Platform and data protection
This applies to the Folke platform at every organisation that uses it.
Last updated:
The supplier
Folke is a booking platform provided by Folke Tech AB. It is used by municipalities, regions, associations and other organisations to let the public book venues, facilities and activities.
This service is operated by Håkan Arvidsson, which is the data controller and sets the rules for its bookings.
Contact: info@folkeportal.se
Data processor
Folke Tech AB processes personal data on behalf of each organisation using the platform, under a data processing agreement. This means that Folke Tech AB:
- only processes the data according to the organisation's instructions
- does not use the data for its own purposes and never sells it
- ensures staff with access are bound by confidentiality
- helps the organisation respond to requests from data subjects
- notifies the organisation without undue delay of a personal data breach
To exercise your rights, contact the organisation you book with.
Sub-processors
Folke Tech AB uses the following sub-processors. Organisations are informed before a sub-processor is added or replaced.
| Sub-processor | Purpose | Processing |
|---|---|---|
| Microsoft Ireland Operations Ltd (Azure) | Hosting and storage | Within the EU/EEA |
| Okta Inc. (Auth0) | Login with email and password | May be transferred outside the EU/EEA, with safeguards under GDPR Chapter V |
| Idura (Criipto ApS) | Login with BankID | Within the EU/EEA |
| Stripe Payments Europe Ltd | Card payments | May be transferred outside the EU/EEA, with safeguards under GDPR Chapter V |
| Sendinblue SAS (Brevo) | Email delivery | Within the EU/EEA |
Security
- All traffic is encrypted with TLS and stored data is encrypted.
- Access is role-based – nobody sees more than their role requires.
- Technical access to personal data is logged.
- Personal data breaches are handled under the GDPR, and the organisation is notified.
Platform terms
- Folke Tech AB aims for high availability but does not guarantee that the service is always available or error-free. Planned maintenance is preferably done when traffic is low.
- Folke Tech AB is not a party to bookings between you and the organisation and is not responsible for the organisation's decisions, rules or venues.
- Folke Tech AB may restrict access for anyone attempting to manipulate, disrupt or harm the platform.
- These terms are governed by Swedish law.