Last updated: 2026-03-14
Data controller
Data controller: Markus Reimer. Contact: info@skolkoll.se.
What data is collected?
Skolkoll does not create user accounts or personal profiles. Search and filtering of school data happen primarily in your browser. When you consent, the site uses Google Analytics 4 for anonymised visitor statistics.
Cookies and analytics
If you accept analytics cookies via the consent banner, Google Analytics 4 may collect:
- Page views and time spent
- Device type, browser and screen size
- Approximate location derived from an anonymised IP address
IP anonymisation (anonymize_ip) is enabled, so your full IP address is never stored by Google. No data is sold or shared with third parties beyond Google as data processor.
Retention period: GA4 data is stored for 14 months and then automatically deleted by Google.
If you choose "Only necessary" in the consent banner, Google Analytics is not loaded at all.
Third-country transfers
Google Analytics may involve data being transferred to and processed in the USA. Google applies EU Standard Contractual Clauses (SCC) as the legal basis for such transfers. More information is available in Google's privacy policy.
Resend (email provider for school watching) is a US-based company and may process email addresses in the USA. Resend applies EU Standard Contractual Clauses (SCC).
Other third-party services (Nominatim, ResRobot, Skolverket API) process data within the EU/EEA. D3.js and Leaflet are loaded from CDN servers (unpkg.com) that may have servers outside the EU.
Email for school watching
If you choose to watch a school, you provide your email address. The following is stored in our database (Firestore):
- Email address — used to send notifications. Deleted when you unsubscribe.
- SHA-256 hash of your email — used to look up your existing watches without exposing your email in database queries.
- School unit code and name — which school you are watching.
- Timestamps — when the watch was created, confirmed and last notified.
Legal basis: Consent (GDPR Art. 6(1)(a)) via double opt-in. You confirm your watch through a link sent to your email.
Retention: Your data is stored for as long as the watch is active. If you unsubscribe via the link in any notification email, the watch is marked inactive and your email address is deleted.
What triggers notifications: You receive an email when merit score changes by more than 5 points, gymnasium eligibility changes by more than 5 percentage points, pupil count changes by more than 20%, or the School Inspectorate issues a new decision about the school.
How to unsubscribe: Every notification email contains an unsubscribe link. You can also contact us at info@skolkoll.se.
Local storage (localStorage)
The following data is stored locally in your browser and is never sent to any server:
- Consent (
skolkoll_consent) — your choice in the consent banner (accepted/declined) - Home address (
skolnav_home_location) — if you use the commuting feature, coordinates for your home address are stored locally to calculate travel times. You can delete this by clearing the field in settings or clearing your browser's local storage.
Third-party services
The following services are contacted from your browser in specific situations:
| Service | When | Data sent |
|---|---|---|
| Google Analytics 4 | Page view (requires consent) | Anonymised IP, page views, device info |
| Nominatim (OpenStreetMap) | "Near me" or home address | Your address query for geocoding |
| ResRobot (Trafiklab) | Commuting tab in school view | Coordinates for start/destination (via our server) |
| JobEd Connect (JobTech) | Career tab in school view | Education text for occupational matching |
| Skolverket API | School view (surveys, documents) | School unit code (no personal data) |
| D3.js / Leaflet (CDN) | Map and statistics pages | IP address when downloading scripts |
| Resend | School watching (confirmation and notification emails) | Email address (via our server) |
Nominatim, ResRobot and JobEd Connect are contacted only when you actively use a feature that requires them — they are never loaded automatically.
Fonts
We use the typefaces Literata and Sora, which are self-hosted on our server. No requests are sent to Google Fonts or other font providers.
Public school data
All school data shown on Skolkoll is public information from Skolverket, SCB, Bolagsverket and Skolinspektionen.
Personal data about school staff
In a school's detail view, the following personal data may be displayed:
- Principal's name — from Skolverket's public school unit register
- School contact details (email and phone number) — fetched in real time from Skolverket's API and not stored by Skolkoll
The principal's name is public information published by Skolverket in their school unit register. Our legal basis for displaying this is legitimate interest (GDPR Art. 6(1)(f)) — the information is already publicly available and there is a public interest in transparency regarding school leadership.
We publish no personal data about pupils, teachers or other school staff beyond the above.
Balancing test (GDPR Art. 6(1)(f))
- Legitimate interest: The public's interest in transparency about who leads publicly funded schools
- Source: Data is obtained exclusively from Skolverket's open API — we do not collect data independently
- Limitation: Only the principal's name is displayed. We do not publish personal contact details, home address or other private information about school staff
- Right to object: If you are a named principal and object to your name being displayed, contact us and we will remove it for your school
Your rights
Under GDPR, you have the right to:
- Decline consent — choose "Only necessary" in the consent banner
- Withdraw consent — go to Settings and click "Revoke cookie consent", or clear your browser's local storage
- Delete data — your home address and consent are stored only locally in your browser and can be deleted by clearing localStorage. Email used for school watching is deleted via the unsubscribe link in every notification.
- Object to processing — if you are a named principal and do not want your name displayed, contact us at info@skolkoll.se
- Request information — contact us at info@skolkoll.se
Changes
We may update this policy as needed. The latest version is always available on this page.