By downloading and using the StrengthLog app, you agree to the Terms of Use and Privacy Policy below.

The app is a free download from AppStore or Google Play. In the free version you have access to everything you need to be able to keep a training diary on your phone, tools for calculating 1RM, Wilkspoints and daily calorie consumption, as well as basic statistics. In-app you’ll also find an option to subscribe to StrengthLog Premium, in the form of automatically renewable subscriptions in the following intervals:

• 1 month
• 3 months
• 12 months

Your subscription is connected to your Apple ID or Google Account.

If you log in to a new device, you as a subscriber will need to reset the purchase and then activate the subscription again (this is done via your account with Apple or Goggle).

It is not possible to transfer a subscription from Android to iOS (or vice versa), and if you change platform you must start a new subscription on your new device.

All data connected to your account is stored on our servers (if – and only if – you use the app connected to the Internet, so that a backup is possible) and will be visible to you once you have logged in on your new device and it has synced with our servers.

If you need support, please contact app@strengthlog.com.

If you want to have your account in the app deleted, read this page.

To Unsubscribe From the Premium App:

iOS

All changes to your subscriptions are done directly inside the iTunes Store & App Store through your personal Apple ID account. To unsubscribe, follow these steps:

• Enter settings on your iPhone and follow the steps below.
• Click on your name at the top
• Select “iTunes and App Store”
• Click your Apple ID and select “View Apple ID” in the dialog box
• Select “Subscriptions”
• Find your subscription to StrengthLog and select “Change”
• Select “Unsubscribe”

Android

All changes to your subscriptions are done directly inside the Google Play Store. To unsubscribe, follow these steps:

• Access the Google Play Store
• Click on ”Menu” > “My Apps” > “Subscriptions”
• Find your subscription to StrengthLog and click on it
• Select “Cancel” or ”Unsubscribe”

Terms of Use

This is a license agreement between Styrkelabbet AB (creator of this app, hereinafter ”we”) and you as a user of the Strengthlog App (hereinafter ”the app”).

By downloading and using the app, you are bound by these terms of use. The same goes for purchases or subscriptions in the app. If you do not agree to these terms, do not use the app.

We have the right to change these Terms of Use if required to adapt them to changes in the app as well as to comply with applicable law and our company’s bylaws. It is always the latest version of these Terms of Use that applies when you use the app.

We have the right to remove from, or change the current design, of the app, and to add new features. Such changes may occur without notice.

By downloading the app, you also agree that we process your personal data in an automated way. We never sell your personal data or training data to third parties. However, we can share your data within the framework of non-commercial research projects that have undergone ethical review. In the event that personal data is relevant for such projects, you will first get to consent to sharing it. For more information, see our privacy policy bellow. By accepting these terms, you also accept our privacy policy.

We own the rights to all content in the app. Therefore, you are not permitted to transfer, publish, license or sell the app, or its content, to any third party. You are also not allowed to use the app, or its content, commercially in any way. Furthermore, you are not allowed to modify, customize or translate the app, create works derived from the app, and reverse-engineer or otherwise attempt to find out the app’s source code.

All use of training programs, workouts and challenges created by us, is at your own risk. Styrkelabbet AB takes no responsibility for if you injure yourself during your training. You bear full responsibility for ensuring that you train with safe technique, at weights you can handle, and in a way that suits your physical level.

In the event of a breach of these Terms of Use or other harmful use of the app, StrengthLog (Styrkelabbet AB) has the right to terminate your agreement with immediate effect, which will also terminate any active subscription you might have in the app. This means that we will delete your account and all data associated with the account. Upon deleting the account, you are not entitled to a refund of the amounts that you have paid for subscriptions or for other products in or in connection with the app.

Privacy Policy for the StrengthLog App and StrengthLog Coach

Version 2.0
Updated: November 2023

1. INTRODUCTION

This Privacy Policy describes how Styrkelabbet AB (“we” or “us“) collects, uses, and shares your personal data in connection with use of our training app (the “App“), use of our StrengthLog Coach website and app, or when you communicate with us regarding these services. 

The Privacy Policy also explains your rights in relation to your personal data in accordance with the General Data Protection Regulation (GDPR) and supplementary data protection regulations.

