Personal Data at Storsjöcupen

1. Introduction – What is Personal Data?

"Personal data" refers to any information that can be directly or indirectly linked to a living individual. FÖRENINGEN STORSJÖCUPEN (The Storsjöcupen Association) is the data controller for the information you provide to us as part of Storsjöcupen, or that we obtain from other sources. Within FÖRENINGEN STORSJÖCUPEN, personal data is always treated with great respect for personal privacy.

​

Below is a description of the guidelines applied by FÖRENINGEN STORSJÖCUPEN in connection with Storsjöcupen, how we manage and store information, and what rights you have.

​

The guidelines never limit the rights applicable under the General Data Protection Regulation (GDPR) or any other legally binding provision.

​

2. Collection of Personal Data

We collect personal data in the following ways:

• You provide it to us yourself, for example, when you register a team for the tournament, but also in other situations. For example, via our website, on physical forms, in other contact with us, via email, letters, contact forms, and via logged-in services and social media.

• Someone else provides your information with attestation of your consent to supplement a registration. This applies, for example, to team leaders and players.

• Information is created based on your registration and how you use our services, e.g., making payments or participating in the tournament.

• Images and videos taken during the tournament.

• We may also obtain information about you from our partners, so-called third parties.

Personal data is also recorded in connection with payments, for example, both in bank transfers and card payments to administer your registration.

​

2.1 Websites belonging to Storsjöcupen

 Usually, https://storsjocupen.se can be visited without collecting personal data. We then only collect information that is used for statistical purposes, and the visitor remains anonymous. Examples of such information include the time of the visit, how long the visit lasts, and which pages are visited. FÖRENINGEN STORSJÖCUPEN also uses so-called "cookies" to ensure that functions and services on the website work correctly. 

 When you actively complete a registration, we can use stored cookies to target so-called polls (surveys) that are displayed to you based on your behavior on the website. For example, these can be used to evaluate what you thought of the registration system or give you follow-up questions in connection with a failed card payment. 

When you, as a customer, visit Storsjöcupen through our logged-in services, the visit can be linked to the logged-in person's registration and username/email address. This gives FÖRENINGEN STORSJÖCUPEN the opportunity for more relevant communication to individual teams and contact persons.

​

2.2 Categories of Personal Data

The categories of personal data we usually collect are:

• Customer information, i.e., the information needed to participate in the tournament with us. Examples include name, phone number, and email address.

• Participant information, i.e., information about participants during the tournament. This includes contact persons, team leaders, referees, parents, and players registered during registration in our logged-in services. In some cases, login occurs via a private link and not via username and password.

• Purchase information, i.e., purchased products and services and payment history.

• Results and statistics, i.e., how it went in the tournament and, in some cases, also which player scored goals or assists, or was assigned disciplinary measures, e.g., in the form of green/yellow/red cards and expulsions.

• Service information, i.e., correspondence in specific cases, information about registration, and any complaints. Answers to customer surveys and feedback about our goods and services. Where applicable, information provided in connection with competitions.

• Visit information on logged-in services, i.e., purchase-user-generated data, passwords, technical data regarding the device used, interaction data (visit time, response times, how you reach and leave the service, etc.).

• Special categories of personal data (defined in Article 9(1) of the GDPR) are only handled in exceptional cases when needed to administer the tournament.

• Images and videos taken during the tournament and presented in our channels.

• Information from social media, i.e., information that you post on our website and on third-party social media.

2.3 Information when data is collected

When personal data is provided to us, the person providing their personal data receives information about:

• for what purpose and on what legal basis the personal data is collected,

• contact information to FÖRENINGEN STORSJÖCUPEN about Storsjöcupen

• what rights you have as a customer

• how long the data is stored

​

If you find the information unclear or incomplete, please contact Storsjöcupen and FÖRENINGEN STORSJÖCUPEN to receive complete information.

