Privacy Policy – Töihin Norjaan

Last updated: 5 October 2026

This Privacy Policy explains how TB Group AS processes personal data in connection with the Töihin Norjaan service at kurssit.tomiberg.fi.

It covers website visitors, newsletter subscribers, webinar registrants, individual customers, members and representatives of business customers.

1. Data controller

TB Group AS
Organisation number: 921 561 172
Hamrane, 5704 Voss, Norway
Email: kurssit@tomiberg.fi

Töihin Norjaan is a service brand operated by TB Group AS.

You can contact us at the email address above about your personal data or to exercise your privacy rights.

2. Personal data we process

Depending on your use of the service, we process:

  • Your name, email address and other contact details you provide.

  • Company and billing details, including business contact information.

  • Orders, payment records, membership status and access rights.

  • Newsletter subscriptions and webinar registrations.

  • Customer service correspondence and feedback.

  • Login activity, course progress and other service usage information.

  • Technical information, including IP address, browser and device information.

  • Website visits and interactions recorded through analytics and advertising technologies.

We collect information when you register, subscribe, purchase, use the service or contact us. Technical and usage information is generated when you interact with the website.

Kajabi manages customer information, registrations and service access. Stripe processes payments and provides payment status and transaction records.

3. Purposes and legal bases

Providing services and managing memberships

We use personal data to process purchases, provide content and access rights, manage memberships and deliver customer support. The legal basis is performance of a contract or taking steps at your request before entering into a contract.

Information necessary to process a purchase and deliver the service must be provided. Otherwise, we cannot complete the purchase or provide access.

Webinar registrations

We use registration details to manage participation and send access instructions and event-related messages. The legal basis is performance of the arrangement made when you register.

Newsletters and marketing

We use subscriber information to send newsletters and marketing communications based on consent. You can unsubscribe through our emails or contact us at kurssit@tomiberg.fi.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Service communications

We send necessary messages about purchases, payments, access and memberships to perform our agreement with you. These messages are separate from optional marketing communications.

Accounting and legal obligations

We retain and process relevant order and payment records to meet accounting requirements and other legal obligations.

Security and legal claims

We use necessary technical information and correspondence to maintain service security, investigate problems, prevent misuse and handle legal claims. The legal basis is our legitimate interest in protecting the service, our business and our legal rights.

You may contact us for information about our legitimate-interest assessment.

Analytics and advertising

Non-essential tracking involving personal data requires consent where applicable. This includes advertising measurement and tracking through Meta Pixel and Google Ads.

4. Recipients and service providers

We use:

  • Kajabi for website hosting, customer records, registrations, email communications, course delivery, service analytics and membership access.

  • Stripe for payment processing and transaction management.

  • Meta for advertising measurement through Meta Pixel.

  • Google for advertising measurement through Google Ads and protection against automated form submissions through reCAPTCHA.

Authorised personnel and contractors access information as necessary for their duties. Relevant information is also processed by accounting service providers and disclosed to authorities where required by law.

Providers act as processors or independent data controllers depending on the activity. Their own privacy policies govern processing for which they are independently responsible.

5. International data transfers

Using international service providers involves processing personal data outside the European Economic Area, including in the United States.

Kajabi’s Data Protection Addendum incorporates the European Commission’s Standard Contractual Clauses for relevant international transfers.

Stripe’s contractual arrangements include the EU–U.S. Data Privacy Framework where applicable and Standard Contractual Clauses for relevant transfers.

Other providers use applicable adequacy decisions or contractual safeguards for international transfers, as described in their data protection arrangements.

You can contact kurssit@tomiberg.fi for further information about the safeguards relevant to your data and to request a copy where available.

6. Data retention

Retention depends on the purpose for which information was collected:

  • Customer and membership information is retained while needed to provide purchased access, manage the customer relationship and resolve outstanding account matters.

  • Webinar registration information is retained while needed to organise the event, provide related communications and handle participation enquiries.

  • Newsletter information is retained until you unsubscribe or the mailing list is discontinued. A limited unsubscribe record may be retained to prevent unwanted future marketing.

  • Customer service correspondence is retained while needed to resolve the enquiry and document its outcome.

  • Accounting and transaction records are retained for the period required by applicable Norwegian law.

  • Information necessary for legal claims is retained until the matter and relevant legal retention needs have ended.

  • Technical and tracking information is subject to the retention settings and processing purposes of the relevant service.

Information no longer needed for these purposes is deleted or anonymised.

7. Cookies and tracking technologies

The website uses cookies and similar technologies for service functionality, usage measurement and advertising measurement.

Kajabi uses technologies supporting sessions, account access and service analytics. Meta Pixel and Google Ads record website interactions for advertising measurement. These technologies can process device information, identifiers, IP addresses and page or event information.

Google reCAPTCHA processes technical information to help protect forms against spam and automated submissions.

Necessary technologies support website functions. Non-essential analytics and advertising technologies require consent where applicable.

You can block or delete cookies through your browser settings. Blocking necessary cookies may affect login and other service functions. Deleting cookies does not remove information already received by a provider.

To withdraw consent or object to processing by TB Group AS, contact kurssit@tomiberg.fi. Browser settings and requests to us do not automatically change a provider’s independent processing.

8. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure.

Access is limited to people who need the information to perform their duties.

9. Your rights

Subject to applicable data protection law, you may:

  • Access your personal data and obtain information about its processing.

  • Request correction of inaccurate or incomplete information.

  • Request deletion or restriction of processing.

  • Object to processing based on legitimate interests.

  • Object to direct marketing at any time.

  • Withdraw consent.

  • Request data portability where applicable.

Some records must be retained to fulfil legal obligations or establish, exercise or defend legal claims.

Send requests to kurssit@tomiberg.fi. We may need to verify your identity before fulfilling a request.

You may complain to the Norwegian Data Protection Authority, Datatilsynet, or the competent supervisory authority where you live or work, or where you believe an infringement occurred.

10. Policy updates

We update this policy when our services or processing practices change. Material changes will be communicated appropriately.

The date at the top indicates the latest update.