2. WHO IS COVERED BY THIS PRIVACY POLICY

This Privacy Policy covers you who:

• is a user of our App on a smartphone or a smartwatch,
• is a user of our StrengthLog Coach website and app,
• contacts us or otherwise communicates with us regarding these services, for example via our website or email, or
• is a representative of a supplier or partner to us.

3. EXPLANATION OF CERTAIN TERMS

• Personal data means any information or combination of information that, directly or indirectly, identifies you.
• Processing means any action taken in relation to personal data, including for example collection, compilation, disclosure by transmission and deletion.

4. RESPONSIBILITY FOR THE USE OF YOUR PERSONAL DATA

We are responsible (the controller) for the use of your personal data as described in this Privacy Policy, unless otherwise stated.

5. PERSONAL DATA THAT WE COLLECT AND USE

We collect and use different categories of personal data about you. Please note that we may not collect and use all categories of personal data about you. Which personal data that we collect and use about you depends on how you interact with us and which role you have, for example if you use our App, use our StrengthLog Coach website, or if you are a contact person of a customer or supplier of ours. 

The categories of personal data that we collect, and use, include: 

• Identification information, which makes it possible to identify you, for example your name or your username in our App or on our StrengthLog Coach website.
• Contact information, which makes it possible to contact you, for example your address, email address and telephone number. 
• User generated information that is generated based on your activity and use of our App, or on our StrengthLog Coach website and app, for example logged workouts.
• Information for your profile in our App, or on our StrengthLog Coach website and app, for example your gender, age, and body measurements.
• Picture, video, and audio material which includes video footage of you, your picture or voice, for example videos that you upload in our App, or on our StrengthLog Coach website and app.
• Organizational information which relates to your professional role, such as your title, and name and address to the company or organization that you work for.
• Communication with us, for example contents in email or the responses you provide when participating in a survey. 
• Technical information about the device that you use when using our App or our StrengthLog Coach website and app, for example type of device, version of browser and operating system.

6. FROM WHICH SOURCES WE COLLECT PERSONAL DATA

The personal data that we collect about you is mainly collected directly from yourself when you provide your personal data to us, for example when creating an account in our App, when you use our StrengthLog Coach website and app, or contact or otherwise communicate with us.   

Depending on how you interact with us and which role you have, we also collect personal data from other sources: 

• App Stores, i.e. Apple’s App Store and Google Play, for example when you make an in-app purchase to use premium functionality in the App.
• Other apps, such as Google Fit and Apple Health, when you give us permission to collect personal data (for example your body measurements).
• The company or organization that you work for.
• Social network platforms, if you use for example your Facebook account to register and login in the App. 
• Partners that we collaborate with, for example to allow you to use external portals to order premium functionality.
• Publicly available sources, for example websites or social media.
• External persons that provide your personal data to us, for example in connection with communication.

7. FOR WHICH PURPOSES WE COLLECT AND USE PERSONAL DATA

We collect and use your personal data for the purposes outlined below. The purposes for which we in practice use your personal data may, however, vary, depending on how you interact with us and which role you have.

If you use our App

• Provide access to and manage the App
• Communicate about the App
• Provide support
• Communicate about us, our business, and our services
• Analyze the use of the App
• Develop, test, and improve the App
• Detect and prevent misuse of the App
• Ensure technical functionality and security in the App

If you use our StrengthLog Coach website and app

• Provide access to and manage the StrengthLog Coach website and app
• Communicate about the StrengthLog Coach website and app 
• Provide support the StrengthLog Coach website and app
• Communicate about us, our business, and our services
• Analyze the use of the StrengthLog Coach website and app 
• Develop, test, and improve the StrengthLog Coach website and app 
• Detect and prevent misuse of the StrengthLog Coach website and app 
• Ensure technical functionality and security in the StrengthLog Coach website and app 

If you contact us, or otherwise interact with us

• Respond to questions
• Carry out surveys
• Carry out contests, events or similar activities
• Follow-up on and evaluate activities carried out

If you are a contact person of a supplier or partner to us

• Manage the relationship with partners and suppliers
• Communicate in the course of business
• Document our business

When we need to use your personal data for legal reasons 

• Fulfill legal obligations
• Manage, defend and exercise legal claims and rights
• Manage reorganizations and restructuring of the business
• Respond to legal requests
• Protect and ensure the safety of our employees and hired personnel

For more information on which activities that we carry out, which categories of personal data that we use, the legal basis and for how long we store your personal data for the purposes outlined above, please see below our detailed information on our use of personal data.