​

2.4 Purpose and Legal Basis for Processing

We only collect personal data for purposes that are supported by the applicable GDPR. The most common is that the data is collected for processing with the support of the legal basis of performance of a contract. The purposes are, for example:

• enter into an agreement with us/complete a registration

• book additional products via our logged-in service

• handling questions and other service matters

• age verification and exemption application for players

• to uniquely identify players in insurance matters

​

With legitimate interest as a basis, we process data for several purposes, for example:

• for marketing and profiling, i.e., to communicate relevant offers and information about events organized by FÖRENINGEN STORSJÖCUPEN to those who have registered for Storsjöcupen

• for communication of our and our partners' offers

• to send newsletters

• to develop and improve Storsjöcupen

• for statistics and analyses

​

 You can also give consent to processing in some cases when none of the above applies. A given consent is an active action from you, and this can be revoked in the same place where the consent was given. We will then not process your personal data further for that purpose. We obtain consent mainly for: 

• to show the names of players in connection with live results and other match and tournament statistics

• to show the names of referees in the schedule and for other referees who want to find partners they want to judge with

​

 In line with the Swedish Sports Confederation's code of conduct for sports associations, statistics from the results in the tournament are also saved with public interest as a basis. The same applies to the processing of special categories of personal data that is carried out within the framework of issuing and administering para-licenses.

We may also publish images and videos taken during the tournament with balancing of interests as a basis if they are not published for journalistic purposes.

​

Other purposes for our processing of personal data may have their legal basis in various legal requirements, i.e., where we must fulfill a legal obligation. Examples of such purposes are the processing of personal data in accordance with the Accounting Act for invoicing, the processing of social security numbers that must be submitted to the Swedish Tax Agency in connection with control information for referee salaries or when we convey information about changed contractual terms. It also applies to the processing of personal data in punishment and disciplinary matters.

​

We do not process personal data for purposes that are incompatible with the original purpose. More information about what purpose the personal data is used for can also be provided when the personal data is provided, for example, in connection with email forms or in contractual terms.

​

3. Transfer of personal data

Under certain circumstances, we may also transfer personal data to data processors, partners, or other third parties. The actors who may process collected personal data are:

• IT suppliers

• Sales partners and partners

• Technical service contractors

• Print and digital communication partners

• Media agencies and advertising agencies

• Sports federation or local/regional part thereof

In certain cases, at the request of law and official decision, we may be obliged to disclose personal data to, for example, the police, for crime prevention measures and crime investigations.

 

Personal data is usually not disclosed to companies in countries outside the EU or EEA. In certain situations, however, the data may be transferred to and processed in a country outside the EU/EEA by FÖRENINGEN STORSJÖCUPEN or by another supplier or subcontractor. In these cases, a special investigation is always carried out to ensure that the legal conditions are met and that technical and organizational measures have been taken to ensure that personal data is handled safely and with an adequate level of protection comparable to and at the same level as the protection offered within the EU/EEA.

​

4. Collected Personal Data from Another Party

From various partners, we receive information about you that you have provided to the partner and also approved the transfer to Storsjöcupen because you are interested in registering for the tournament or participating.

• From our bank, we may in some cases receive your personal data when you make bank transfers.

• From our card payment provider Stripe, in connection with card payments.

• From our social media, data from third parties will give us some information about you. The information may include your name and email address.

• Other partners may also share information with us, e.g., if an end user has been in direct contact with their support or if, on our behalf, they help with data collection for us.

5. Access to Personal Data

Only those who need access to the personal data to perform the agreed service have the authority to access and manage it. We have several subcontractors who handle personal data to varying degrees, and they have the same requirements for the handling as FÖRENINGEN STORSJÖCUPEN has internally.

​

6. Erasure

We do not store personal data longer than necessary. After a tournament has ended, we retain your information for a maximum of 36 months. However, certain data may be stored for a longer period of time to meet other legal requirements, such as the Accounting Act, where we need to save data for 7 years. There is also reason to save the data for a longer period of time if there is a public interest for statistical purposes (see point 2.4 and the Swedish Sports Confederation's code of conduct for sports associations).

​

7. Security

 We take special physical, technical, and organizational measures to protect the personal data being processed so that the data is not lost, destroyed, manipulated, or made available to unauthorized persons.  The measures aim to achieve a level of security that is sufficiently high with regard to the technical possibilities available. Changes to personal data are continuously recorded to ensure traceability in all changes that occur in the information. Incidents regarding personal data are reported internally and by our subcontractors. These are handled in an internal process and, in relevant cases (if there is a high risk to the individual's rights and freedoms), reported to the Swedish Data Protection Authority within 72 hours, as well as to the person who lost their information in accordance with the rules prescribed by the Data Protection Act. Data breaches are also reported to the police.

