Privacy Policy & GDPR
We care about your privacy and your personal data.
Last updated: 6 May 2026
1. Introduction and scope
This policy explains how Mr Gay Sweden ("we", "us") collects, uses, shares and protects your personal data when you visit mrgaysweden.se or submit an application, nomination, contact request, newsletter subscription or other information through our forms. It covers all processing carried out within the Mr Gay Sweden activity and our online presence. If you do not agree with the terms of this Policy, please discontinue your use of our Services. Applicants and selected finalists with contractual obligations should contact us to discuss applicable terms.
2. Data controller
The data controller is Mr Gay Sweden, reachable at info@mrgaysweden.se. We do not have an external Data Protection Officer (DPO); all GDPR-related requests are handled at the same address.
3. Information we collect
We only collect what you submit through our forms. For an application this includes: name, email, phone, date of birth, city, occupation, short biography, social handles (Instagram, Twitter/X, LinkedIn, TikTok), photo, your reason for applying and free-text answers in the application story. For a nomination: name and email for you and the person you nominate, plus your motivation. For contact and newsletter: name (if provided), email, subject and message. Technical data such as IP address, browser type and cookie identifiers may be logged by our providers for security and performance.
4. How we use your information
We process your data to (a) handle your application, nomination or contact, (b) communicate with you throughout the process, (c) verify eligibility and, where appropriate, run reasonable background checks, (d) organise events and competition stages, (e) produce and distribute marketing material (where consent has been given), (f) send the newsletter to subscribers, (g) meet legal obligations, and (h) improve the platform. We do not make fully automated decisions that have legal effects on you.
5. Legal bases for processing
We rely on the following GDPR Art. 6 legal bases: consent (newsletter, photo/media publication, optional cookies), contract or pre-contractual steps (application, participation, the participation agreement on selection), legal obligation (accounting, response to authorities) and legitimate interest (security, abuse prevention, basic analytics). Where information indirectly relating to sexual orientation is processed in the context of an LGBTQI+ competition, we treat it under GDPR Art. 9 and only with your explicit consent and to the extent necessary for the competition.
6. Sharing your information
We will never sell your data. We do not share it with third parties for their marketing. We may share data with: the jury and selection committee under confidentiality agreements, our data processors (see section 11), Mr Gay Europe / Mr Gay World if you progress as Sweden's representative, and authorities when required by law. In the event of a reorganisation or transfer of activity, data is transferred only to a recipient that commits to equivalent obligations.
7. Photo and media rights
By submitting material and taking part you grant us permission to use photos and video from the competition for marketing on our website, social channels, advertising, press releases and other communication. You may at any time request removal of specific content by contacting us. We will do our best to remove the material within a reasonable time; archived or already distributed material may not always be fully recallable.
8. Retention
We keep your data only as long as necessary for the purpose it was collected for. Indicative periods: application material kept for up to 2 years after the end of the season; contact messages 12 months; newsletter data until you unsubscribe; competition-related public content (winners, names, photos) may be kept indefinitely for historical documentation; accounting data per Swedish bookkeeping law (7 years).
9. Data security
We apply technical and organisational measures to protect your data: encrypted transmission (TLS), access control and logging at our providers, the principle of least privilege internally, secure deletion when data is no longer needed, and regular vendor reviews. No online service can be 100% risk-free.
10. Your GDPR rights
You have the right to: access your data (Art. 15), rectification (Art. 16), erasure / 'right to be forgotten' (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), object to processing based on legitimate interest (Art. 21), and not be subject to fully automated decision-making (Art. 22). You may withdraw a previously given consent at any time without affecting the lawfulness of prior processing. To exercise your rights, email info@mrgaysweden.se. We respond within 30 days (extendable for complex requests as per Art. 12). You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.
11. Third-party services (data processors)
We rely on the following data processors to run the website, store data and handle communication. We recommend you read their privacy policies:
12. Cookies and analytics
We use essential cookies that are required for the site to work, plus optional cookies for analytics (Google Analytics) and marketing. The analytics tool helps us understand overall site usage. You chose your preferences in the cookie banner and can change them at any time using the 'Manage cookies' button at the bottom of this page. We do not use third-party advertising trackers without your consent.
13. Children's privacy
Our services are not intended for people under 18. We do not knowingly collect personal data from anyone under 18. If we learn we have collected such data, we will take steps to delete it.
14. Changes to this policy
We may update this policy from time to time. Material changes will be communicated on our website and, where appropriate, by email to affected users. The 'Last updated' date at the top reflects the most recent revision. If you do not agree with the updated terms, please discontinue use of our Services and contact us if you have ongoing obligations.
15. Feedback Submission
The feedback form on mrgaysweden.se is operated by Haris Eloy through HE PR and Communication AB. We only collect your email address and your message - no name, location, IP address, or browser/device information. An email address is required so we can reply. Your feedback is used only to read and respond - never for marketing or newsletters. Submissions are accessible only to Haris Eloy (HE PR and Communication AB) and stored within the EEA for 12 months, unless the matter requires longer retention.
16. Contact
Questions about this policy or want to exercise your rights? Contact info@mrgaysweden.se. The supervisory authority in Sweden is the Swedish Authority for Privacy Protection (IMY), imy.se.