Data Protection & Privacy Notice

1. Data Controller

The entity responsible for the processing of personal data on this website is:

2. Data Collection & Processing Categories

We process personal data strictly in accordance with lawful bases under GDPR Article 6:

• Technical Server Logs: IP address, user-agent string, timestamp, requested URI, and HTTP response code. These logs are processed for security, denial-of-service mitigation, and infrastructure stability (GDPR Art. 6(1)(f)).
• Direct Research Inquiries: Name, professional email address, subject area, and message body transmitted via our contact forms (GDPR Art. 6(1)(b) and 6(1)(f)).
• Calculators & Interactive Tools: Numerical values inputted into client-side tools (e.g., height, cadence, pace) are calculated entirely within your browser and are not transmitted to or stored on our servers.

3. Data Retention Periods

Server access logs are automatically rotated and deleted after 30 days. Correspondence received via our research desk is retained for up to 24 months to facilitate ongoing academic communication, after which it is securely purged.

4. Data Subject Rights

Under the GDPR and Norwegian Personal Data Act, you have the right to:

• Request access to your personal data (Art. 15).
• Request rectification of inaccurate personal records (Art. 16).
• Request erasure of your data (Art. 17).
• Request restriction of processing (Art. 18).
• Object to processing based on legitimate interests (Art. 21).
• Lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority).

5. International Data Transfers

Our server infrastructure is situated within the European Economic Area (EEA). We do not sell, rent, or transfer personal data to non-EEA commercial entities.

6. Privacy Desk Contact

To exercise your data protection rights, contact our Data Governance Officer at [email protected].