Privacy policy
Last updated: November 11, 2025
For us who organize the Elfsborg March, your personal privacy is important. We want you to feel secure about how we handle your personal data. This privacy policy explains what information we collect, why we do so, how it is handled, and what rights you have.
1. Data controller
The organization responsible for handling your personal data is:
Data controller: Partille Hemvärnsförening
Organization number: 802455–4407
Address: Lexbyvägen 69, 433 31 Partille
For questions regarding your privacy or the processing of your personal data, please contact us by email: info@elfsborgsmarschen.se.
2. How, why, and on what legal basis we process your data
We collect your data on various occasions in order to be able to carry out and administer the Elfsborg March.
a) When registering for the Elfsborg March
When you register for the Elfsborg March (via our partner MilQuest AB), we collect the information necessary for you to participate.
- What information: First name, last name, street address, postal code, city, country, telephone number, email address, information if you are under 20 years of age, and possibly team name.
- Purpose: To administer your registration, handle payment, communicate important information before and during the march, draw up participant lists, handle results lists, and administer the medal system (where the number of marches completed is recorded).
- Legal basis: Fulfilment of agreement. The processing is necessary for us to fulfill our commitment to you as a registered participant.
b) When contacting us
When you contact us via the contact form on our website or via email.
- What information: Name, email address, phone number, and the content of your message.
- Purpose: To be able to answer your questions and handle your case.
- Legal basis: Legitimate interest. Our interest in providing you with service and answering your questions outweighs your possible interest in not having your data processed for this purpose, as you yourself have initiated the contact.
c) When subscribing to our newsletter
When you actively choose to subscribe to our newsletter on the website.
- What data: Email address.
- Purpose: To send you newsletters with information and updates about Elfsborgsmarschen.
- Legal basis: Consent. You actively give your consent when you sign up, and you can withdraw this at any time by unsubscribing (see link in the newsletter).
d) Photos and videos during the event
We take photos and videos during the Elfsborg March to document the event.
- What data: Images and moving images in which participants, officials, and possibly the general public can be identified.
- Purpose: To document the event, create a positive feeling about the march, and to promote the Elfsborg March on our website and on social media (e.g., Facebook, Instagram, YouTube).
- Legal basis: Legitimate interest. After weighing up the interests involved, our interest in being able to document and promote our public event outweighs the general infringement of privacy.
- Your rights: You always have the right to object to your personal data (e.g., a picture of you) being used for this purpose. Contact us at info@elfsborgsmarschen.se if you want us to remove a picture.
e) When publishing interviews or reports
We sometimes publish interviews or reports featuring specific individuals (e.g., participants, officials, or other prominent figures) on our blog or in our newsletters.
- What information: Name, photo or video (if applicable), quotes, and other information relevant to the article that the individual has shared.
- Purpose: To create editorial content that informs about and generates interest in the Elfsborg March.
- Legal basis: Consent. The person being interviewed or profiled gives their active and informed consent for us to publish the material. A person always has the right to withdraw this consent at any time by contacting us.
f) To comply with legal requirements
We are required to store certain information due to mandatory legislation.
- What information: Information related to payment transactions.
- Purpose: To fulfill our obligations under the Accounting Act.
- Legal basis: Legal obligation.
g) To manage your cookie consents
In order to manage the choices you make in our cookie banner (your consents for cookies, tracking pixels, etc.), we use a specialized tool called “Real Cookie Banner.”
- What data: The tool saves your choice (your consent or refusal) along with technical information necessary to prove which choice you have made. This data is stored locally in our own database and is not shared with the provider of v
2. How, why, and on what legal basis we process your data
We collect your data on various occasions in order to be able to carry out and administer the Elfsborg March.
a) When registering for the Elfsborg March
When you register for the Elfsborg March (via our partner MilQuest AB), we collect the information necessary for you to participate.
- What information: First name, last name, street address, postal code, city, country, telephone number, email address, information if you are under 20 years of age, and possibly team name.
- Purpose: To administer your registration, handle payment, communicate important information before and during the march, draw up participant lists, handle results lists, and administer the medal system (where the number of marches completed is recorded).
- Legal basis: Fulfilment of agreement. The processing is necessary for us to fulfill our commitment to you as a registered participant.
b) When contacting us
When you contact us via the contact form on our website or via email.
- What information: Name, email address, phone number, and the content of your message.
- Purpose: To be able to answer your questions and handle your case.
- Legal basis: Legitimate interest. Our interest in providing you with service and answering your questions outweighs your possible interest in not having your data processed for this purpose, as you yourself have initiated the contact.
c) When subscribing to our newsletter
When you actively choose to subscribe to our newsletter on the website.
- What data: Email address.
- Purpose: To send you newsletters with information and updates about Elfsborgsmarschen.
- Legal basis: Consent. You actively give your consent when you sign up, and you can withdraw this at any time by unsubscribing (see link in the newsletter).
d) Photos and videos during the event
We take photos and videos during the Elfsborg March to document the event.
- What data: Images and moving images in which participants, officials, and possibly the general public can be identified.
- Purpose: To document the event, create a positive feeling about the march, and to promote the Elfsborg March on our website and on social media (e.g., Facebook, Instagram, YouTube).
