PRIVACY POLICY
About GDPR
GDPR, in brief, is an EU regulation concerning the handling of personal data. Its purpose is to strengthen individuals’ rights regarding how their personal information is managed, stored, and processed.
Storage of Personal Data
Personal data refers to all information that directly or indirectly can identify a living person, such as name, personal identity number, phone number, email address, or an online identifier. We only collect personal data relevant to our operations and the services we offer you. Below is a list of the personal data we collect:
- First and last name
- Address
- Phone number
- Email address
- Corporate registration number for sole proprietors
- Booking preferences and special requests
- Payments and any other information you provide to us in connection with a hotel stay
For foreign guests, we also collect the following personal data, stored for three months:
- Identification document number
- Guest’s signature
- Personal identity number
(A foreign guest is defined as someone who is not a Swedish citizen. However, a foreign guest who is permanently residing and registered in Sweden is exempt.)
Use of personal data
We use personal data to:
- Administer and create bookings.
- Inform you via email, phone, or SMS regarding relevant information about your booking, before, during, and after your stay with us.
If you provide us with someone else’s personal data, for example in connection with a group booking, we take it as permission to process that data in accordance with our Personal Data and Privacy Policy.
We collect personal data during booking communication via email, phone calls, and through the contact form on our website. Your personal data is stored for two years before it is deleted from our booking system.
Your rights regarding personal data
Under GDPR, if we process your personal data, you have the following rights:
- The right to access your personal data
- The right to have any incorrect personal data in our systems corrected
- The right to have your personal data deleted from our systems, provided we have no legitimate interest or legal obligation to continue processing it
- The right to object to the processing of your personal data
- The right to limit the processing of your personal data
- The right to withdraw your consent for us to use your personal data
If you wish to contact us regarding any of the above, you can find our contact details in the footer.