8. INTEGRATION WITH GOOGLE FIT AND APPLE HEALTH

The App allows you to share, for example, your completed workouts with Google Fit in your Google Account, and with Apple Health connected to your Apple ID, if you give them your permission to do this. The App will only share the information that you specifically allow in the App. You can always, at any time, withdraw your permission for the App to share information with Google Fit and Apple Health by adjusting your settings in your device. 

We follow Google’s API Services User Data Policy, including the limited use requirements in the policy.

9. HOW WE SHARE PERSONAL DATA

We share your personal data with different recipients:

• App Stores, such as the Apple App Store, for example when you make an in-app purchase to subscribe to premium functionality in the App.
• Social network platforms, such as Facebook, if you use your Facebook account to login to the App. 
• Payment service providers, such as Stripe, when you subscribe to our StrengthLog Coach website and app.
• The company or organization that you work for, for example in connection with communication.
• Non-commercial scientific research projects that have undergone ethical review, but only after you consent to sharing your personal data for this specific reason, through an opt-in process in the App.
• Partners that we collaborate with, for example to carry out events and other activities.
• External persons, for example when our employees and personnel communicate in the course of business.
• Other recipients, including public authorities, legal advisors, and insurance companies for legal purposes, for example to manage, defend or exercise legal claims and rights in connection with a court dispute. 

In addition, we share personal data with service providers that we have engaged, and which need access to your personal data to provide services to us. These service providers provide, for example, IT services (for example infrastructure services for our App or our StrengthLog Coach website and app) and communication services (which enable us to send you messages). The services providers which process personal data on our behalf and in accordance with our instructions as processors.  

We use administrative, technical, and physical safeguards to protect your personal data. We always take reasonable legal, technical and organizational measures to ensure that your data is managed with an adequate level of protection when transferring to or sharing with third parties.

10. WHERE WE PROCESS PERSONAL DATA

We use service providers, which also may use sub-contractors, that are established in third countries outside the EU/EEA. To ensure an essentially equivalent level of protection for your personal data when transferred (or otherwise made available) to service providers in third countries outside of the EU/EEA, which do not provide an adequate level of protection, we use the EU Commission’s adopted standard contractual clauses for international transfers according to decision 2021/914 and implement – in light of the law and practices of the third country – necessary supplementary measures. Supplementary measures include technical, contractual, and organizational measures that are necessary to bring the level of protection of the personal data transferred to an essentially equivalent level of protection.

For more information on to which countries your personal data is transferred and the safeguards that we have taken to protect personal data, please contact us by emailing info@strengthlog.com.

11. YOUR RIGHTS

You have certain rights in relation to your personal data. If you wish to exercise your rights, please contact us by emailing info@strengthlog.com. We normally respond to your request within one month following the date we received your request. However, if your request is complicated or if you have submitted several requests, we may need additional time to handle your request. We will in such a case notify you and the reasons for the delay. If we cannot, wholly or in part, comply with your request we will notify you and the reasons for this. 

When you submit a request to exercise your rights, we need to confirm your identity to ensure that you are not somebody else than who you claim to be. This to avoid that we for example disclose personal data to an unauthorized person or in error delete personal data. If we do not have sufficient information to confirm your identity, we can request that you provide supplementary information about yourself to confirm your identity. We only request such information that is reasonable and necessary to your identity. The time to respond to your requests starts when we have confirmed your identity.

Below we describe the rights that you have in relation to your personal data. For further information on your rights, please see the website of your supervisory authority. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (IMY).

Right to access (Article 15 of the GDPR)
You have the right to request confirmation from us as to whether we handle your personal data and, in such case, receive a copy of your personal data together with additional information on our use of your personal data. Please note that the right to a copy of your personal data may not adversely affect the rights of others.

Right to rectification (Article 16 of the GDPR)
You have the right to request that we rectify or supplement your personal data, if you consider that your personal data is incorrect, incomplete, or misleading. 

Right to withdraw your consent (Article 7 of the GDPR)
For certain use of your personal data, we rely on your consent. When we use your personal data based on your consent, you have the right to at any time withdraw your consent. When you have withdrawn your consent, we will not continue to use your personal data based on the consent previously provided.   

