Privacy Notice

Who we are

FC Nordljus, Kristineberg, Stockholm. Contact: hej@fcnordljus.se

Data we collect

When you submit the registration form, we collect:

• First and last name
• Date of birth and (if applicable) guardian name
• Contact details (email, phone)
• Football info (preferred position, program)
• Notes you choose to share
• Technical metadata (IP address, user agent) for security/audit
• Consent and optional marketing preferences

Purpose and legal basis

• Process and respond to your registration of interest (consent).
• Basic security and abuse prevention (legitimate interest).
• Optional updates about programs/events (consent; opt-out anytime).

Retention

We retain registration enquiries for up to 12 months if you do not join a program. If you join, we store data as required for club administration and legal obligations.

Sharing and storage

• We store data with Supabase (managed Postgres). Data is hosted in the EU region selected for our project.
• We do not sell your data. We only share when required by law or to provide our services.

Your rights

You can request to:

• Access and receive a copy of your data
• Rectify inaccurate or incomplete data
• Erase your data (where applicable)
• Restrict or object to processing
• Withdraw consent at any time

To exercise your rights, contact us at hej@fcnordljus.se.

Security

We protect your data with appropriate technical and organizational measures, including access controls, encrypted transport, and role-based policies.

Contact and complaints

For questions or complaints, email hej@fcnordljus.se. You may also contact the Swedish Authority for Privacy Protection (IMY).