This policy explains how Malmö Gymnastikskola handles personal data when you visit our website, register for training or subscribe to our newsletter. We only collect what we need to run our classes, and we never sell your data.
1 Who is responsible
Malmö Gymnastikskola is the data controller for the personal data described here. For questions or requests, contact us at info@malmogymnastikskola.se or +46 76 339 90 90.
2 What we collect
- Registration: name, email, phone number and address of the parent, student or school contact; the child's name and date of birth; training experience and preferences.
- Phone verification: your phone number, to send a one-time code by SMS.
- Technical data: IP address and time of registration or sign-up, and, if you scan one of our QR codes, the campaign, your device type, browser and approximate location (city and country, worked out from the IP address – never your exact position). If you answer “How did you hear about us?”, we store the answer with your registration.
- Newsletter: your email address.
- Photos and video taken during training sessions.
3 Why we use it
- To handle registrations, place children in groups and contact you about classes, schedules and changes – performance of a contract (GDPR Art. 6(1)(b)).
- To protect the website against abuse and spam (phone verification, limits per IP address) and to follow up our QR campaigns – legitimate interest (Art. 6(1)(f)).
- To send the newsletter – consent (Art. 6(1)(a)), which you can withdraw at any time.
- To show photos and video from training on our website and social media – legitimate interest. If you do not want your child to appear, email us and we will respect that.
4 How long we keep it
- Data about enrolled students is kept for as long as the student is enrolled, and deleted 1 year after they leave the school.
- Registrations that do not lead to enrolment are deleted 1 year after they were submitted.
- Newsletter addresses are kept until you unsubscribe.
- For QR code scans, the IP address and browser details are deleted after 24 months; only anonymous statistics remain.
- Data we are required by law to keep, such as accounting records, is kept for as long as the law requires.
5 Who we share it with
We do not sell your data or share it for marketing. We use a small number of service providers who process data on our behalf and only according to our instructions: our web and email hosting provider, and an SMS provider that delivers verification codes and class messages. We may also disclose data when the law requires it.
6 Cookies and third-party services
Our website only uses necessary session cookies, which remember your language and keep your registration working. We do not use advertising or tracking cookies. Our pages load fonts and scripts from Google Fonts and jsDelivr and show an embedded Google Map; when a page loads, your browser connects to these services, which receive your IP address. Google may process data outside the EU/EEA under the EU–US Data Privacy Framework – see Google's privacy policy.
7 Your rights
You have the right to request access to, correction or deletion of your data, to restrict or object to its processing, and to receive your data in a portable format. You can withdraw consent at any time. Contact us at info@malmogymnastikskola.se and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se.