Right to erasure (Article 17 of the GDPR)
You have in certain situations the right to request erasure of your personal data (“the right to be forgotten“). Accordingly, the right to erasure is subject to certain conditions. For example, the right to erasure applies if we keep your personal data but no longer for the purposes for which it was collected, if you withdraw your consent which we rely on for our use of your personal data, or if you object to our use of the data and we cannot show a compelling reason to further use it notwithstanding your objection. 

There are also several exemptions from the right to erasure, including if we are obligated under law to keep your personal data or if the personal data is needed to exercise, manage, and defend legal claims. 

Right to object to our use of personal data (Article 21 of the GDPR)
In certain situations, you have the right to object to our use of your personal data. Where we rely on our or another’s legitimate interest for the use of your personal data, you have the right to object to the use for reasons which relate to your particular situation. If we cannot show a compelling reason to continue to use your personal data, we will stop using your personal data for the relevant purpose. 

Right to request restriction of your personal data (Article 18 of the GDPR)
In certain situations, you have the right to request restriction of your personal data which means that you can, at least for a certain period, stop us from using your personal data. The right to request restriction of your personal data applies if you consider that the personal data about you is incorrect and during the period that we verify this, if the use of your personal data is unlawful and if you wish that we continue to store your personal data instead of deleting the personal data, and if we no longer need your personal data for the purposes for which we collected the personal data, but you need the personal data to manage, defend, or exercise legal claims and rights. 

You also have the right to request restriction of your personal data if you have objected to our use of your personal data and during the period we verify whether we have a compelling reason to continue to use your personal data.

If the use of your personal data has been restricted, we are normally only allowed to store your personal data and not use it for any other purpose than to manage, defend or exercise legal claims and rights. We can also use your personal data for other purposes, if you have given your consent to such use. 

Right to data portability (Article 20 of the GDPR)
The right to data portability means that you have a right to receive a copy of the personal data that you have provided to us in a structured commonly used format. Moreover, where it is technically feasible, you also have the right to request that the copy of your personal data is transferred directly to an external recipient. 

The right to data portability only applies, however, to personal data that we handle based on your consent (Article 6.1 (b) of the GDPR) or for the performance of an agreement with you (Article 6.1 (a) of the GDPR).

Right to lodge a complaint
You have the right to lodge a complaint with your supervisory authority. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (IMY).

Automated individual decision-making
We do not carry out any automated individual decision making which has legal effects or similar significant effects on you.

12. USE OF COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and other technologies on our websites. To read more about our use of cookies and similar technologies, please see our cookie policy.

13. UPDATES TO THIS PRIVACY POLICY

We regularly update this Privacy Policy. Our use of personal data may change, for example we may collect personal data for new purposes, collect additional categories of personal data or share your personal data with other recipients than outlined in this Privacy Policy. 

If our use of personal data changes, we will update this Privacy Policy to reflect such changes. At the top of this Privacy Policy, you can see when it was last updated. If we make material changes that are not only editorial to this Privacy Policy, we will notify you of any such changes and what they mean to you in advance by appropriate means.

IF YOU HAVE QUESTIONS

If you have any questions in relation to our use of your personal data, please contact us by emailing info@strengthlog.com.  

Styrkelabbet AB
Reg. No.: 559101-8816
Address: Bomvägen 25, 226 51 Lund, Sweden
Email: info@strengthlog.com

Annex: Detailed information on our use of personal data

WHEN WE USE PERSONAL DATA

Below we explain the purposes for which we use personal data, examples of activities carried out for each purpose, the categories of personal data used for each purpose, the legal basis for the use, and for how long we store personal data. 

If you use our App

Provide access to and manage the App

Examples of activities that we do for this purpose:

• Register and manage your user account to give you access to the App. You need to provide the information that we request when you register in the App, as the information is necessary.
• Storage of the information that you register in the App while using it, for example workouts and goals.
• Use the information that you register to provide the functionality in the App, for example statistics and graphs of your workouts.

Categories of personal data:

• Communication
• Contact information
• Identification information
• Picture, video, and audio material
• Profile information
• Technical information
• User generated information

Legal basis:
Performance of the agreement with you (Article 6.1 (b) of the GDPR). The use of your personal data is necessary to fulfill the terms and conditions for the use of the App.

Storage period:
Personal data is stored for this purpose as long the user account is active. Your user account is active if you have logged into the App during the last 36 months.

