Privacy Policy
Turnover is a service for registering crew, recording working hours and calculating pay on film and TV productions. It is provided by Turnover App AS, org. no. 833 376 632, Solsletteveien 4A, 4019 Stavanger, Norway (“Turnover”, “we”, “us”).
This policy explains what personal data we process, why, on what legal basis, who we share it with, how long we keep it, and what rights you have. It applies to the website turnover.no and to the Turnover application.
Questions about this policy can be sent to support@turnover.no.
1. Two different roles
Turnover processes personal data in two different roles, and your rights depend on which one applies.
Turnover as controller. We are the controller for the personal data we need to run our own business: your user account, billing, support correspondence and the operation of our website. Sections 2 to 4 describe this processing.
Turnover as processor. When a production company or employer registers you as a crew member or employee, records your hours or calculates your pay in Turnover, that company is the controller and we process the data on its behalf and instructions. Section 5 describes this processing. Requests about that data, for example to correct or delete it, should be directed to the production company. We will assist them in responding.
2. Data we process as controller
2.1 Your user account
When you create a Turnover account we process:
- Name, e-mail address and password (stored only as a hash).
- Phone number, address, date of birth and profile picture, if you choose to add them.
- National identity number and bank account number, if you choose to add them. They are kept on your own account so that you do not have to type them in again every time a production company asks for them. These fields are encrypted in our database. When you give these details to a company, that company stores its own separate copy, and section 5 applies to it.
- Two-factor authentication secret, if you enable it.
- Preferences such as theme and active job.
- The time of your last login and the session data needed to keep you signed in.
Purpose: to provide your account, let you sign in securely and let you fill in the details a production company asks for without entering them again each time.
Legal basis: performance of a contract with you (GDPR Article 6(1)(b)). For the national identity number, our legal basis is our legitimate interest in enabling correct payroll reporting (Article 6(1)(f)) together with the Norwegian Personal Data Act section 12.
2.2 Billing and subscriptions
If you or your company subscribe to a paid plan we process the name and e-mail address of the account owner, company name and address, plan, billing interval and payment history. Card details are entered directly with our payment provider Stripe and never reach our servers.
Purpose: invoicing, payment and bookkeeping.
Legal basis: performance of a contract (Article 6(1)(b)) and our legal obligation to keep accounting records under the Norwegian Bookkeeping Act (Article 6(1)(c)).
2.3 Support and communication
When you contact us we process your name, e-mail address and the content of the correspondence. We send you transactional e-mails that are necessary for the service, such as e-mail verification, password reset, invitations to jobs, rejected time entries and subscription notices. We do not send marketing e-mail without your consent.
Purpose: answering your requests and operating the service.
Legal basis: performance of a contract (Article 6(1)(b)) and our legitimate interest in providing support (Article 6(1)(f)).
2.4 Website and technical data
When you use turnover.no we process your IP address, browser type, the pages you request and timestamps in server logs. Registration, checkout and crew self-registration forms are protected by Cloudflare Turnstile, which analyses browser characteristics to distinguish people from bots.
Purpose: keeping the service secure, detecting abuse and diagnosing errors.
Legal basis: our legitimate interest in security and stability (Article 6(1)(f)).
We do not use analytics or advertising trackers.
3. Cookies
Turnover uses only cookies that are necessary for the service to work:
| Cookie | Purpose | Lifetime |
|---|---|---|
| PHPSESSID | Keeps you signed in during a visit | Until the browser is closed, or 24 hours of inactivity |
| REMEMBER_ME | Keeps you signed in between visits, if you tick “remember me” | 14 days |
| theme | Remembers your choice of light or dark theme | 1 year |
Cloudflare Turnstile may set its own cookie on pages where it is used, for the sole purpose of bot detection.
No consent banner is shown because none of these cookies are used for tracking or marketing.
