Privacy policy
Personal data processing at Paideia Folkhögskola
Introduction
Paideia folkhögskola collects personal data from individuals who sign up for our newsletter or
participate in our activities, including events, courses, and collaborations. We only store
information that is necessary in order to carry out programming, to facilitate communication
with program participants and other stakeholders, and to manage obligations related to
bookkeeping and other mandatory documentation. We do not share personal data with third
parties, except as specified.
Legal Basis for Processing Personal Data
We process personal data in accordance with the European Union’s General Data Protection
Regulation (GDPR). The legal basis for processing depends on the purpose:
● Consent (Article 6.1 a): when you voluntarily provide your personal data, for example
when signing up for newsletters, events, or agreeing to photo documentation.
● Contract (Article 6.1 b): when the processing is necessary to fulfil an agreement with
you, such as participation in a course or program.
● Legal obligation (Article 6.1 c): when we are required by law to retain certain
information, such as accounting records or academic certificates.
● Legitimate interest (Article 6.1 f): when processing is necessary for us to operate
effectively and securely, for example managing participant lists or internal
communications.
For students
To enable learning, communication, and reporting to authorities, Paideia Folkhögskola needs
to process your personal data before, during, and partly after your period of study. The
information is collected from your application and any admission-related activities, and may
also be generated during your studies, for example through attendance and results.
Sometimes we document the school’s activities through photographs or video for reporting and
communication purposes. We inform you in advance, and you can always let us know if you do
not wish to appear in photos or videos.
Handling and access to personal data
We process information such as name, personal identity number, address, email address, and
phone number in order to identify you, administer your studies, and report to authorities.
Personal data is handled in the school’s administrative systems and cloud services with access
controls. Only staff who need the information to perform their work have access to it. Course teachers may access relevant information such as contact details and prior knowledge. When
necessary, certain data is shared with suppliers that provide IT services or postal mailings,
always under data processing agreements that ensure compliance with GDPR.
If you provide information, for example about health conditions that affect your study situation,
it is processed only in order to provide the necessary support. Only specially authorized staff
have access to such information. Participants with protected identities are encouraged to
contact the administration before applying, so that we can follow procedures for extra careful
handling of personal data. Please contact the administration at info@paideiafolkhogskola.se
Data processors and IT services
Paideia Folkhögskola uses external providers for IT and administrative systems, such as
Google Workspace, Schoolsoft, and Cognito Forms. These providers act as data processors
under specific agreements that comply with GDPR requirements.
Some providers use cloud services and may, in certain cases, store data on servers outside the
EU. In such cases, transfers are carried out in accordance with the EU’s standard contractual
clauses and other applicable safeguards.
Data deletion
Accounting records are stored digitally for seven years, in accordance with Swedish law. Course
grades are preserved in physical form for 50 years, in accordance with Swedish law. Application
data is deleted as soon as it is no longer necessary for the program’s operations. Google
accounts for students are deleted six months after the completion of studies.
Your Rights
● Request copies of your personal data.
● Correct inaccurate information.
● Request deletion of your data under certain conditions.
● Restrict processing of your data under certain conditions.
● Object to processing of your data under certain conditions.
● Request data transfer to another organization or directly to you under certain
conditions.
Please note that certain data cannot be deleted if it is required by law, for example for reporting
or accounting purposes.
If you wish to exercise your rights or have any questions about how we handle your data, please
contact us at info@paideiafolkhogskola.se.
Contact Information
Paideia Folkhögskola
Box 5053
102 42 Stockholm
Swedish Organization number: 802503-0878
Questions about GDPR should be sent to info@paideiafolkhogskola.se or +46 (0)8-679 55 55.
Last updated in January 2026.