Communicate about the App

Examples of activities that we do for this purpose:

• Send you communications about the App, for example directly in the App. This to notify you of updates and if we need to carry out any maintenance, which means that the App will be temporarily unavailable.

Categories of personal data:

• Communication
• Contact information
• Identification information
• Profile information

Legal basis:
Performance of the agreement with you (Article 6.1 (b) of the GDPR). The use of your personal data is necessary to fulfill the terms and conditions for the use of the App.

Storage period:
Personal data is stored for this purpose as long the user account is active. Your user account is active if you have logged into the App during the last 36 months.

Provide support

Examples of activities that we do for this purpose:

• Respond to questions when you contact us.
• Register and manage support matters.
• Investigate, identify, and resolve identified issues, errors, and incidents.
• Communicate with you and others for the same purpose.

Categories of personal data:

• Communication
• Contact information
• Identity information
• Order information
• Profile information
• Technical information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in responding to questions that you have and to provide support, for example managing any potential issues, errors, and incidents that you may experience using the App. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially when you have reached out to us.

Storage period:
Personal data is stored for this purpose for a period of 36 months calculated from the date the support matter was closed or the last communication in the same matter.

Communicate about us, our business, and our services

Examples of activities that we do for this purpose:

• Provide you with communications about us and our business in different channels, for example in the news feed in the App to provide you with updates regarding our business, information about new features and changes to the App.

Categories of personal data:

• Contact information
• Identification information
• Profile information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in communicating about us, our business, and our services.  It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially when you can unsubscribe from our communications at any time.

Storage period:
Personal data is stored for this purpose as long the user account is active, unless you have opted out from receiving communications. Your user account is active if you have logged into the App during the last 36 months.

Analyze the use of the App

Examples of activities that we do for this purpose:

• Collect and analyze information about how the App is used. This helps us better understand how the App is used and how we can continue to develop and improve.

Categories of personal data:

• Identification information
• Technical information
• User generated information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in analyzing the use of the App. This helps us better understand how the App is used and how we can continue to develop and improve. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since the purpose is to develop and improve the App to the benefit of you and all other users.

Storage period:
Personal data is stored for this purpose as long as the user account is active, however, for a maximum period of five (5) years. Your user account is active if you have logged into the App during the last 36 months.

Develop, test, and improve the App

Examples of activities that we do for this purpose:

• Develop and test new functionality to improve the App. It is important to us to continuously develop and improve our App to meet our users’ expectations and needs.
• Investigate, identify, and resolve identified issues, errors, and bugs.

Categories of personal data:

• Identification information
• Profile information
• Technical information
• User generated information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in testing, developing, and improving the App, including resolving errors, bugs, and other software issues. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since the purpose is to develop and improve the App to the benefit of you and all other users.

Storage period:
Personal data is stored for this purpose for the period necessary to anonymise personal data, test functionality, and carry out and verify corrections, which normally is a period of up to six (6) months calculated from the date of the start of the measure.

Detect and prevent misuse of the App

Examples of activities that we do for this purpose:

• Ensure and follow-up on access controls to ensure that only authorized users have access to the App.
• Investigate any suspected misuse of the App and take necessary measures to resolve any identified issues or incidents. 

Categories of personal data:

• Identification information
• Technical information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in detecting and preventing misuse of the App. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose.

Storage period:
Personal data is stored for this purpose as long the user account is active. Your user account is active if you have logged into the Service during the last 36 months.

Ensure technical functionality and security in the App

Examples of activities that we do for this purpose:

• Ensure that the personal data we use is only accessed by authorized individuals by having access controls in place.
• Logging for troubleshooting and incident management.
• Backup of personal data to ensure the availability of the personal data in case of a technical or physical incident. 

Categories of personal data:
Relevant categories of personal data that are stated in relation to the purposes of the use of personal data.

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in ensuring technical functionality and security of our IT systems and services used to provide the App. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose.

Storage period:
Personal data is stored for the same period as stated in relation to each relevant purpose of the processing. Personal data in logs is retained to satisfy our legitimate interest in troubleshooting and incident management for a period of 18 months from the date and time of the log entry. Personal data in backups are stored for a period of 18 months from the date of the backup.

