Privacy policy
This policy outlines how SportAdmin i Skandinavien AB, corporate identity number 556773-0832 (”SportAdmin,” ”we,” ”us,” ”our”), processes personal data in its capacity as a data controller. A significant portion of personal data processing by SportAdmin is conducted on behalf of various associations using our services. In these instances, SportAdmin serves as the data processor, and the associations—of which you are a member and on whose behalf we process your personal data—act as the data controllers. This processing is governed by a data processing agreement between SportAdmin and each association. Should you wish to exercise your rights under the EU’s General Data Protection Regulation (GDPR) regarding these processes, please contact the relevant association. Their website should provide details on how to proceed in such matters.
However, SportAdmin serves as the data controller for certain aspects of personal data processing conducted within our operations, further detailed in this policy. As a subsidiary of Lime Technologies Group, Lime Technologies Sweden AB, corporate identity number 556397-0465 (”Lime”), which oversees the group’s principal administrative functions, also processes your personal data for similar purposes, under the same legal grounds, and during the same periods as SportAdmin, acting as joint data controllers. Consequently, references in this privacy policy to ”SportAdmin”, ”we”, ”our”, or ”us” include Lime as well. Should you have any inquiries regarding our processing of your personal data, please contact us at info@sportadmin.se or through the contact information provided in section 7.
The specific types of processing activities (a term defined under the GDPR as any operation performed on personal data) that we undertake as the data controller depend on the circumstances of your interaction with us and your role in those interactions. To simplify navigation, this policy is organized into different sections based on the services you utilize, such as app usage, website browsing, or as an association representative. Each section details the relevant processing activities for that category.
Following the service-specific category sections, additional general sections provide information applicable to all services. These sections outline whom we share your personal data with, where your personal data is processed, the rights you have concerning our use of your personal data, and how to contact us.
Your security and confidence in how we handle your personal data are of utmost importance to us. This policy provides essential information regarding our data collection and processing practices. We strongly encourage you to read and fully understand the details contained herein.
Please be aware that our website includes links to external websites operated by third parties. These external sites are governed by their own privacy policies, which detail how they process personal data. We do not have oversight or control over these third-party websites and therefore cannot be held responsible for their data handling practices. We strongly advise you to review the privacy policy of any website you visit through our links.
1 What personal data we use, the purposes for which it is used, the legal basis for these uses, and the retention period
Sale and purchase of service
| For what purposes we process your personal data, i.e., what we do and why | What personal data we process and where it comes from | What is our legal basis for the processing? | How long do we process your personal data for the specific purpose? |
| We collect your personal data to provide our services, issue quotes upon your request, and manage the purchase, execution, and payment for our services when you act as a representative of your association. | We may collect the following personal data from you, the association’s website, or another association representative: – Your name – Your email address – Your phone number – Your role within the association and – call recordings. |
Our processing is based on legitimate interests, which include offering services to the association you represent, entering and fulfilling contracts with you, training our employees internally, and ensuring the quality of calls and customer interactions. | We will process your personal data for as long as we maintain an ongoing dialogue or a sales process with you or the association you represent, for as long as the quote remains valid, and as necessary to fulfil the agreement. Call recordings are retained for two years from the date of recording. Invoice records are kept in accordance with applicable legal requirements. |
Onboarding and training
| For what purposes we process your personal data, i.e., what we do and why | What personal data we process and where it comes from | What is our legal basis for the processing? | How long do we process your personal data for the specific purpose? |
| We collect your personal data to conduct training sessions in our services with you. | We may collect the following information from you or another representative of your association: – Your name – Your email address – Your phone number – Your role in the association and – Recordings of video training sessions. |
Our processing is grounded in the legitimate interests of fulfilling our agreement with you or your association, training our employees, and ensuring the quality of training and customer interactions. | We will retain your personal data for the duration of the association’s onboarding process or your training in our services and will continue to hold it for a period of two years following the completion of the onboarding process or training. |
Customer service and other communication
| For what purposes we process your personal data, i.e., what we do and why | What personal data we process and where it comes from | What is our legal basis for the processing? | How long do we process your personal data for the specific purpose? |
| We collect your personal data when you contact us via email, phone, or other means to respond to your inquiries and provide customer service. | We may collect the following information directly from you: – Your name – Your email address – Your phone number and – Any additional personal data you voluntarily share with us during your inquiry. |
Our processing is based on legitimate interests, specifically to provide customer service and technical support, and to fulfil our contractual obligations with your association. | Your personal data will be processed for as long as necessary to resolve the issue you contacted us about, and will be retained for a period of two years after the issue has been resolved. |
