Skip to content

Privacy Policy

Last updated: 27 September 2026

BankTopp («we», «us», «our») is operated by NorwegianSpark SA (Org: 834 984 172), registered in Norway. This privacy policy explains how we collect, use and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR), the Norwegian Personal Data Act and the Marketing Control Act.

1. Data controller

NorwegianSpark SA
Org no: 834 984 172
Email: thomaslien@norwegianspark.com
Phone: +47 99 73 74 67
Address: Tveitagarden 4, 5357 Fjell, Norway

2. Information we collect

  • Contact form: Name, email address, subject and message content when you contact us.
  • Newsletter: First name and email address when you sign up for our newsletter.
  • Analytics data: Usage data including pages visited, time on site, device type and browser, collected via Google Analytics 4 in Google Consent Mode. Until you choose Accept in our cookie banner, Google Analytics sets no cookies and receives only cookieless measurements; analytics cookies are set only after you accept. IP anonymisation is enabled.
  • Affiliate click data: When you click an affiliate link, we record the click for commission tracking. We do not pass your name or email address to affiliate partners; the networks collect only what they need to credit a referral, under their own privacy policies.

3. Legal basis for processing

  • Contact form: Legitimate interest (GDPR art. 6(1)(f)) — to respond to your inquiry.
  • Newsletter: Consent (GDPR art. 6(1)(a)) — you actively sign up.
  • Analytics: Consent (GDPR art. 6(1)(a)) for analytics cookies, which are set only after you choose Accept; cookieless measurement before that choice relies on legitimate interest (GDPR art. 6(1)(f)) — to improve the site.
  • Advertising: Consent (GDPR art. 6(1)(a)) — Google AdSense advertising code loads only after you choose Accept.
  • Affiliate tracking: Legitimate interest — to operate our business.

4. Data retention

Contact form data is retained for 12 months, then deleted. Analytics data is kept in Google Analytics for the retention period set in our Google Analytics account and is then deleted automatically. Newsletter data is retained as long as you remain a subscriber.

5. Your rights

Under the GDPR and the Norwegian Personal Data Act, you have the right to:

  • Access your personal data
  • Rectification of inaccurate information
  • Erasure of your data
  • Restriction of processing
  • Data portability
  • Object to processing
  • Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet)

6. Supervisory authority

Datatilsynet
Website: datatilsynet.no
Email: postkasse@datatilsynet.no

7. Cookies and advertising

When you first visit, a cookie banner asks you to Accept or Reject. Until you choose Accept, this site stores no analytics, affiliate or advertising cookies on your device. Your choice itself is saved in your browser's local storage for 12 months so that we do not ask again; to change it, clear this site's data in your browser and the banner will ask again.

  • Google Analytics 4: runs in Google Consent Mode with analytics and advertising storage set to "denied" by default, so it is cookieless until you accept. After Accept, Google Analytics sets its analytics cookies to measure visits.
  • Affiliate tracking (Impact, Partnerize, CJ): many links on this site are affiliate links. After Accept, we load Impact's tracking script, which may set a cookie to credit a referral. When you click an affiliate link, you pass through the network's tracking domain (Impact, Partnerize or CJ), which may set its own cookies so that a sign-up or purchase can be credited to us. Those cookies are governed by the network's and the advertiser's own privacy policies.
  • Advertising (Google AdSense): we have applied to show ads served by Google AdSense. The AdSense code loads only after you choose Accept.

Where Google ads are shown on this site:

  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
  • Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
  • You may opt out of personalised advertising by visiting Google Ads Settings at https://adssettings.google.com. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info.
  • How Google uses information from sites that use its services: https://policies.google.com/technologies/partner-sites.

8. Third-party services

  • Cloudflare (hosting and content delivery) — processes data in accordance with their privacy policy.
  • Google (Google Analytics 4 and, once approved, Google AdSense) — processes data in accordance with Google's privacy policy.
  • Impact, Partnerize and CJ (affiliate networks) — track affiliate clicks and referrals in accordance with their own privacy policies.
  • Resend (email delivery) — processes contact form data to deliver emails.

9. International transfers

Data may be processed outside the EEA by our service providers (Cloudflare, Google, Resend and our affiliate networks). Appropriate safeguards (Standard Contractual Clauses) are in place.

10. Marketing Control Act

In accordance with the Marketing Control Act § 3 on good marketing practice and § 6 on unfair commercial practices, we clearly disclose all commercial relationships. Affiliate links are labeled and we receive commission at no extra cost to you. We act in accordance with the Marketing Control Act's requirements for identification of advertising and commercial messages.

11. Finanstilsynet

BankTopp is a comparison service and not a regulated financial institution. We do not provide financial advice. We encourage all users to verify that the banks we cover are regulated by the relevant supervisory authorities, including Finanstilsynet for Norwegian institutions.

12. Contact

For privacy-related inquiries: thomaslien@norwegianspark.com