If you use our StrengthLog Coach website and app

Provide access to and manage the StrengthLog Coach website and app

Examples of activities that we do for this purpose:

• Register and manage your user account to give you access to the StrengthLog Coach website and the app. You need to provide the information that we request when you register on the StrengthLog Coach website and in the app as the information is necessary.
• Storage of the information that you register on the StrengthLog Coach website and in the app while using these services, for example workouts and goals.
• Use the information that you register to provide the functionality on the StrengthLog Coach website and in the app, for example statistics and graphs of your workouts.

Categories of personal data:

• Communication
• Contact information
• Identification information
• Picture, video, and audio material
• Profile information
• Technical information
• User generated information

Legal basis:
Performance of the agreement with you (Article 6.1 (b) of the GDPR). The use of your personal data is necessary to fulfill the terms and conditions for the use of the StrengthLog Coach website and app.

Storage period:
Personal data is stored for this purpose as long as the user account is active. Your user account is active if you have logged onto the StrengthLog Coach website and into the app during the last 36 months.

Communicate about the StrengthLog Coach website and app

Examples of activities that we do for this purpose:

• Send you communications about the StrengthLog Coach website and app. This to notify you of updates and if we need to carry out any maintenance, which means that these services will be temporarily unavailable.

Categories of personal data:

• Communication
• Contact information
• Identification information
• Profile information

Legal basis:
Performance of the agreement with you (Article 6.1 (b) of the GDPR). The use of your personal data is necessary to fulfill the terms and conditions for the use of the StrengthLog Coach website and app.

Storage period:
Personal data is stored for this purpose as long the user account is active. Your user account is active if you have logged onto the StrengthLog Coach website and into the app during the last 36 months.

Provide support

Examples of activities that we do for this purpose:

• Respond to questions when you contact us.
• Register and manage support matters.
• Investigate, identify, and resolve identified issues, errors, and incidents.
• Communicate with you and others for the same purpose.

Categories of personal data:

• Communication
• Contact information
• Identity information
• Order information
• Profile information
• Technical information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in responding to questions that you have and to provide support, for example managing any potential issues, errors, and incidents that you may experience using the StrengthLog Coach website and app. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially when you have reached out to us.

Storage period:
Personal data is stored for this purpose for a period of 36 months calculated from the date the support matter was closed or the last communication in the same matter.

Communicate about us, our business, and our services

Examples of activities that we do for this purpose:

• Provide you with communications about us and our business in different channels, for example in the news feed on the StrengthLog Coach website and in the app to provide you with updates regarding our business, information about new features and changes to these services.

Categories of personal data:

• Contact information
• Identification information
• Profile information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in communicating about us, our business, and our services.  It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially when you can unsubscribe from our communications at any time.

Storage period:
Personal data is stored for this purpose as long the user account is active, unless you have opted out from receiving communications. Your user account is active if you have logged onto the StrengthLog Coach website and into the app during the last 36 months.

Analyze the use of the StrengthLog Coach website and app

Examples of activities that we do for this purpose:

• Collect and analyze information about how the StrengthLog Coach website and app are used. This helps us better understand how these services are used and how we can continue to develop and improve.

Categories of personal data:

• Identification information
• Technical information
• User generated information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in analyzing the use of the StrengthLog Coach website and app. This helps us better understand how these services are used and how we can continue to develop and improve. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since the purpose is to develop and improve our services to the benefit of you and all other users.

Storage period:
Personal data is stored for this purpose as long as the user account is active, however, for a maximum period of five (5) years. Your user account is active if you have logged into the Service during the last 36 months.

Develop, test, and improve the StrengthLog Coach website and app

Examples of activities that we do for this purpose:

• Develop and test new functionality to improve the StrengthLog Coach website and app. It is important to us to continuously develop and improve our services to meet our users’ expectations and needs.
• Investigate, identify, and resolve identified issues, errors, and bugs.

Categories of personal data:

• Identification information
• Profile information
• Technical information
• User generated information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in testing, developing, and improving the StrengthLog Coach website and app, including resolving errors, bugs, and other software issues. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since the purpose is to develop and improve our services to the benefit of you and all other users.

Storage period:
Personal data is stored for this purpose for the period necessary to anonymise personal data, test functionality, and carry out and verify corrections, which normally is a period of up to six (6) months calculated from the date of the start of the measure.

