We run no visitor analytics and use no tracking tools. Some technical data is nevertheless processed automatically when you visit, as on any website: your IP address, your browser and the page you requested. This ends up in the web server logs at our hosting provider, is needed for operation and security, and is purged on a rolling basis.
If you submit a form we process the details you provide, in order to answer your enquiry.
Membership register
When you apply for or hold membership, we process your name, Swedish personal or coordination number, contact details, city and postcode and, if you provide it, blood group. We also process membership type, household links, annual fees and payment history. This is necessary to administer membership, identify the correct member, communicate with you and comply with accounting and association-law obligations.
Only authorised staff can access member data. Access to member administration, payments, content and settings is controlled separately. Personal and coordination numbers are encrypted and are not displayed in lists or logs. Email addresses must be verified before a member account can be used.
Adults in a household have separate sign-ins. The primary payer can invite other adults and see who belongs to the membership, but cannot use their accounts.
Cookies
We use strictly necessary cookies only. There are no third-party cookies.
| Name | Purpose | Lifetime |
|---|---|---|
| sbf_session | Keeps your visit together between page views. Required for cross-site request forgery protection, for messages after submitting a form, and for signing in to My pages or the admin. Set on every page view. | Deleted when you close the browser |
| sbf_language | Remembers your language choice. Set only when you change language yourself. | 1 year |
| sbf_cookies | Remembers that you have dismissed the cookie notice. Set only when you dismiss it. | 1 year |
All three are set with SameSite=Lax. The session cookie is additionally HttpOnly and Secure. You can delete cookies at any time in your browser settings.
Storage and deletion
Unverified applications, archived profiles, payment records and security tokens are deleted or anonymised according to periods decided by the federation. These periods are configurable and cleanup is performed regularly. Accounting records may need to be retained for longer by law; references and notes are removed when no longer needed.
Your rights
You may request access to, correction or deletion of your personal data and may object to or restrict processing. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY). Contact kansli@blodgivarna.se.