8. Your Rights

8.1 Right of Access

Everyone has the right to receive information about the extent to which data about their own person is processed by FÖRENINGEN STORSJÖCUPEN in relation to Storsjöcupen. If such personal data exists with FÖRENINGEN STORSJÖCUPEN he person concerned may, upon request, receive information about what categories of personal data are processed, from where they have been obtained, for what purpose(s) the processing takes place, what legal basis exists, and to whom or what the data is disclosed. The person requesting information must be able to identify themselves. FÖRENINGEN STORSJÖCUPEN sends a response within 1 month from the date the request was received.

​

8.2 Right to Rectification

Everyone has the right to request rectification of their own customer information if it is incorrect or processed in violation of applicable law.

​

8.3 Right to Erasure

FÖRENINGEN STORSJÖCUPEN erases personal data related to Storsjöcupen when there is no legal basis for retaining the data. Those who have registered for the tournament have the right to have their personal data deleted immediately if any of the following applies:

•  the data is no longer needed for the purposes for which it was processed 

• the processing is for direct marketing and you object to the data being processed for that purpose

• the information has not been processed in accordance with the regulation

• you object to processing that takes place after a balancing of interests and the legitimate reasons do not outweigh your interest

• erasure is required to fulfill a legal obligation

​

8.4 Right to Object to Automated Decision-Making

FÖRENINGEN STORSJÖCUPEN does not apply automated decision-making within the administration of Storsjöcupen for the data subject.

​

8.5 Right to Data Portability

Everyone who has their personal data with FÖRENINGEN STORSJÖCUPEN has the right to have this data issued on paper or in electronic standard format.

​

8.6 Right to Restriction of Processing

 In some cases, you have the right to demand that the processing of your personal data be restricted. This applies, among other things, if you believe that the personal data is incorrect and you have requested rectification. During the investigation, you can request that the processing of personal data be restricted.

​

8.7 Right to Object

If FÖRENINGEN STORSJÖCUPEN handles your personal data with balancing of interests as a basis, you have the right to object to the processing. To do this, you must specify which processing you object to. If we are to be able to continue with such processing, we must show that there are compelling legitimate reasons for the personal data to be processed that outweigh your interests.

​

8.7.1 Marketing, newsletters and profiling

When personal data may be processed for direct marketing or newsletters, it is stated in connection with the collection of personal data. You can at any time state that you do not want to receive marketing from us by contacting us. In most of our emails, there is a link where you can unsubscribe from email marketing. This does not apply to messages that are a reaction to an action from a customer, e.g., confirmation of registration or received payment.

 

Personal data may also be processed for customer relationship management, for example, by communicating target group-adapted, relevant, and more personal offers through selection and segmentation. As part of this, profiling may occur, based on the personal data we have received in connection with registration. The profiling is done to be able to provide offers and information that are adapted to your needs in a better way. You can at any time inform us that you do not want to take part in this type of offer.

​

8.8 Right to Compensation

You may be entitled to compensation in certain cases, for example, if our handling of your personal data has led to damage for you. Claims can be made directly to FÖRENINGEN STORSJÖCUPEN.

​

8.9 Linking

 The information on this page applies to Storsjöcupen and the tournament's websites. In cases where this website contains links to other websites, the information generally does not apply to such websites. FÖRENINGEN STORSJÖCUPEN is also not responsible for the content on such websites.

​

 

8.10 Changes to the Personal Data Policy

If there are changes in our policy for handling personal data, this will be announced on this page. The policy may, for example, be changed if the legislation or application changes. However, if the personal data processing has been regulated in an agreement with the customer, the contractual terms apply until they have been changed, unless this occurs in violation of your rights as above, is incompatible with law or another legally binding provision.

​

8.11 Contacts

The data controller is FÖRENINGEN STORSJÖCUPEN. To get in contact with Storsjöcupen in personal data matters, the contact information on the tournament's website (https://storsjocupen.se) can be used. It is also possible to use support@cupmanager.net with GDPR and Storsjöcupen in the subject line.