This privacy policy describes how Malmö Fotbollföreningen (MFF) processes personal data in connection with the MFF Museum's website, booking system and experiences. The policy aims to provide a clear and secure picture of how your personal data is handled in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
Malmö Fotbollförening, registration number 846000-4487, is the data controller for the processing of personal data within the activities of the MFF Museum.
Contact: [gdpr@mff.se](mailto: gdpr@mff.se)
Postal address: Malmö FF, Box 19067, 200 73 Malmö
**2. When do we collect personal data? **
We collect and process personal data when you:
visiting the MFF Museum website or booking page
booking or participating in a walking tour or experience
buy gift cards or other experiences
sign up for newsletters, waiting lists or similar services
contact us by email, phone or form
**3. What personal data is processed? **
The personal data that can be processed are:
name
address (if applicable)
e-mail address
phone number
IP address and technical information of device and browser
booking, purchase and payment details
When making a purchase or booking, only the data necessary to complete and administer the experience is collected.
4. Purpose and legal base
Personal data is processed for the following purposes:
to conclude and fulfill reservation and experience agreements
to administer payment, booking and customer service
to communicate practical information before the experience
to develop and improve our business and website
to inform about the activities and future arrangements of the MFF and the MFF Museum
Treatment takes place with the support of:
performance of contracts
legal obligation (e.g. the Accounting Act)
legitimate interest
consent, where required
5. Marketing and Communication
Malmö FF may use your personal data to send you information and marketing about the association's and museum's activities, events and offers via e-mail or other digital communications.
You have the right to object to direct marketing or withdraw your consent at any time. Instructions for this can be found in each mailing or by contacting [gdpr@mff.se](mailto: gdpr@mff.se)
6. Cookies and log statistics
The MFF Museum website uses cookies and similar technologies to ensure the functioning of the website, improve the user experience and collect anonymised statistics about visitors.
Information collected through cookies and log statistics is only used in aggregated and anonymised form. You can delete or block cookies at any time via your browser settings.
7. Disclosure of Personal Data
Personal data may be shared with trusted service providers that provide booking systems, payment solutions and IT services. Such parties process the data only as instructed by the MFF.
Personal data may also be disclosed if required by law or government decision. MFF never sells personal data to third parties.
8. Storage Time
Personal data is stored only for as long as it is necessary to fulfill the purposes of the processing or for as long as required by law.
Data related to the booking and the completed experience is normally deleted after the end of the arrangement, except for data that must be saved according to the Accounting Act.
9. Security
MFF takes technical and organisational measures to protect personal data against unauthorised access, loss, alteration or dissemination.
10. Your rights
You have the right to:
request access to your personal data
get incorrect data corrected
request deletion of data that is no longer needed
object to processing for direct marketing
in some cases request data portability
Request sent to gdpr@mff.se
11. Complaints
If you believe that your personal data is being processed in violation of applicable legislation, you have the right to lodge a complaint with the Privacy Protection Authority (IMY).
12. Changes to the Privacy Policy
MFF reserves the right to update this privacy policy if necessary. The latest version is always available on the MFF Museum website.