Newsletters and marketing
| For what purposes we process your personal data, i.e., what we do and why | What personal data we process and where it comes from | What is our legal basis for the processing? | How long do we process your personal data for the specific purpose? |
| We collect your personal data to contact you via email or phone for marketing purposes, provided you are over 18 years old. If we use a service provider for distribution, your personal data may be shared with them specifically for this purpose. Further details about data sharing are available in section 2. | We may collect the following information directly from you: – Your name – Your email address – Your phone number and – Your role or relationship with the association. |
Our processing is based on legitimate interests, specifically our interest in providing you with marketing information and offers that we believe may be of interest to you. | We will continue to process your personal data for marketing purposes until you opt out or unsubscribe from receiving such information, or until you explicitly inform us of your desire to cease receiving these communications. |
Job application
| For what purposes we process your personal data, i.e., what we do and why | What personal data we process and where it comes from | What is our legal basis for the processing? | How long do we process your personal data for the specific purpose? |
| We collect your personal data to manage and facilitate the recruitment process. | We may collect the following information directly from you: – Your name – Your email address – Your phone number – Your CV – Your cover letter and – Any additional personal data you provide in your job application. |
Our processing is based on fulfilling our legal obligations as an employer and our legitimate interest in conducting an effective recruitment process. | Your personal data will be processed during the recruitment process and retained for a period of two years thereafter. This retention period helps us defend against any potential legal claims. |
App users
1.1.1 Marketing
| For what purposes we process your personal data, i.e., what we do and why | What personal data we process and where it comes from | What is our legal basis for the processing? | How long do we process your personal data for the specific purpose? |
| We collect your personal data to potentially show you marketing content that we believe may be of interest to you, both directly within our app and via email, provided you are over 18 years old. If we use a service provider to distribute these marketing materials, your personal data may be shared with them for this specific purpose. Further details about this sharing can be found in section 2. | We may collect the following information directly from you: – Your name – Your email address – Your age – Your gender – Your place of residence – The sport for which you or a family member is registered within our services. |
Our processing is based on our legitimate interest in providing marketing that we believe may be relevant to you. | The processing of your personal data for displaying marketing within the app continues until you unregister from the app. For marketing via email, this processing continues until you opt to unsubscribe. |
1.1.2 Customer service and technical support in the app
| For what purposes we process your personal data, i.e., what we do and why | What personal data we process and where it comes from | What is our legal basis for the processing? | How long do we process your personal data for the specific purpose? |
| We collect your personal data when you contact us via our app, email, phone, or other communication means to respond to your inquiries and provide customer service. | We may collect the following information directly from you: – Your name – Your email address – Your phone number and – Any additional personal data you voluntarily provide during your inquiry. |
Our processing is based on legitimate interests, specifically our interest in providing effective customer service and technical support. | Your personal data will be processed for the duration of the customer service or technical support issue and will be retained for a period of two years after the issue has been resolved. |
1.1.3 Other personal data processing in the app
For all other personal data processing activities within the app that are not specifically covered in sections 1.6.1 – 1.6.2, the association of which you are a member acts as the data controller. SportAdmin functions as the data processor on behalf of your association.
1.2 Website users
| For what purposes we process your personal data, i.e., what we do and why | What personal data we process and where it comes from | What is our legal basis for the processing? | How long do we process your personal data for the specific purpose? |
| We collect your personal data when you visit our website to enhance and optimize your user experience. | We may collect the following information from your interaction with our website: – Technical information generated during your use of our website – Information about your device, such as IP address, language settings, browser settings and operating system and – The time and date of your visit to our website. |
Our processing is based on legitimate interests, specifically our interest in providing an optimized website experience. | Your personal data is processed during your visit to our website and may be retained for up to six months thereafter. For additional details, please refer to section 5. |
Profiling based on personal data
To provide you with relevant marketing content, we engage in simple profiling based on the personal data that you have actively provided. As detailed in section 1.6.1, this profiling involves creating user groups categorized by factors such as age, gender, place of residence, and sport. This approach helps us to tailor marketing that we believe may be of interest to you. Please note, we do not perform any profiling on app users who are under 18 years old.
Assessing the balance of interests for legitimate interest processing
For specific processing activities, we rely on our legitimate interest as the legal basis. We conduct a balancing test to determine that our legitimate interests in processing your personal data outweigh your interests and fundamental rights not to have your personal data processed. The details of our legitimate interests have been outlined in the tables provided in the previous sections. If you would like further information about how we conducted this balancing test, please contact us. You can find our contact details in section 7.
