Privacy policy

1. Who We Are

• Chella Natyalaya is a children’s dance association based in Göteborg, Sweden. We operate classes for children aged 4–16 and are registered as an ideell förening under Swedish law.

  Contact person & Data Controller:

  Name: Gayatripackiarajan

  E‑mail: [gayatripackiarajan@gmail.com]

  Phone: [+46 723932923]

  Address: [Trollhasselgatan 2,41711, Göteborg]

  2. Scope of This Policy

  This policy explains what personal data we collect, why we collect it, how we store and protect it, how long we keep it, and your rights under the EU General Data Protection Regulation (2016/679, "GDPR") and the Swedish Data Protection Act (Dataskyddslagen 2018:218).

  3. What Data We Collect

  Membership Register- Full name- Complete Swedish personal identity number (personnummer)- Postal address & post‑code- Date membership fee paid- Guardian’s name, e‑mail & phone (if member < 18 yr)- Gender- Disability flag (yes/no + short note)

• Attendance Logs- Class/event date & start time- Venue- Activity name/type- Leader’s full name & personnummer- Tick‑box for each attending child- Head‑count

• Optional Profile Data- School / city‑district- Language(s) spoken at home- Photo / video consent - for Gothenburg Press releases

• Technical Data- IP address, device/browser info (when using our website or booking portal)

  4. Why We Process Your Data (Purpose & Legal Basis)

  Purpose Legal Basis (GDPR art.)

• Manage membership, bookings and invoices. Art. 6 (1)(b) ContractApply for municipal & cultural grants (Startbidrag, Aktivitetsbidrag, Lokalbidrag, Utvecklings­bidrag, etc.)Art. 6 (1)(c) Legal obligation & Art. 6 (1)(f) Legitimate interest

• Operate safe classes, including emergency contact and health accommodationsArt. 6 (1)(d) Vital interests & Art. 9 (2)(a) Explicit consent (for disability notes)

• Marketing & publicity (photos/videos on website & social media)Art. 6 (1)(a) ConsentWebsite & IT securityArt. 6 (1)(f) Legitimate interest

  5. How We Store & Protect Your Data

  All raw personal data (membership register and attendance logs) is kept in an encrypted cloud drive with role‑based access; only authorised board members and instructors can view it. Offline backups are encrypted and stored in locked premises.

  We implement data‑minimisation, strong passwords, 2‑factor authentication and annual access reviews.

  6. Data Retention

  Data Set - Retention Period

• Membership register & attendance logs - 6 years after the end of the financial year

• Accounting records (invoices, payments) - 7 years

• Photo/video files - Until consent is withdrawn or 3 years, whichever comes first.

• Website technical logs - 12 months

  7. Who We Share Data With

• Göteborgs Stad – Idrotts‑ & föreningsförvaltningen, Kulturförvaltningen and other public government bodies (only data required for each application).

• IT service providers (IdrottOnline, cloud‑storage, e‑mail, accounting software) under GDPR‑compliant data‑processing agreements.

• Public authorities when required by law (e.g. Skatteverket).

• We never sell or rent personal data to third parties.

• No data is transferred outside the EU/EEA; all suppliers store data within the EEA or in countries with an adequacy decision.

  8. Your Rights

  You or your guardian (if under 18) have the right to:

• Access the personal data we hold about you.

• Correct inaccurate or incomplete data.

• Erase data (“right to be forgotten”) when it is no longer necessary or when you withdraw consent.

• Restrict or object to certain processing.

• Data portability for data processed on the basis of consent or contract.

• Withdraw consent at any time (does not affect past processing).

• To exercise any of these rights, please contact us using the details in Section 1. We will respond within one month.

  9. Changes to This Policy

  We may update this policy to reflect legal or operational changes. Significant changes will be communicated via e‑mail and posted on our website at least 30 days before they take effect. The latest version is always available at [URL].

  10. Contact

  Questions, requests or complaints regarding this policy can be sent to:

  E‑mail: gayatripackiarajan@gmail.com

  Postal Address: Gayatri Packiarajan, Attn: Privacy, Trollhsaaelgatan 2, Göteborg, Sweden