4. Who we share your data with
We do not sell personal data. We share it only with the service providers we need to run Turnover, who process it on our instructions:
| Provider | What they do | Where |
|---|---|---|
| Google Cloud | Hosts the application, database and files. All data is stored in region europe-west1, Belgium | EU |
| Intuit Mailchimp (Mailchimp Transactional) | Sends our transactional e-mails | US |
| Stripe | Processes subscription payments | Ireland and US |
| Cloudflare | Bot protection on public forms | US and global network |
| Slack | Alerts our engineers of application errors. Error reports include the name, e-mail address and phone number of the signed-in user at the time of the error | US |
| Grensesnitt AS | Operates the Google Cloud database platform that hosts our database | Norway, data in EU |
| Tripletex AS | Issues our invoices. Receives the company name, organisation number, invoice e-mail and the name, e-mail address and phone number of the subscriber | Norway |
Where a provider is located in the United States, the transfer is covered by the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
If you connect an accounting or payroll system such as Tripletex or PowerOffice to your company account, data is sent there on your instruction, and that provider’s own privacy policy applies.
We may also disclose personal data where required by law or a court order.
5. Data processed on behalf of production companies
When a production company or employer uses Turnover, it may register the following about you: name, contact details, date of birth, job title, department, contract and rates, working hours, per diems, pay, approvals and signatures, and, if the company chooses to, national identity number and bank account number.
The production company decides what is registered and how long it is kept. Turnover processes this data only to provide the service to the company, under a Data Processing Agreement that requires us to keep the data confidential, secure it, delete it when the company asks, and use only the providers listed in section 4.
National identity number and bank account number are an exception to this. Where a production company holds these about you, we delete them once the productions you are registered on have ended, whether or not the company asks us to.
If you have a Turnover user account, data the company registers about you may be linked to your account so that you can see your own hours and pay. If the company’s account is later closed, those records are disconnected from the company and stay in your own account. From that point we are the controller of them, and you exercise your rights over them directly with us rather than with the company.
To exercise your rights over this data, contact the production company. If you do not know who to contact, write to support@turnover.no and we will help you find the right controller.
6. How long we keep data
| Data | Retention |
|---|---|
| Your user account | Until you delete it. You request deletion from the Preferences page in the application and confirm it through a link we send by e-mail. Your user record and preferences are then removed. Where your account is linked to employments, jobs or a subscription, our support team completes the deletion within 30 days. The profile picture file is deleted from storage within 30 days |
| Data registered about you by a production company | Until the company deletes it. If the company’s account is closed, the historical records of the work you did are disconnected from the company and moved to your own user account, where they remain until you delete that account. If you no longer have a user account at that point, the data is deleted permanently, at the latest 30 days after closure |
| National identity number and bank account number held by a production company | Deleted once the productions you are registered on have ended |
| Support correspondence | 2 years after the case is closed |
| Server and application logs | 30 days |
| Database backups | Deleted data may remain in encrypted backups for up to 15 days |
7. How we protect your data
- All traffic is encrypted in transit with TLS. All data at rest is encrypted by Google Cloud.
- National identity numbers and bank account numbers are additionally encrypted at field level in the application with AES-256-GCM.
- Passwords are hashed with bcrypt or Argon2 and never stored in clear text.
- Two-factor authentication is available to every user and is required to view other people’s identity and bank account numbers or export them to a file.
- Access to production systems is limited to named engineers at Turnover and at our database operator Grensesnitt AS, and the database accepts connections only from the application and allow-listed networks, always over TLS.
- Turnover administrators can sign in as a user to investigate a support case. Such access is limited to administrators and used only for support.
- The database is backed up daily with 14 days of point-in-time recovery, and backups are stored encrypted in the EU.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data. Most account data can be corrected directly in the application under Profile.
- Erase your data. You can request deletion of your account from the Preferences page in the application.
- Restrict or object to processing based on our legitimate interests.
- Data portability for data you have provided to us, in a machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
To exercise these rights, use the functions in the application or write to support@turnover.no. We respond within 30 days. We may ask you to verify your identity before acting on a request.
If you believe we process your data unlawfully, you have the right to complain to the Norwegian Data Protection Authority (Datatilsynet), P.O. Box 458 Sentrum, 0105 Oslo, www.datatilsynet.no, or to the supervisory authority in the country where you live.
9. Children
Turnover is intended for working professionals. We do not knowingly create accounts for persons under 15 years of age.
10. Changes to this policy
We may update this policy when the service or the law changes. Material changes are announced by e-mail to account holders at least 30 days before they take effect. The current version is always available at turnover.no, and the version and date of last update are stated at the end of the document.
11. Contact
Turnover App AS
Solsletteveien 4A
4019 Stavanger, Norway
support@turnover.no
Version 1.0. Last updated September 2026.