PRIVACY POLICY (GDPR)

Uppsala moské

§1Data Controller

§2Categories of Personal Data

• Identification data: name, personal identity number
• Contact data: email, phone number, address
• Case-related data: forms, membership, marriage services
• Technical data: IP address, browser, device

§3Purpose and Legal Basis

• Marriage services → Legal obligation / Legitimate interest
• Membership → Contractual necessity
• Contact → Legitimate interest / Consent
• Communication → Consent / Legitimate interest
• Legal compliance → Legal obligation
• Website security → Legitimate interest

§4Processing of Personal Identity Numbers

• Processed only when necessary for identification and legal purposes.
• Protected through encryption, restricted access, and logging.

§5Data Sharing

• Personal data is not shared with third parties. Access is strictly limited to the data subject (the owner), our organization for certification processing, and relevant government authorities where required to apply for or validate certification.
• Never sold.

§6Transfers Outside EU/EEA

• Protected using Standard Contractual Clauses when applicable.

§7Data Retention

• Contact: 12 months
• Membership: duration + 24 months
• Marriage: according to law
• Accounting: 7 years
• Logs: 30–90 days

§8Cookies

• Necessary and analytical cookies used.
• Consent required for non-essential cookies.

§9Security

• HTTPS, access control, secure infrastructure, monitoring.

§10Your Rights

• Access, rectification, erasure, restriction, objection, portability, withdraw consent.
• Requests handled within 30 days.

§11Automated Decision-Makin

• No automated decision-making used.

§12Data Breaches

• Immediate response, 72-hour notification, user notification if needed.

§13Obligation to Provide Data

• Required for services such as marriage.

§14Children

• No processing without guardian consent.

§15Updates

• Latest version always on website.