We work to ensure a high level of data protection that safeguards your personal privacy when processing your personal data. This privacy policy explains how your personal data is processed and protected, your rights, and how you can exercise them. We strive for you to feel secure in our processing of your personal data. If you have any questions, you are very welcome to contact us. You will find our contact details at the bottom of this page.

Who is responsible for the personal data we collect?

Skid-VM i Falun 2027 AB, corporate identity number 559445-5734, c/o Svenska Skidförbundet Riksskidstadion, 791 19 Falun, Sweden, is the data controller for the personal data collected in connection with purchases, ticket orders, and other contact with us. The terms “we, our, and us” refer to Skid-VM i Falun 2027 AB.

Where is your personal data stored?

We strive to process your personal data within the EU/EEA as far as possible, but it may also be transferred to and processed in a country outside the EU/EEA (a so-called “third country”). Such transfer takes place only to a recipient country with an adequate level of protection and in accordance with applicable data protection legislation.

If a transfer occurs to a partner for a service in the USA, adequacy decisions from the European Commission apply to third parties that have joined the EU-US Data Privacy Framework. For other third parties, we enter into the European Commission’s standard contractual clauses (SCC).

What types of personal data do we collect?

We collect personal data that you provide to us when placing orders on our website, purchasing tickets to our events (for example via our ticketing partner Tickster), signing up for our newsletter, or participating in our competitions and surveys.

The personal data we collect may include:

  • Contact information (name, email address, phone number, address)
  • Date of birth
  • Payment and purchase history for ticket orders
  • Communication history for customer service inquiries and requests

We may also collect certain personal data from external partners, such as address details from public registers, as well as information from payment service providers or creditworthiness data from credit rating agencies, banks, and credit reporting agencies.

How do we use your personal data?

We use your personal data for the following purposes:

  • Administering, executing, and delivering ticket purchases and event access
  • Correspondence regarding questions, ticket purchases, bookings, and general information
  • Sending newsletters, offers, and information about upcoming events, products, or services
  • Analyzing visitor patterns to develop website functionality and content
  • Announcing winners in competitions organized by us
  • Voluntary survey mailings to improve our services and offers
  • Security efforts to prevent misuse or improper use of our website

We retain your data for as long as necessary to fulfill the above purposes, or as long as we are required by law (e.g., the Accounting Act) to do so. Thereafter, your personal data will be deleted or anonymized.

What is the legal basis for the processing?

Performance of a contract

We process your personal data when necessary to fulfill our contract with you. This includes:

  • Administration and execution of ticket purchases and bookings
  • Handling customer service inquiries and correspondence directly related to your purchase
  • Administration of competitions you have chosen to participate in

Legitimate interest

We also process personal data based on a balancing of interests (our legitimate interest in operating, developing, and protecting our business). This includes:

  • Marketing purposes and newsletter mailings (you can unsubscribe at any time)
  • Analysis of visitor statistics to improve the website
  • Voluntary evaluations and survey mailings
  • Prevention of misuse and ensuring IT security
  • General correspondence and inquiries not directly related to an entered agreement

When we process your data based on legitimate interest, it is retained only for as long as necessary for the purpose and no longer than you can reasonably expect.

Who might we share your personal data with?

To enable us to provide our services and fulfill our commitments to you, we share your personal data with companies acting as data processors for us.

This includes:

  • Ticketing systems and distributors: Our ticket provider Tickster AB, which handles ticket sales, booking systems, and ticket distribution on our behalf.
  • IT and system suppliers: Companies that host our websites, databases, and form services.
  • Payment service providers: Banks and payment gateways for secure transactions.
  • Marketing services: Tools for sending newsletters and communication.

Data processors handle the information strictly according to our instructions and only for the specified purposes. We never forward, sell, or swap your personal data for marketing purposes to third parties.

How do we protect your personal data?

To ensure that your personal data sent to our website cannot be read by outsiders, all information is encrypted (SSL/TLS) and sent via a secure connection.

What are your rights?

The General Data Protection Regulation (GDPR) gives you a number of rights regarding your personal data:

  • Right of access (subject access request): You have the right to request information about the personal data we process about you at any time.
  • Right to rectification: If your data is incorrect or incomplete, you can request to have it corrected.
  • Right to erasure (“Right to be forgotten”): You can request that we delete your data. However, we cannot delete data if there are statutory requirements for retention (e.g., accounting laws) or other legitimate grounds (e.g., unpaid debts).
  • Right to object: You have the right to object at any time to processing based on our legitimate interest or direct marketing.
  • Unsubscribing from communications: You can unsubscribe from newsletters at any time via the unsubscribe link in the emails.

If you wish to exercise your rights or have questions, please contact us using the contact details below. If you believe that we handle your personal data incorrectly, you also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at www.imy.se.

Cookies

A cookie is a small text file saved on your computer when you visit our website.

Do I have to allow cookies?

No. You can visit our website without allowing cookies. If you want to avoid cookies, you can set your browser to refuse cookies, or use your browser’s private mode. This mode is called different things depending on your browser: “Incognito window” (Chrome), “Private window” (Firefox), or “InPrivate window” (Microsoft Edge). All cookies set during the visit in private mode are deleted when you close your browser.

How do we use cookies?

We use cookies to obtain statistics on visitor patterns (for example via Google Analytics) and to customize the website’s functionality, appearance, and performance.

Third-party cookies

Services such as Google Analytics, Google Tag Manager, YouTube, and embedded ticket modules from Tickster may set third-party cookies to analyze the use of the site or provide purchasing functionality. These cookies do not contain directly identifying personal data.

Contact Details for Data Controller

Skid-VM i Falun 2027 AB

Corporate identity number: 559445-5734

c/o Svenska Skidförbundet Riksskidstadion

SE-791 19 Falun, Sweden

Phone: +46 (0)73-382 88 48

Email: info@falun2027.com

This privacy policy was last updated: October 2, 2026.