Detect and prevent misuse of the StrengthLog Coach website and app

Examples of activities that we do for this purpose:

• Ensure and follow-up on access controls to ensure that only authorized users have access to the StrengthLog Coach website and app.
• Investigate any suspected misuse of the StrengthLog Coach website and app and take necessary measures to resolve any identified issues or incidents. 

Categories of personal data:

• Identification information
• Technical information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in detecting and preventing misuse of the StrengthLog Coach website and app. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose.

Storage period:
Personal data is stored for this purpose as long the user account is active. Your user account is active if you have logged into these services during the last 36 months.

Ensure technical functionality and security on the StrengthLog Coach website and in the app

Examples of activities that we do for this purpose:

• Ensure that the personal data we use is only accessed by authorized individuals by having access controls in place.
• Logging for troubleshooting and incident management.
• Backup of personal data to ensure the availability of the personal data in case of a technical or physical incident. 

Categories of personal data:
Relevant categories of personal data that are stated in relation to the purposes of the use of personal data.

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in ensuring technical functionality and security of our IT systems and services used to provide the StrengthLog Coach website and app. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose.

Storage period:
Personal data is stored for the same period as stated in relation to each relevant purpose of the processing. Personal data in logs is retained to satisfy our legitimate interest in troubleshooting and incident management for a period of 18 months from the date and time of the log entry. Personal data in backups are stored for a period of 18 months from the date of the backup.

If you contact us or, otherwise interact with us

Respond to questions

Examples of activities that we do for this purpose:

• Respond to questions when you contact us.
• Communicate with you and others for the same purpose.

Categories of personal data:

• Communication
• Contact information
• Identity information
• Organizational information
• Technical information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in responding to questions that you have. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially when you have reached out to us.

Storage period:
Personal data is stored for this purpose for a period of 18 months calculated from the date of the last communication in the same matter. Thereafter the personal data may be anonymised.

Carry out surveys

Examples of activities that we do for this purpose:

• If you participate in a survey that we carry out, we collect the personal data that you provide to us in connection with the survey. 
• Compile the results of a survey that we have carried out in a report.

Categories of personal data:

• Communication
• Contact information
• Identification information
• Organizational information
• Profile information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in carrying out surveys to better understand what you think about our business and services, and your experience using our services. This enables us to improve. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially when you have voluntarily participated in the survey.

Storage period:
Personal data is stored for this purpose during the period the survey is carried out and for a period of six (6) months thereafter to compile the responses in a report. Thereafter the personal data may be anonymised.

Carry out contests, events, or similar activities

Examples of activities that we do for this purpose:

• Register your participation in contests, events, and other activities.
• Communicate with you and others regarding the activity.

Categories of personal data:

• Communication
• Contact information
• Identification information
• Organizational information
• Picture, video, and audio material
• Profile information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in carrying out meetings, events, and similar activities. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially if you have voluntarily signed up for or participated in the activity. 

Storage period:
Personal data is stored for this purpose during the time the activity is carried out and for a period of 18 months calculated from the date of the activity to satisfy our legitimate interest of follow-up on the participation, evaluate the activity and for planning potential future activities. Thereafter the personal data may be anonymised.

Follow-up on and evaluate activities carried out

Examples of activities that we do for this purpose:

• If you have participated in an activity that we have carried out, for example an event, we use your personal data to follow-up on and evaluate the activity, to compile reports with statistics on how many that attended the event.
• Plan future activities based on an evaluation of activities carried out. 

Categories of personal data:

• Communication
• Identification information
• Profile information
• Organizational information
• Picture, video, and audio material

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in following-up on and evaluating activities carried out. This helps us understand how we can improve and plan future activities. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially if you have voluntarily signed up for or participated in the activity.

Storage period:
Personal data is stored for this purpose for a period of up to 18 months calculated from the date of the relevant activity. Thereafter the personal data may be anonymised.

If you are a contact person of a supplier or partner to us

Manage the relationship with partners and suppliers

Examples of activities that we do for this purpose:

• Register you as a contact person of the partner or supplier, and keep your information in our registers.
• Communicate with you and others for the same purpose.

Categories of personal data: 

• Communication
• Contact information
• Identification information
• Organizational information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in managing the business relationship with our partners and suppliers. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose.

Storage period:
Personal data is stored for this purpose if there is an active relationship.

Communicate in the course of business

Examples of activities that we do for this purpose:

• Communicate internally and externally in the course of business, for example when our employees communicate with each other, with you and with external persons by email and in digital meetings. 

