of recipients where necessary and lawful:
Technical service providers
Providers of web hosting, server operation, databases, security, email and technical maintenance may have access to the data necessary to provide their services.
Providers of communication and contact services
If we use external systems to handle enquiries or send email, relevant contact details may be processed through these services.
Business partners
Personal data is not automatically shared with OlyLife or other partners.
If we wish to pass your data on to a business partner, this must have a valid legal basis. You will receive the necessary information about the sharing, and consent will be obtained where required.
Public authorities
Data may be disclosed if we are legally obliged to do so, or if the disclosure is necessary and lawful in connection with legal claims.
Where external providers process personal data on our behalf, a data processing agreement will be entered into where required.
7. Transfers of personal data to other countries
We aim to process personal data within the framework of applicable data protection legislation.
If our service providers process or transfer personal data outside the EEA, the transfer must meet the requirements of Chapter V GDPR.
This may include, among other things:
- That the European Commission has decided that the country ensures an adequate level of protection.
- That valid standard data protection clauses are used.
- That necessary supplementary security measures are implemented where required.
We will provide further information about relevant transfers where applicable.
8. How long do we keep the data?
We keep personal data only for as long as is necessary for the purpose for which it was collected, unless longer retention is required by law or is necessary for the establishment, exercise or defence of legal claims.
The following principles apply:
Enquiries: Data is stored for as long as necessary to answer and follow up the enquiry. It is then deleted or anonymised once there is no longer a valid need to retain it.
User accounts: Data relating to partner accounts is stored for as long as the account is active and it is necessary to administer access. After closure, the data is deleted or anonymised once it is no longer needed, subject to statutory requirements and legal claims.
Technical logs: Security and server logs are kept for the period necessary for security, troubleshooting and the prevention of misuse.
Marketing: Data processed on the basis of consent is used for that purpose until consent is withdrawn or the data is no longer necessary.
Statutory documentation: Data that must be retained by law is stored for the period required by the legislation.
The specific retention periods are to be determined and documented on the basis of the actual systems and processing purposes.
Retention periods on this website
| Data | Kept for |
|---|---|
| Requests sent through forms, with notes, follow-up and consent history | Deleted automatically 2 years after the last activity, or earlier if you ask us |
| Partner accounts | As long as the account is active. Deleted when the account is closed or you ask us |
| Consent to marketing | Until you withdraw consent (unsubscribe link in every e-mail); the history is deleted together with the request |
| Failed sign-ins and password reset requests (stored only as a hash) | 30 days |
| Used or expired invitation and reset links | 30 days |
| Log of e-mails sent (recipient stored only as a hash) | 1 year |
| Log of marketing e-mails sent | 1 year |
| Security and administration log (IP address stored only as a hash) | 2 years |
| Read notifications in the partner portal | 1 year |
| Businesses and practitioners from the Norwegian Central Coordinating Register for Legal Entities that we may contact manually, with contact notes | Deleted automatically 1 year after the last activity, or earlier if you ask us. If you have asked not to be contacted, we keep the entry so that you are not contacted again |
| Server logs at the hosting provider | According to the hosting provider’s routines |
Deletion runs automatically once a day.
9. How do we protect your personal data?
We use appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure and other unlawful processing.
Measures may include, among other things:
- Access control and restriction of user rights
- Secure login procedures
- Updating of software and systems
- Backups where relevant
- Protection of servers and databases
- Restriction of access to personal data
- Procedures for handling security breaches
No internet-based service can guarantee absolute security. We therefore work continuously to reduce risk and improve security.
10. Your rights
When we process personal data about you, you have a number of rights under the GDPR.
Right to information
You have the right to information about how we process your personal data.
Right of access
You can request access to the personal data we process about you, as well as information about the processing.
Right to rectification
You can ask us to rectify data that is inaccurate or incomplete.
Right to erasure
You can request that personal data be erased where the conditions for erasure are met.
In certain cases, we may be legally obliged to retain certain data.
Right to restriction of processing
In certain situations, you can request that the processing be restricted.
Right to data portability
Where the conditions of the GDPR are met, you can ask to receive data you have provided to us yourself in a structured, commonly used and machine-readable format. This right applies in the cases laid down by the regulations.
Right to object
If we process data on the basis of legitimate interests, you can object to the processing in accordance with the GDPR.
You have an unconditional right to object to the processing of personal data for direct marketing.
Right to withdraw consent
If the processing is based on consent, you can withdraw it at any time.
Withdrawal does not affect the lawfulness of processing that has already taken place.
Right to lodge a complaint
If you believe that we are processing your personal data in breach of the regulations, you can contact us or lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority).
You can read more about your rights on Datatilsynet's website:
We respond to requests concerning data protection rights without undue delay and normally within one month. In certain cases, this time limit may be extended in accordance with the GDPR. If we do not comply with a request, we will explain why and inform you of the available options for lodging a complaint.
11. Cookies and similar technologies
Cookies can help the website work as expected.
We distinguish between:
Necessary cookies
These may be used to provide services you have expressly requested, for example secure login or maintaining a user session.
Statistics and analytics cookies
These may be used to understand how visitors use the website. They must be handled in accordance with the applicable rules on consent and data protection.
Marketing cookies
These may be used for marketing and ad measurement if such features are offered. Consent will be obtained where required.
You can manage cookies through the available privacy settings on the website and in your browser.
Please note that blocking certain necessary cookies may affect functionality, for example login.
A complete overview of the cookies actually in use will be made available once the website's technical set-up has been checked.
Cookies on this website
| Name | Purpose | Duration | Type |
|---|---|---|---|
PHPSESSID | Keeps you signed in and protects forms against misuse | Until you close the browser | Necessary |
site_lang | Remembers the language you chose (set only when you choose a language) | 1 year | Necessary |
olyTextSize | Remembers the text size you chose (stored in your browser, not as a cookie) | Until you change it | Necessary |
The website uses no cookies for statistics, analytics or marketing. Fonts, images and scripts are loaded from our own website, so no information about your visit is sent to third parties such as Google.
12. Links to other websites
OlyTeam.no may contain links to external websites, services and platforms, including websites operated by OlyLife or other third parties.
When you visit an external website, that website's own terms and privacy policies apply.
We are not responsible for how external websites process personal data, unless we have such responsibility under applicable legislation.
We recommend that you read the privacy notice of external services before providing any personal data.
13. Children and personal data
The website is not specifically directed at children.
We do not knowingly request personal data from children unless there is a valid legal basis and the necessary permissions are in place where required.
If you believe that a child has given us personal data that we should not have collected, you can contact us so that we can look into the matter and consider any necessary measures.
14. Automated decision-making and profiling
We will not use your personal data for automated decisions that produce legal effects concerning you or similarly significantly affect you, unless this is lawful and you receive the information you are entitled to.
If the website later introduces profiling or automated decision-making, this privacy notice will be updated with relevant information about the purpose, legal basis and your rights.
15. Changes to this privacy notice
We may update this privacy notice if the website, its functionality, the processing of personal data or the applicable regulations change.
The latest version will be available on this page.
In the event of material changes affecting how your personal data is processed, we will provide information in an appropriate manner where necessary.
We recommend that you read this notice regularly.
16. Contact us
If you have any questions about this privacy notice, wish to access your personal data or want to exercise your rights, you can contact us:
OlyTeam.no
- Website: https://olyteam.no
You can also contact Datatilsynet if you wish to lodge a complaint about the processing of personal data.