- Legal basis: Legitimate interest. After weighing up the interests involved, our interest in being able to document and promote our public event outweighs the general infringement of privacy.
- Your rights: You always have the right to object to your personal data (e.g., a picture of you) being used for this purpose. Contact us at info@elfsborgsmarschen.se if you want us to remove a picture.
e) When publishing interviews or reports
We sometimes publish interviews or reports with specific individuals (e.g., participants, officials, or other profiles) on our blog or in our newsletters.
- What information: Name, any image or video, quotes, and other information relevant to the article that the individual has shared.
- Purpose: To create editorial content that informs about and generates interest in the Elfsborg March.
- Legal basis: Consent. The person being interviewed or profiled gives their active and informed consent for us to publish the material. A person always has the right to withdraw this consent at any time by contacting us.
f) To comply with legal requirements
We are required to store certain information due to mandatory legislation.
- What information: Information related to payment transactions.
- Purpose: To fulfill our obligations under the Accounting Act.
- Legal basis: Legal obligation.
g) To manage your cookie consents
In order to manage the choices you make in our cookie banner (your consents for cookies, tracking pixels, etc.), we use a specialized tool called “Real Cookie Banner.”
- What data: The tool saves your choice (your consent or refusal) along with technical information necessary to prove which choice you have made. This data is stored locally in our own database and is not shared with the tool provider. You can read more about how the “Real Cookie Banner” tool works on their website: https://devowl.io/rcb/data-processing/.
- Purpose: To collect and manage your consent in a legal and traceable manner, so that we respect your settings.
- Legal basis: We rely on two grounds. Firstly, legal obligation (GDPR Art. 6.1 c), as we are required by law (LEK) to obtain and store your consent for non-essential cookies. Secondly, legitimate interest (GDPR Art. 6.1 f) in having a stable and functioning system for managing these consents.
Saving your choice is necessary for us to respect your settings and comply with our legal obligations.
3. How long we store your data
We do not store your personal data longer than necessary for the respective purpose, or as long as required by law.
- Registration data: We store your name and results indefinitely in our records. This is to enable us to administer our medal system (which requires a history of 10+ years) and to preserve results lists as part of the event’s history. However, we do not use your data for active marketing (e.g., email campaigns) if you have not participated in the previous 3 years.
- Accounting records: Stored for 7 years plus the current year, in accordance with the Accounting Act.
- Messages (contact form/email): Normally deleted within 30 days after your case has been closed.
- Newsletter: We store your email address for as long as you choose to subscribe.
- Photos and video: Stored indefinitely as historical documentation and for marketing purposes, or until you object to publication.
4. Personal data processors
Partille Hemvärnsförening never sells your personal data. However, in order to conduct our business and organize the Elfsborg March, we need to engage external suppliers who process data on our behalf (who become our personal data processors). We have agreements with all processors that ensure that they handle your data securely and in accordance with our instructions.
Your data is shared with the following parties:
- Kntnt Sweden AB: Manages the operation and administration of our website.
- Sub-processor to Kntnt: Hetzner (Germany), which provides server services within the EU.
- Sub-processor to Kntnt: Postmark (USA), which handles the website’s email.
- MilQuest AB: Manages our registration system and stores registration data.
- Stripe: Handles all card payments. We do not store any card details ourselves.
- NetConnection i Göteborg AB: Provides our email solution (e.g., info@elfsborgsmarschen.se).
- Meta (Facebook/Instagram) & Google (YouTube): When we publish photos and videos from the event on these platforms.
5. Transfer of data outside the EU/EEA
We always strive to process your personal data within the EU/EEA. For example, our web server is located in Finland (via Hetzner).
However, some of our suppliers are based in the US (e.g. Stripe, Postmark, Meta and Google). When your data is processed by them, it may be transferred to the US.
Such transfers are always carried out in a secure and legal manner. We rely on the European Commission’s Standard Contractual Clauses (SCC) and, where applicable, on the recipient being affiliated with the EU‑U.S. Data Privacy Framework (DPF). This ensures that your data receives a level of protection equivalent to that within the EU/EEA.
6. Your rights
Under the General Data Protection Regulation (GDPR), you have several rights regarding the processing of your personal data.
- Right to access: You have the right to know what information we hold about you.
- Right to rectification: You have the right to have inaccurate or incomplete information about you corrected.
- Right to be forgotten: You have the right to request that we delete your data. (Please note that we cannot delete information required for medal history if you wish to continue participating, or information that we are required to store by law, e.g. the Accounting Act).
- Right to withdraw consent: If our processing is based on your consent (e.g. newsletters), you always have the right to withdraw it.
- Right to object: You have the right to object to processing based on “legitimate interest” (e.g., our publication of photos of you).
If you wish to exercise any of your rights, please contact us at info@elfsborgsmarschen.se.
You also always have the right to lodge a complaint with the Swedish supervisory authority, the Swedish Data Protection Authority (IMY), if you believe that we are handling your data incorrectly.
7. About cookies
This privacy policy does not describe how we use cookies. Information about cookies and similar technologies is handled in our separate Cookie Policy, which you can find here: https://www.elfsborgsmarschen.se/en/cookie-policy/
8. Changes to the policy
This policy may be updated. The latest version is always published at https://elfsborgsmarschen.se/en/privacy-policy/.