2 Who we share your personal data with
If we process your personal data as outlined in section 1, it may be shared with specific recipients. We take great care to ensure that any recipient of your personal data processes it in accordance with this privacy policy. This includes entering into data transfer agreements or data processing agreements with these recipients, which are designed to ensure that your data are handled in compliance with the GDPR and this privacy policy. We wish to clearly state that we do not sell your personal data to any third party.
2.1 Categories of recipients with whom we may share your personal data
1.2.1 Within the group
Recipient: We are part of the Lime Technologies Group and may share your personal data with other companies within this group.
Purpose and legal basis: The sharing of personal data within the group supports the integration of our service and product offerings, ensuring a cohesive user experience. Additionally, it facilitates our internal administration and reporting processes. This sharing is conducted on the legal basis of our legitimate business interests.
1.2.2 Partners outside the group
Recipient: We have partnerships with various companies in Sweden, such as Folkspel and Kakservice, that provide products for sale to teams and associations. We may share your personal data with these partners.
Purpose and legal basis: These partners receive access to your personal data as necessary for them to fulfill their contractual obligations towards you, which may include managing orders and deliveries of products that you, your team, or association have sold or intend to sell using the SportAdmin Lagkassa sales tool. These partners are prohibited from processing or using the shared data for purposes other than those specified. Thus, the sharing of your personal data is based on the fulfillment of a contract.
1.2.3 Suppliers and subcontractors
Recipient: We collaborate with companies primarily within Sweden and the EU, and to a limited extent in the USA, which provide specific services on our behalf. These services include payment processing, hosting, and email services.
Purpose and legal basis: To deliver our services effectively, we sometimes need to engage other companies to perform certain functions. In such cases, your personal data may be shared with these companies but only to the extent necessary for them to perform their tasks under the contracts with us. These companies are strictly prohibited from using or sharing your personal data for any purposes other than those explicitly outlined in our agreements with them.
Data protection measures: For transfers outside the EU, particularly to the USA, we ensure that adequate safeguards, as required by the GDPR, are in place to protect your personal data. For additional details, please refer to section 3.
1.2.4 Authorities
Recipient: We may share your personal data with various authorities including the Police Authority, the Enforcement Authority, the Data Protection Authority, or other relevant courts and authorities.
Purpose and legal basis: We are sometimes legally required to share personal data with certain authorities to comply with statutory obligations, such as those set out in the Anti-Money Laundering and Terrorism Financing Act. Additionally, we may share your data with authorities if you have specifically requested us to do so. Therefore, sharing with these authorities may occur either on the legal grounds of complying with a legal obligation or based on your consent.
1.2.5 Third party in business transactions
Recipient: In the event that we, or a substantial portion of our assets, are acquired by or merged with a third party, your personal data may be transferred to the new owner of the business, who would then assume the role of data controller for your personal data.
Purpose and legal basis: The transfer of your personal data in connection with a business transaction is intended to ensure continuity of the services and products you receive. It may also involve using your personal data during the due diligence process and to facilitate a seamless transition to the new owners. The legal basis for this transfer is our legitimate interest in conducting the transaction efficiently, securing our business interests, and ensuring the continued provision of services.
2.2 Objections to the sharing of your personal data
You have the right to object to the sharing of your personal data if there are specific circumstances related to your situation that warrant such objection. Detailed information about your right to object and how you can exercise it can be found in section 4.5.
3 Where your personal data is processed
Your personal data may be transferred to recipients both within the EU/EEA and to third countries outside of this area, where data protection laws may differ from those in the EU/EEA. When transferring your personal data to third countries, we take appropriate measures to ensure that your personal data is adequately protected according to the standards required by EU law. We ensure that each transfer meets at least one of the following conditions:
| Protective measure and description | Countries to which we transfer personal data based on the specified protective measure |
| Adequate level of protection according to Art. 45 GDPRThe European Commission has determined that certain countries outside the EU/EEA offer an adequate level of data protection. This allows for the transfer of personal data to these countries without requiring additional safeguards beyond those mandated by the GDPR. A comprehensive list of these countries is available on the European Commission’s website. | |
| EU-U.S. Data Privacy FrameworkThe European Commission recognizes that U.S. entities participating in the EU-U.S. Data Privacy Framework meet the required standards for data protection. Consequently, personal data can be transferred to these entities without additional safeguards, other than those required by the GDPR. | USA |
| Standard contractual clauses according to Art. 46.2 GDPRGiven that only a limited number of countries are deemed to provide an adequate level of protection, the most common method for ensuring sufficient data protection during transfers outside the EU/EEA is the use of the European Commission’s Standard Contractual Clauses. These clauses should be implemented as outlined in the Implementing Decisions 2001/497/EC, 2010/87/EU, or 2021/914/EU, without modifications or additions that conflict with them. You can download the complete clauses from the European Commission’s website. | |
| Binding corporate rules according to Art. 47 GDPRIn specific instances, corporate groups may establish Binding Corporate Rules that have been reviewed and approved by a competent supervisory authority. These rules ensure adequate protection for data transfers between companies within the corporate group. |
Right to receive a copy – If you would like more information about transfers to countries outside the EU/EEA, or if you wish to obtain a copy of the protective measure we have used, you can contact us using the contact details provided in section 7 below.
