Lagringstider for varje kategori av personuppgifter samt process for dataexport och radering vid kontraktsavslut.
Retention periods for each category of personal data and the process for data export and deletion on contract termination.
| Datakategori | Lagringstid | Motivering |
|---|---|---|
| Verksamhetsprofiler och innehall | Under avtalstiden + 30 dagar efter avslut | Nodvandig for tjansteleverans; raderas vid avslut |
| Evenemangsinformation | 12 manader efter evenemangets datum | Historiska evenemang ar inte langre relevanta; lagringsbegransningsprincipen |
| Anvandarkonton | Under aktiv anvandning; raderas inom 30 dagar efter raderingsbegaran | Konto behovs enbart medan anvandaren anvander tjansten |
| Medlemsdata (Bli Medlem) | 5 ar efter medlemskapets upphorande | Bokforingslagens krav (SFS 1999:1078) for betalningsunderlag |
| Betalningsreferenser (Stripe) | Enligt Stripes policy (normalt 7 ar) | Finansiella regler |
| Analysdata (Umami) | Ingen begransning (aggregerad, ingen persondata) | Ingen persondata lagras av Umami |
| Serverloggar | 30 dagar rullande | Driftsandamal; rensas automatiskt via logrotate |
| Sakerhetskopior | 30 dagar rullande | Aterstellningsskydd; ersatts av nyare backup |
En registrerad som vill raderas skickar begaran till patch@hittadittsverige.se. HDS bekraftar mottagandet inom 3 arbetsdagar och slutfor raderingen inom 30 dagar, med undantag for data som maste behallas av lagstadgade skal.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Business profiles and content | Duration of contract + 30 days post-termination | Required for service delivery; deleted on termination |
| Event information | 12 months after event date | Historical events no longer relevant; storage limitation principle |
| User accounts | While account is active; deleted within 30 days of deletion request | Account only needed while user uses the service |
| Membership data (Bli Medlem) | 5 years after membership end | Swedish Bookkeeping Act (SFS 1999:1078) requirement for payment records |
| Payment references (Stripe) | Per Stripe policy (typically 7 years) | Financial regulations |
| Analytics data (Umami) | No limit (aggregated, no personal data) | No personal data stored by Umami |
| Server logs | 30 days rolling | Operational purpose; auto-cleared via logrotate |
| Backups | 30 days rolling | Recovery protection; replaced by newer backup |
A data subject wishing to be deleted sends a request to patch@hittadittsverige.se. HDS confirms receipt within 3 business days and completes deletion within 30 days, except for data that must be retained for legal reasons.