Privacy policy
Last updated: August 2026
Official AIMC Affiliation
Rossoneri Scandinavia is officially affiliated with Associazione Italiana Milan Clubs (AIMC) for the 2026/27 season. Rossoneri Scandinavia is a non-profit supporters’ association for AC Milan fans in Norway. We organise match screenings, social events and activities for our members and followers. Through our website and digital platforms, we collect and process certain personal data in order to administer memberships, events and communication with users. Association name: Rossoneri Scandinavia Organisation number: 937 382 863 Email: info@milannorge.no
What data we process
Account data (name, email, password hash), content you publish (blog posts and comments, shown with your name), messages you send via the contact form (name, email, subject, message), and your membership status (role, membership tier). If you join or renew as a member, we also hold your entry in the membership register: full name, date and place of birth, address, mobile number and email. Card and payment details are handled directly by Vipps and never reach our servers.
Cookies and local storage
We store only what is strictly necessary on your device: your login session (so you stay signed in), your language choice, your shop basket, which member notifications you have read, and a record of the cookie choice you made. We use no tracking, analytics or advertising cookies. The one third party that sets a cookie here is hCaptcha, which keeps bots and abuse off our sign-in and contact forms; fonts and all other assets are served from our own host. You can see the full list, item by item, and change your choice at any time from the cookie settings button in the bottom-left corner of any page.
Purposes and legal bases
We process your data to provide the fan club service you signed up for (performance of contract, GDPR Art. 6(1)(b)), to process membership payments via our payment providers (contract), and to keep the service secure (legitimate interest, Art. 6(1)(f)).
Processors and recipients
We use Netlify to host and deliver this website (which processes your IP address and technical request logs), Supabase as our authentication and database provider, Vipps MobilePay for payment processing, Resend for sending email (order confirmations, membership and password messages), hCaptcha to protect our sign-in and contact forms from automated abuse, and Sentry for server-side error monitoring (which may process technical error data but no advertising or tracking identifiers). Data is processed under data processing agreements; where data leaves the EU/EEA, standard contractual clauses apply.
Retention
Account data and published content are kept while you have an account. When it is deleted, your login, profile and membership register entry go with it, and your name and photo are removed from anything you posted — the posts themselves remain, credited to “Deleted member”, because they are part of other members’ conversations. Contact messages are deleted once handled. Payment records and membership history are kept for as long as bookkeeping law requires, detached from your account and carrying no name. Orders are kept for that period too, but a completed order keeps the delivery name, address and email printed on it — Norwegian bookkeeping rules require a sales document to identify the buyer, so that part of it cannot be erased on request.
Your rights
You have the right to access, rectify, erase and export your data, to restrict or object to processing, and to withdraw consent at any time. You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
Contact
For any privacy request, contact the board via our contact form and we will respond within 30 days.
