Privacy Policy - Website

Last updated: November, 2026

1. Introduction

Welcome to SportAI.

This privacy policy, established by Sport AI AS (hereinafter referred to as “SportAI”, “we”,
“our”, “us”) includes information on how we collect, use, disclose, and safeguard your
information, as well as your data protection rights.

We process your personal data in accordance with the Norwegian Personal Data Act and
the General Data Protection Regulation (GDPR). This privacy policy governs our processing of personal data in connection with your contact with us, visitors to our website “sportai.no” and related digital channels, and individuals acting on behalf of business customers, suppliers, partners, and other business contacts. We have a separate privacy policy for individuals for the facilitation of the SportAI services, including the SportAI Coach platform, that you may find on our public home page.

In this privacy policy, we use several terms from the GDPR, for example "processing", " controller" and "data processor". The terms have the same meaning here as in the GDPR.
You can find more information about the terms on the Norwegian Data Protection Authority´s website (www.datatilsynet.no).

Please read this privacy policy carefully.

 

2. Who is responsible for processing your personal data

We are the controller of the personal data we process in connection with the processing
activities described in this privacy policy. This means that we are responsible for ensuring
that the processing is compliant with the data protection legislation.

Our contact information is set out in Section 9.

 

3. Information we collect and process

3.1. We process personal data to respond to enquiries

When you contact us, we will process personal data about you. The personal data we collect
may include contact information such as your name, email address, telephone number, and
any other information you provide to us, which is necessary for us in order to respond to you.

We store this information so that we can provide you with the best service possible. We draw your attention to the fact that enquiries that you send via e-mail are not encrypted. For this reason, we ask you to refrain from sending us confidential, sensitive, or other restricted information either by e-mail or on any forms you complete on our website.

Our legal basis for this processing is our legitimate interest. The legitimate interest is our need to be able to respond to you.

3.2. We process data from business customers, suppliers, and business partners

We process personal data for customer management purposes, such as contact information for persons acting on behalf of our customers, partner companies, vendors, service providers, and similar. This will typically include names, email addresses, roles, and information about potential events they may be invited to. In addition, we process information exchanged during the course of the business relationship, such as emails, meeting notes, and correspondence, as well as contract and order information and invoicing information where relevant.

The processing is carried out based on our legitimate business interest in managing our
contractual relationships and to provide the best possible service. We will only process this
data where the individual´s interests or fundamental rights and freedoms do not override our legitimate business interests. In addition to contact information about existing customers and business partners, we also process contact information about potential and former customers, suppliers, business partners, public authorities, organisations, and similar. The purpose of this processing is our business interest in managing procurements, planning events, and finding potential new business partners.

Where we are required to process personal data to comply with applicable legal obligations - for example, in connection with accounting, tax, or regulatory requirements - we will rely on Article 6(1)(c) GDPR as the legal basis for that processing. Where an individual is themselves a party to a contract with us, such as a sole trader or individual contractor, we may also rely on Article 6(1)(b) GDPR as the legal basis to the extent that processing is
necessary for the performance of that contract.

The list of contacts will be updated regularly to ensure that it only contains the contact
information of the registered persons that is necessary to achieve the purpose.

3.3. We process personal data from website visitors

When you visit our website at sportai.com, our servers and third-party service providers
automatically collect certain technical information about your device and your interaction with our site. This may include your IP address, browser type and version, operating system, device identifiers, pages viewed, access logs, date and time of visit, and referring URL.

We process this information to operate and maintain a functional and secure website, to
analyse and improve the user experience, and to detect and prevent fraud, unauthorised
access, and other security threats. Our legal basis for this processing is our legitimate
interest in operating a secure and optimised website (Article 6(1)(f) GDPR) and, where
applicable, compliance with our legal obligation to implement appropriate security measures under Article 32 of the GDPR (Article 6(1)(c) GDPR).

Where cookies that are not strictly necessary are used, we rely on your consent (Article
6(1)(a) GDPR), obtained through our cookie consent banner, which you may adjust at any
time.

3.4. We process personal data from visitors to our office premises

When you visit our offices, we may process personal data about you for security and access management purposes. This will typically include your name, company or organisation name, the date and time of your visit, and the name of the SportAI employee you are visiting.

Where security cameras (CCTV) or similar systems are in operation at our premises, images may be recorded. Where this is the case, appropriate signage is displayed at the entrance to the relevant area.

The purpose of this processing is to manage access to our premises and to ensure the
safety and security of our staff, visitors, and assets, as well as to comply with our health and safety obligations. Our legal basis for this processing is our legitimate interest in maintaining the security of our premises and the safety of the people within them (Article 6(1)(f) GDPR.

3.5. We process personal data for newsletters and marketing communication

We may send you newsletters, industry updates, information about our products and
services, and other marketing communications. For this purpose, we process contact information such as your name, email address, company or organisation name, and job title, as well as any communication preferences you have indicated to us.

Where you have signed up to receive newsletters or marketing communications from us, or where we are otherwise required to obtain your consent under applicable law - including the Norwegian Marketing Control Act (markedsføringsloven) - we rely on your consent as the legal basis for this processing (Article 6(1)(a) GDPR). Where you are an existing business contact or customer and we are communicating about similar products or services, we may instead rely on our legitimate interest (Article 6(1)(f) GDPR), subject always to your right to object as described in Section 6 below.

You may withdraw your consent or opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing e-mail we send you, or by
contacting us at privacy@sportai.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. We will retain your marketing contact details and preferences until you withdraw your consent or opt out.

4. Disclosure of Your Information

We may share your personal data with third parties where necessary for the purposes
described in this privacy policy. This may for example be:

 

5. Security of Your Information

We use administrative, technical, and physical security measures to help protect your
personal information, including the following measures:

 

6. Your privacy rights

If you are in the European Economic Area (EEA), UK or Switzerland, you have the following rights:

 

To exercise any of these rights, please contact us at privacy@sportai.com. We will respond
within 30 days.

If you feel that our processing of personal data does not comply with what we have
described or that we are otherwise in breach of the data protection regulations, you may
complain to your local data protection authority.

As SportAI is registered and located in Norway, you may also complain directly to the
Norwegian Data Protection Authority:

Datatilsynet
Postboks 458 Sentrum
0105 Oslo
E-mail: postkasse@datatilsynet.no

You can find more information about complaints to the Norwegian Data Protection Authority on their website.

 

7. International data transfers

Your data is primarily stored and processed in the European Union. If we transfer data
outside the EEA, we ensure appropriate safeguards are in place, such as Standard
Contractual Clauses (SCCs) or adequacy decisions.

 

8. Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our processing
activities, applicable legal requirements, or for other operational reasons. The date at the top
of this notice indicates when it was last updated. Where changes are material, we will take appropriate steps to bring them to your attention. We encourage you to review this privacy policy periodically to stay informed about how we process your personal data.

9. Contact us

If you have questions about this privacy policy or wish to exercise your rights, please contact us:

Company name: SportAI AS

Business reg nr: 932754843

Email: privacy@sportai.com

Phone: +47 464 23 779

Address: Madserud Allé 34, 0274 Oslo, Norway