Hur Hitta Ditt Sverige hanterar personuppgifter, vilket lagstod vi anvander, hur lange uppgifter lagras och vilka rattigheter du har.
How Hitta Ditt Sverige processes personal data, the legal basis we rely on, how long data is kept, and your rights as a data subject.
Hitta Ditt Sverige, som for narvarande drivs av grundaren Patch under registrering som aktiebolag, ansvarar for behandlingen av personuppgifter pa plattformen hittadittsverige.se och tillhorande subdomaner. Organisationsnummer publiceras har sa snart bolaget ar registrerat hos Bolagsverket.
Kontakt: patch@hittadittsverige.se
Nar en verksamhet anvander Bli Medlem-funktionen behandlar plattformen foljande uppgifter pa uppdrag av verksamhetsagaren (personuppgiftsbitraden):
Plattformen anvander Umami Analytics (egenhostad pa HDS infrastruktur, Finland). Umami lagrar inga cookies och samlar inte in personuppgifter. Statistiken ar aggregerad.
Nginx-accessloggar lagrar IP-adress, tidsstampel, URL och HTTP-statuskod i 30 dagar.
| Kategori | Laglig grund |
|---|---|
| Anvandarkonton | Avtal (konto behevs for att leverera tjansten) |
| Verksamhetsprofiler | Avtal med verksamhetsagaren |
| Medlemsdata | Avtal med verksamhetsagaren; HDS ar personuppgiftsbitraden |
| Bokningsdata | Avtal (nar bokning sker) |
| Betalningsuppgifter | Rattslig skyldighet (bokforingslagens krav) |
| Serverloggar | Berattigat intresse (driftssakerhet och felspaning) |
| Datakategori | Lagringstid |
|---|---|
| Anvandarkonton | Under aktiv anvandning; raderas inom 30 dagar efter raderingsbegaran |
| Verksamhetsprofiler | Under avtalstiden + 30 dagar; raderas vid avslut |
| Evenemangsinformation | 12 manader efter evenemangets datum |
| Medlemsdata | 5 ar efter medlemskapets upphorande (bokforingslagens krav pa betalningsunderlag) |
| Betalningsreferenser (Stripe) | Enligt Stripes policy, normalt 7 ar |
| Serverloggar | 30 dagar rullande (logrotate) |
En detaljerad lagringsschema finns i Datalagringspolicyn.
| Leverantor | Tjanst | Land |
|---|---|---|
| Hetzner Online GmbH | Serverdrift och hosting (nuvarande) | Finland |
| Kolo SE3 Pitea | Serverdrift och hosting (planerad, ej avtalad annu) | Sverige |
| Stripe, Inc. | Betalningsbehandling | USA (standardavtalsklausuler) |
| Umami Analytics | Webbstatistik (ingen persondata) | Finland (egenhostad, samma server) |
Data overfort till Stripe i USA skyddas av EU:s standardavtalsklausuler (SCC). Ingen data overförs till lander utanfor EU/EES utom via Stripe.
En fullstandig lista over underbitraden finns pa Underbitraden.
Du har foljande rattigheter enligt GDPR (artiklarna 15-21):
For att utova dina rattigheter, skicka e-post till patch@hittadittsverige.se. Vi svarar inom 30 dagar.
Du har ratt att inge klagomal till Integritetsskyddsmyndigheten (IMY) pa imy.se om du anser att vi behandlar dina uppgifter felaktigt.
Plattformen anvander sessionscookies for inloggning (behovliga, rensas nar webblasaren stangs) och en cookie for sprakval (behovlig, inget webbanalysandamal). Vi anvander inga marknadsforingscookies eller tredjeparts-trackingcookies.
Vi kan uppdatera denna integritetspolicy. Senaste andringen: 2026-08-12. Vasentliga andringar kommuniceras via e-post till registrerade anvandare.
Hitta Ditt Sverige, currently operated by founder Patch while registration as a Swedish limited company (aktiebolag) is in progress, is responsible for personal data processing on hittadittsverige.se and associated subdomains. A registration number will be published here once the company is registered with Bolagsverket.
Contact: patch@hittadittsverige.se
When an entity uses the Bli Medlem (Become a Member) feature, the platform processes the following data on behalf of the entity owner (acting as processor):
The platform uses Umami Analytics (self-hosted on HDS infrastructure, Finland). Umami sets no cookies and collects no personal data. Statistics are aggregated.
Nginx access logs store IP address, timestamp, URL, and HTTP status code for 30 days.
| Category | Legal basis |
|---|---|
| User accounts | Contract (account required to deliver the service) |
| Entity profiles | Contract with the entity owner |
| Membership data | Contract with entity owner; HDS acts as processor |
| Booking data | Contract (when a booking is made) |
| Payment records | Legal obligation (Swedish Accounting Act requirements) |
| Server logs | Legitimate interest (operational security and fault detection) |
| Data category | Retention period |
|---|---|
| User accounts | During active use; deleted within 30 days of deletion request |
| Entity profiles | During the contract term + 30 days; deleted on termination |
| Event information | 12 months after the event date |
| Membership data | 5 years after membership ends (Accounting Act requirement) |
| Payment references (Stripe) | Per Stripe policy, typically 7 years |
| Server logs | 30 days rolling (logrotate) |
A detailed retention schedule is available in the Data Retention Policy.
| Provider | Service | Country |
|---|---|---|
| Hetzner Online GmbH | Server hosting and operations (current) | Finland |
| Kolo SE3 Pitea | Server hosting and operations (planned, not yet contracted) | Sweden |
| Stripe, Inc. | Payment processing | USA (standard contractual clauses) |
| Umami Analytics | Web statistics (no personal data) | Finland (self-hosted, same server) |
Data transferred to Stripe in the USA is protected by EU Standard Contractual Clauses (SCCs). No data is transferred outside EU/EEA except via Stripe.
A full list of sub-processors is available at Sub-processors.
You have the following rights under GDPR (Articles 15-21):
To exercise your rights, email patch@hittadittsverige.se. We will respond within 30 days.
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se if you believe we are processing your data unlawfully.
The platform uses session cookies for login (necessary, cleared when the browser closes) and a cookie for language preference (necessary, no analytics purpose). We do not use marketing cookies or third-party tracking cookies.
We may update this privacy policy. Last updated: 2026-08-12. Material changes will be communicated by email to registered users.