Privacy Policy

Last updated: May 2026

This privacy policy describes how ATG Academy Vibecke Garnaas collects, uses, stores, and protects personal data through the websites:

  • vibeckegarnaas.com
  • atgacademy.no

 

1. Data Controller

ATG Academy Vibecke Garnaas
Organisation number: 992 199 571

Contact:

Email: support@atgacademy.no

 

2. What personal data we collect

We may collect the following information:

  • name
  • email address
  • phone number
  • billing and payment information
  • information you provide through contact forms, email, or when purchasing services
  • technical information related to website usage (cookies, IP address, browser, device)

We only collect data that is necessary to deliver our services, communicate with you, or comply with legal obligations.

 

3. Purpose and legal basis

We process personal data in order to:

  • deliver products and services
  • manage customer relationships
  • send relevant information and emails
  • handle orders and payments
  • comply with legal obligations
  • improve the website and user experience

The processing is based on:

  • consent (GDPR Art. 6(1)(a))
  • performance of a contract (GDPR Art. 6(1)(b))
  • legal obligation (GDPR Art. 6(1)(c))
  • legitimate interest (GDPR Art. 6(1)(f))

 

4. Cookies

The website uses cookies to:

  • ensure basic functionality
  • analyse traffic and usage patterns
  • improve user experience
  • display relevant content and marketing

We use, among others:

  • Google Analytics
  • Meta Pixel (Facebook Pixel)
  • Stripe
  • Kajabi
  • Cloudflare

Non-essential cookies are only activated after your explicit consent, in accordance with GDPR and Norwegian electronic communications regulations.

You can change or withdraw your consent at any time through the cookie settings on the website.

 

5. Sharing of personal data

We only share personal data with necessary data processors and service providers that support the operation of the business.

This may include:

  • hosting and website services
  • payment providers
  • email systems
  • analytics tools
  • accounting systems

Some providers may be located outside the EU/EEA. In such cases, appropriate safeguards are used in accordance with GDPR, including the EU Standard Contractual Clauses (SCC).

 

6. Storage and deletion

Personal data is stored only for as long as necessary for the purpose it was collected, or as required by law.

Accounting records are stored in accordance with applicable bookkeeping regulations.

You may request access, correction, or deletion of your data at any time.

 

7. Your rights

You have the right to:

  • access the personal data we hold about you
  • request correction of inaccurate data
  • request deletion of your data
  • request restriction of processing
  • data portability
  • object to processing
  • withdraw consent

You also have the right to file a complaint with Datatilsynet if you believe your data is not processed in accordance with applicable regulations.

 

8. Information security

We work to protect your personal data through appropriate technical and organisational measures.

Only authorised individuals have access to data necessary for operations and customer management.

 

9. Changes

This privacy policy may be updated when necessary to reflect changes in services, technology, or applicable regulations.

The latest version will always be available on the website.