Privacy notice
How Håkan Arvidsson processes your personal data when you book through this service: which data, why, for how long and who to contact.
Last updated:
Data controller
Håkan Arvidsson is the controller of the personal data processed when you create an account, book and pay in this service.
Håkan Arvidsson
Full contact details for the controller have not been provided yet. Contact us at the address below and we will help you.
info@folkeportal.seThe platform is provided by Folke Tech AB (Folke), which processes the data on behalf of Håkan Arvidsson as a data processor under a data processing agreement.
About the platform, sub-processors and securityWhat information we collect
We only process data the service needs:
Your account
- Name, email address and phone number
- Address, when needed for booking or invoicing
- Associations and organisations you represent
- Language and settings
Bookings and payments
- What you booked, when and for whom
- Messages and notes you add to a booking
- Amounts, payment method, payment status and refunds
- Invoicing details when you pay by invoice
Card details are handled by the payment service provider and are never stored in this service.
Technical data
- Logins and sessions
- Logs of events in the service, for operations, security and troubleshooting
Why we collect the information
- Receive, confirm and manage your bookings
- Take payments and make refunds
- Send confirmations, reminders and notices of changes
- Report on the activity when the law or a grant provider requires it, e.g. LOK support
- Keep the service secure and working
Legal basis
Processing relies on one or more of the following legal bases in GDPR Article 6:
- Contract (6.1 b) – to carry out the booking and payment you request.
- Legal obligation (6.1 c) – e.g. bookkeeping of payments.
- Public interest or official authority (6.1 e) – when a public body lets its premises.
- Legitimate interest (6.1 f) – for security, troubleshooting and statistics.
BankID and personal identity number
If you identify yourself with BankID, we receive your name and personal identity number from the e-ID.
The personal identity number is only used to reliably establish who you are and link your account to you. It is not shown to other users and is not disclosed without legal grounds.
Recipients of your data
We never sell personal data. Data is only shared with:
- Administrators at Håkan Arvidsson, to the extent their duties require
- Folke and its sub-processors for hosting, login and payments
- Authorities and grant providers when the law or grant conditions require
Access is role-based, and all technical access by the platform supplier is logged.
See the list of sub-processorsWhere your data is stored
The service runs in data centres within the EU/EEA. Some sub-processors, e.g. for login and card payments, are companies based outside the EU/EEA. When data is transferred there, it is protected by safeguards under Chapter V of the GDPR, such as the European Commission's standard contractual clauses.
How long your data is kept
- Account details are kept for as long as you have an account
- Bookings are kept for as long as they are needed to manage and follow up the activity
- Payments and invoices are kept for as long as the Swedish Bookkeeping Act requires, currently seven years after the end of the calendar year
- Logs are kept for a limited time for security and troubleshooting
Data that is no longer needed is deleted or anonymised.
Your rights
You have the right to request access to, rectification and erasure of your data, restriction of processing and data portability, and to object to processing based on public or legitimate interest. Contact Håkan Arvidsson to exercise your rights.
If you believe the processing breaches the GDPR, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Go to imy.seChanges to this notice
This notice may be updated. The date at the top shows when it last changed, and significant changes are announced in the service.