Last updated: 2 November 2026
This Privacy Notice explains how Startona AS collects and uses personal data when you visit startona.com, use Startona Speed Circuit, create an account, purchase access, connect a third-party service or contact us.
The data controller is Startona AS, organisation number 930 014 648, Grønlibakken 15b, 0682 Oslo, Norway ("Startona", "we", "us" or "our"). You can contact us at data@startona.com.
This notice explains our processing under the EU General Data Protection Regulation (GDPR), as incorporated into Norwegian law through the Personal Data Act, and other applicable data-protection rules. If you have a question or wish to exercise a right, contact us using the details above.
The data we process depends on how you use Startona and which features you choose. It may include:
Please do not submit information that is not needed to use the service. We do not ask you to provide medical records or diagnoses.
We process personal data only where we have a legal basis under the GDPR. Depending on the activity, our legal bases may include:
Where we rely on legitimate interests, those interests include operating, protecting and improving Startona, preventing misuse and handling disputes. You may object to processing based on legitimate interests in the circumstances set out in the GDPR.
Some data is necessary to create an account, provide the service, process a purchase or meet legal requirements. If you do not provide that data, we may be unable to provide the relevant feature or complete the transaction. Other information, such as optional profile details, marketing preferences or a third-party integration, is voluntary.
We share personal data only where needed for the purposes described in this notice, where you ask us to, or where the law permits or requires it. Service providers process data on our behalf under appropriate contractual arrangements where they act as processors.
We may also disclose information to professional advisers, auditors, authorities or courts where necessary, and to a buyer or successor in connection with a proposed or completed business transfer, subject to applicable law.
We do not permit service providers acting as our processors to use personal data processed on our behalf for their own unrelated purposes. Some providers may separately process data as independent controllers under their own privacy notices. Please review their notices when you use their services.
Some of our service providers may process personal data outside Norway or the European Economic Area (EEA), including in countries that may not provide the same level of data protection. Where a transfer is subject to GDPR Chapter V, we will rely on an applicable transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, and take any supplementary measures required by law.
You may contact us at data@startona.com to request information about the transfer mechanism relevant to a particular provider. The actual locations and transfer arrangements depend on the services and configurations we use.
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, taking account of legal, accounting, security and dispute-resolution requirements. Retention periods vary by data category and purpose.
When data is no longer needed, we delete it, anonymise it or securely restrict it until deletion is possible. We do not promise that all data is erased immediately when an account is closed, because some information may need to be retained by law or in backups.
Startona may use cookies and similar technologies that are necessary for core website functionality, security and account sessions. Analytics, measurement, embedded media and other non-essential technologies will be used only where the required consent has been obtained. You can change your choices through the cookie settings available on the website, where provided.
For details about the specific cookies, providers, purposes and retention periods used on the website, please see our Cookie Notice at startona.com/cookies. This section and the Cookie Notice must be kept consistent with the actual cookie banner, consent-management configuration and scripts deployed on the website.
We use technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No online service can guarantee absolute security. If a personal data breach occurs, we will assess and respond to it in accordance with applicable data-protection law, including notifying the supervisory authority and affected individuals where required.
Depending on the circumstances, you may have the right to:
These rights are subject to conditions and exceptions under the GDPR. To exercise a right, contact data@startona.com. We may need to verify your identity before responding. We will respond within the period required by law, normally one month. Where permitted, this period may be extended for complex or numerous requests, and we will inform you if an extension is necessary.
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or the supervisory authority in the EEA country where you live, work or where you believe an infringement occurred. Datatilsynet's website is datatilsynet.no.
You can request account deletion through your account settings or by contacting us. Deleting your account may remove access to workout history, profile information, achievements and other content associated with your account. Before deleting your account, export any information you wish to keep if an export function is available.
We may retain limited information where necessary to comply with legal obligations, resolve disputes, prevent fraud, enforce our agreements or maintain security. Retained information will be restricted to those purposes and deleted when it is no longer needed.
Startona accounts are intended for people aged 18 or older. We do not knowingly create accounts for children under 18. If you believe a child has provided personal data to us, contact data@startona.com. We will assess the situation and take appropriate steps in accordance with applicable law.
We may use automated calculations to produce workout statistics, training estimates, rankings or to administer account and payment status. These calculations do not make decisions about you that produce legal effects or similarly significant effects within the meaning of GDPR Article 22. If that changes, we will update this notice and provide any information and rights required by law.
We may update this notice to reflect changes in our services, data practices or legal requirements. We will publish the revised notice and update the date above. If a change is material, we will provide additional notice where required by law.