Privacy policy
Last updated: June 2026
Who we are
Rossoneri Scandinavia is a non-profit supporters’ association for AC Milan fans in Norway. We organise match screenings, social events and activities for our members and followers. Through our website and digital platforms, we collect and process certain personal data in order to administer memberships, events and communication with users. Association name: Rossoneri Scandinavia Organisation number: 937 382 863 Email: RossoneriScandinavia@gmail.com
What data we process
Account data (name, email, password hash), content you publish (blog posts and comments, shown with your name), messages you send via the contact form (name, email, subject, message), and your membership status (role, VIP). Card and payment details are handled directly by Stripe or Vipps and never reach our servers.
Cookies and local storage
We store only what is strictly necessary on your device: your login session (so you stay signed in), your language choice, and a flag remembering that you have seen this notice. We use no tracking, analytics or advertising cookies, and fonts and assets are served from our own host.
Purposes and legal bases
We process your data to provide the fan club service you signed up for (performance of contract, GDPR Art. 6(1)(b)), to process VIP payments via our payment providers (contract), and to keep the service secure (legitimate interest, Art. 6(1)(f)).
Processors and recipients
We use Supabase as our hosting, authentication and database provider, Stripe and Vipps MobilePay for payment processing, and Sentry for server-side error monitoring (which may process technical error data but no advertising or tracking identifiers). Data is processed under data processing agreements; where data leaves the EU/EEA, standard contractual clauses apply.
Retention
Account data and published content are kept until you ask us to delete your account. Contact messages are deleted once handled. Payment records are kept as required by bookkeeping law.
Your rights
You have the right to access, rectify, erase and export your data, to restrict or object to processing, and to withdraw consent at any time. You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
Contact
For any privacy request, contact the board via our contact form and we will respond within 30 days.