4 The rights you hold in relation to our use of your personal data
Under applicable legislation, you are entitled to various rights concerning our processing of your personal data. Below, we explain these rights and their implications regarding the personal data we process. For detailed information about these rights, as outlined by the Data Protection Authority, links are provided under each description.
If you wish to exercise any of these rights, seek further information, or have questions, please contact us at info@sportadmin.se or refer to the contact details in section 7.
4.1 Right to information
You have the right to be informed about our processing of your personal data. This privacy policy generally describes the personal data we process. If you require more specific information about your personal data, you can request further details by contacting us.
To read more about the right to information – see here.
4.2 Right of access to your personal data (record extract)
We can provide a record extract of the personal data we process about you. This extract includes information such as the categories of personal data processed, the purposes of the processing, the retention period, the recipients of the data, and the source of the data.
To read more about the right of access – see here.
4.3 Right to rectification
We aim to maintain accurate and up-to-date personal data. If you find inaccuracies in the data we process about you, you have the right to have these corrected. You may also supplement any incomplete data relevant to the processing purposes.
To read more about the right to rectification – see here.
4.4 Right to erasure (right to be forgotten)
You have the right to request the deletion of your personal data under certain conditions, such as when the data is no longer necessary for its original purpose, or you withdraw consent when our processing is based on consent. The right to erasure is also limited if an exception applies to the data in question. For example, we have the right to retain the data if it is necessary to establish, exercise, or defend legal claims.
To read more about the right to erasure – see here.
4.5 Right to object
You may object to our processing of your data based on our legitimate interests. Upon objection, we must cease processing unless we demonstrate compelling legitimate grounds which override your interests, or for the establishment, exercise, or defense of legal claims. You may also specifically object to processing for direct marketing purposes.
To read more about the right to object – see here.
4.6 Right to restriction
You can request that we restrict the processing of your data under certain conditions, such as if you contest the accuracy of the data or have objected to our use of your data based on our legitimate interests.
To read more about the right to restriction – see here.
4.7 Right to data portability
If our processing is based on your consent or a contract, and the processing is carried out by automated means (i.e., not in physical paper form), you have the right to receive your data in a structured, commonly used format and, if feasible, have it directly transferred to another controller.
To read more about the right to data portability – see here.
4.8 Right to withdraw consent
You may withdraw your consent at any time. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. This can be done via contact details provided or through an unsubscribe link for direct marketing communications.
4.9 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with the Data Protection Authority (or another supervisory authority) if you believe our processing of your personal data infringes legal requirements.
To read more about the right to lodge a complaint – see here.
4.10 Requirements to exercise your rights
We may require you to verify your identity to protect your privacy when exercising your rights. We handle your request to exercise your rights promptly. Requests are normally responded to within one month, with the possibility of extension in complex cases.
5 Details on cookies and other tracking technologies we use
To ensure the highest quality of our services, we utilize cookies and similar tracking technologies on our website. You can delete cookies from your browser and adjust your cookie settings at any time. Further details about our use of cookies, including the types of cookies, their purposes, and their retention periods, are described in our cookie policy, available here.
6 Information about changes and updates to this privacy policy
We reserve the right to make amendments to this privacy policy as necessary to accurately reflect how we process your personal data. All changes will be published on our website. You are encouraged to review our privacy policy regularly and each time you access our services. For significant material changes, we may also notify you by email.
7 How you can best contact us regarding privacy concerns
If you have any questions or concerns regarding the processing of your personal data, you can contact us primarily using the contact information provided below.
SportAdmin in Scandinavia AB
Address: Drottninggatan 34, 211 41 Malmö, Sweden
Email: info@sportadmin.se
Phone: +46 (0) 40-630 10 60
Lime Technologies Sweden AB
Address: Sankt Lars väg 46, 222 70 Lund, Sweden
Email: legal@lime.tech