Privacy Policy

Osby Konståkningsklubb ("OKK", "we", "us") is committed to protecting the privacy of our members, skaters, and staff. This policy explains how we handle personal data in compliance with the General Data Protection Regulation (GDPR).

1Data We Collect

We collect data necessary to manage a sports club, including:

• Guardians (Adults): Name, email, phone number, and relationship to skaters.
• Skaters (Minors): Name, birth date, and progress/badge levels.
• Trainers (Adults/Minors): Name, role, and attendance records.
• Payment Info: Reference codes and transaction history (stored via external payment providers).

2Protection of Minors

Since many of our participants are under 18, we take extra care:

• Data for minors is provided only by their legal guardians during onboarding.
• Direct contact information for minors is not stored; we communicate primarily via the registered guardian.

3"Need-to-Know" Access Control

Access to personal data is strictly limited based on the user's role:

• Trainers: Can only see names and check-in status for their assigned sessions. They do not have access to guardian contact details or payment info.
• Admins & Managers: Have access to the full database for club administration, insurance purposes, and billing.

4Data Retention

We do not keep data longer than necessary:

• Active Members: Data is kept for the duration of membership.
• Inactive Members: Data is archived after 1 year of inactivity and permanently deleted or anonymized after 2 years, unless required for legal records.
• Financial Records: Payment-related data is kept for 7 years to comply with the Swedish Accounting Act (Bokföringslagen).