Categories of personal data:

• Communication
• Contact information
• Identification information
• Picture, video, and audio material
• Organizational information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in communicating internally and externally in the course of business. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, since communication is essential for us to carry out our business.

Storage period:
Personal data is stored for this purpose for a period of 18 months calculated from the date of the last communication in the same conversation.

Document the business

Examples of activities that we do for this purpose:

• Manage and store agreements, decision documents, minutes, and presentations.

Categories of personal data:

• Communication
• Contact information
• Identity information
• Picture, video, and audio material
• Organizational information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in documenting our business to ensure traceability. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose.

Storage period:
Personal data is stored until further notice for this purpose.

When we need to use your personal data for legal reasons

Fulfill legal obligations

Examples of activities that we do for this purpose:

• Keep your personal data to comply with legal storage obligations, for example. to fulfill accounting obligations.
• Share your personal data with public authorities when needed to comply with legal obligations. 

Categories of personal data:
Relevant categories of personal data that are necessary to fulfill the specific legal obligation.

Legal basis:
Fulfill legal obligation (Article 6.1 (c) of the GDPR). The use of your personal data is necessary to fulfill our legal obligations.  

Storage period:
Personal data is stored for such a period that is necessary for us to fulfill the specific legal obligation that we are subject to. 

Manage, defend, and exercise legal claims and rights

Examples of activities that we do for this purpose:

• Make legal assessments with respect to legal claims or rights.
• Share personal data with other recipients, for example external legal advisors, insurance companies and public authorities in connection with a dispute or court proceeding. 

Categories of personal data:
Only the categories of personal data needed for managing and defending legal claims in the individual case.

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in managing, defending, and exercising legal claims and rights. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose.

Storage period:
Personal data is stored for the period required for us to manage and defend the legal claim in the individual case.

Manage reorganizations and restructuring of our business

Examples of activities that we do for this purpose:

• Compile information, including personal data, needed to manage the reorganization or restructuring of our business.
• Share personal data with other recipients, for example a buyer of our business and legal advisors, for the same purpose.

Categories of personal data:
Relevant categories of personal data that are necessary to manage the reorganization or restructuring of the business.

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in managing reorganizations and restructuring of our business. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose if a buyer carries out the same or similar type of business or if a buyer is an affiliate.

Storage period:
Personal data is stored for this purpose for the period that is necessary to manage the reorganization or restructuring.

Respond to legal requests

Examples of activities that we do for this purpose:

• Receive and assess legal requests from public authorities, for example law enforcement.
• Carry out necessary investigations with respect to the request and respond to the legal request.

Categories of personal data:
Relevant categories of personal data that are necessary to respond to the legal request in a specific case, which normally includes identification information, contact information, profile information, organizational information, and communication.

Legal basis:
Fulfill legal obligation (Article 6.1 (c) of the GDPR). To the extent we are legally obligated to respond to a legal request, the use of your personal data is necessary to fulfill our legal obligation. 

Legitimate interest (Article 6.1 (f) of the GDPR). If there is no explicit legal obligation requiring that we respond to a legal request, but we consider that we and the public authority have a legitimate interest in that we respond to the request, we rely on this legitimate interest for the use of your personal data for this purpose, provided that we make the assessment that the legitimate interest in the specific case, considering the circumstances and context of the legal request outweighs your interest of not having your personal data processed for this purpose.

Storage period:
Personal data is stored for this purpose for the period that is necessary to respond to the specific legal request and for a period of ten (10) years thereafter to document the request and our response to the request.

Protect and ensure the safety of our employees and hired personnel 

Examples of activities that we do for this purpose:

• Register, investigate and take other necessary measures to manage incidents involving our employees and hired personnel, for example filing a police report or to report the incident to the concerned public authority.

Categories of personal data:

• Communication
• Contact information
• Identification information
• Organizational information
• Picture, video, and audio material
• Profile information

Legal basis:
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in protecting and ensuring the safety of our employees and personnel. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose.

Storage period:
Personal data is stored for this purpose for the period necessary to investigate the incident and take necessary measures as a result of the incident, including for example filing a police report or to report the incident to the concerned public authority.

WHEN WE SHARE PERSONAL DATA

Below we summarize for which purposes, which categories of personal data and on which legal bases we rely on to share your personal data with different recipients.