Privacy Policy

Data controller

Mariestads Segelklubb is the controller of your personal data. The contact for data protection matters is Jimmy Söderberg, ordförande (jimmy-soderberg@mariestadssegelklubb.se).

What we process and why

• Membership applications and membership: name, address, email, phone, membership category, personal identity number for children and youths, and payment status. Purpose: administering membership, collecting fees and contacting you. Legal basis: contract, plus legal obligation for accounting.
• Personal identity numbers are processed for members aged 0–12 and 13–18 because they are required for insurance and reporting to the Swedish Sailing Federation. Access is restricted to the board and the super administrator.
• Facility bookings: name, email, phone, requested time and purpose. Legal basis: contract and legitimate interest.
• Race entries (Torsö Runt): name, contact details, club, boat details and dinner registration. Purpose: running the race and publishing entry lists and results. Legal basis: contract and legitimate interest.
• Newsletters and mailings: email address. Legal basis: consent, or legitimate interest for member information. Every mailing contains an unsubscribe link.
• Racing rules quiz: name, email and result if you choose to save your result. Legal basis: consent.
• Admin accounts: email, name and role. Legal basis: legitimate interest in running the club website.
• Technical logs: limited data about sent emails and administrator actions, for troubleshooting and traceability. Legal basis: legitimate interest.

Cookies

We use strictly necessary browser storage to keep administrators signed in and to remember your language. Such storage does not require consent.

With your consent we use the Meta Pixel (Facebook/Instagram) and also send page views server-side via the Meta Conversions API. The data processed includes your IP address, user agent, the page visited and Meta cookies (_fbp/_fbc), for advertising and measuring its effect. Legal basis: your consent (Art. 6(1)(a) GDPR). Meta Platforms Ireland Ltd. acts as joint controller and data may be transferred to the USA.

Without consent the pixel is not loaded. You can withdraw your consent at any time via "Cookie settings" in the footer.

Weather data on the home page comes from an open weather service and contains no personal data.

Who may receive the data

• The club board and elected officials who administer the member register, bookings and mailings.
• Our website, database and email providers, processing data on our behalf within the EU/EEA.
• The Swedish Sailing Federation and insurers where required for member insurance and reporting.
• For Swish payments, the payment is handled by your bank and Swish; we never receive card details.
• Meta Platforms Ireland Ltd., if you have consented to marketing cookies (see the cookies section).
• We never sell your data and make no automated decisions about you. Marketing via Meta may involve building audiences based on website visits, only with your consent.

Retention periods

• Member data: for the duration of membership plus 10 years for the club's membership history. Accounting records are kept for seven years as required by Swedish law.
• Applications that did not lead to membership: deleted after 12 months.
• Approved applications: identity numbers and address are cleared once the member record is created; the application is deleted after 24 months.
• Facility bookings: deleted 24 months after the booking date.
• Race entries: deleted after 24 months.
• Quiz results: name and email removed after 12 months; the result is kept anonymously.
• Email and administrator logs: deleted after 12 months.

Your rights

You have the right to access your data, to have inaccurate data corrected, to erasure, to restriction of processing, to object to processing based on legitimate interest, and to data portability. Where processing is based on consent, you may withdraw it at any time, for example through the unsubscribe link in our emails.

Contact jimmy-soderberg@mariestadssegelklubb.se and we will normally respond within one month. Some data may have to be retained despite an erasure request, for example accounting records.

If you are unhappy with how we handle your data you may lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Security

Data is stored in an access-controlled database where only authorised officials can reach personal data. All traffic to the site is encrypted. More sensitive data such as identity numbers is restricted to the board and the super administrator.