Privacy Policy for Sälengodset

Last updated: February 2025

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and informs You about Your privacy rights and how the law protects You in accordance with the General Data Protection Regulation (GDPR).

By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Sälengodset Rekreation AB is the Data Controller, meaning we determine the purposes and means of processing your Personal Data. Lodgify acts as our Data Processor, handling data on our behalf according to our instructions.

Interpretation Words with initial capital letters have specific meanings as defined below. These definitions apply regardless of whether the terms appear in singular or plural.

Definitions Company ("We," "Us," or "Our") refers to Sälengodset Rekreation AB, Box 2063, 652 12 Hammarö, Sweden.

Account refers to a unique account created for You to access Our Service or parts of Our Service.

Personal Data refers to any information that relates to an identified or identifiable individual.

Processing means any operation performed on Personal Data, such as collection, storage, modification, retrieval, or deletion.

Service refers to the Website.

Website refers to Sälengodset, accessible at https://www.salengodset.se

You refers to the individual accessing the Service or the company/entity on whose behalf such an individual accesses the Service.

Data Controller refers to Sälengodset Rekreation AB, responsible for determining the purposes and means of processing Personal Data.

Your Rights Under GDPR

As a data subject, You have the following rights under GDPR:

Right of access: Request a copy of the Personal Data We hold about You.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of Your Personal Data if there is no legal reason for Us to keep it.
Right to restrict processing: Request limitation of how We process Your data.
Right to object: Object to processing based on Our legitimate interest.
Right to data portability: Receive Your Personal Data in a structured, commonly used, and machine-readable format.
Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
Right to file a complaint: Lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) if You believe We have violated GDPR regulations.

If You request the deletion of Your Personal Data, We will remove it unless We are required to retain certain information due to legal obligations, such as tax or accounting laws. Deletion requests will be processed within 30 days, and You will receive confirmation once completed.

Before submitting a complaint, We encourage You to contact Us first to ensure that any concerns can be resolved efficiently and correctly.

For exercising these rights, contact Us at info@salengodset.se.

Legal Basis for Processing Personal Data

We process Personal Data under the following lawful bases:

Performance of a contract – When processing is necessary for fulfilling contractual obligations.
Legitimate interest – When We have a legitimate business reason that does not override Your rights.
Legal obligation – When We must comply with legal requirements.
Consent – When You have explicitly given consent to process Your data.

Data Collection and Use

Types of Data We Collect

When You place an order through Our Website or via telephone, We collect necessary Personal Data to process Your booking, including Your name, contact details, billing details necessary for invoicing purposes, but do not store payment information such as credit card details, and any additional information required to complete the reservation.

We may collect Personal Data when You contact Us via email. This includes Your name, email address, and any information You choose to provide in Your message. Such data is processed solely for the purpose of responding to inquiries, providing support, and improving Our services.

We may collect the following types of Personal Data:

Contact Information: Name, email address, phone number, and postal address.
Identity Information: Personal or organisation identification number (if required for contractual purposes) and ID verification (if required for digital check-in).
Usage Data: Information automatically collected when using the Service, such as IP address, browser type, and interactions with Our Website.
Cookies and Tracking Data: Data collected via cookies for improving Our Service.

Cookies and Tracking Technologies

Our Website, built on Lodgify CMS, uses cookies to enhance user experience and provide essential functionality. The types of cookies we use include:

Necessary Cookies: Required for the proper functioning of the Website.
Functional Cookies: Enhance usability and store preferences.
Analytics Cookies: Help us understand how visitors interact with Our Website.
Marketing Cookies: Used to personalize advertising content.

You can manage cookie preferences through your browser settings. Blocking some types of cookies may impact your experience on the Website.

Digital Check-in and ID Verification

For security and compliance purposes, We may require guests to complete a digital check-in process, which may involve:

Providing full names of all guests staying at the property.
Uploading valid identification documents (e.g., passport, national ID card).
Verifying Your identity with a third-party service provider (if applicable).

All identification data collected is securely stored and processed only for the purpose of verifying bookings and ensuring compliance with rental regulations.

Data Sharing and Transfers

We may share Your Personal Data with:

Service Providers (e.g., Lodgify) who process data on Our behalf. The Data Processing Agreement with Lodgify can be found here: Lodgify DPA.
Payment Processors for secure payment handling.
Accounting Software Providers (e.g., Visma) to manage invoicing and financial records in compliance with legal obligations.
Advertising Partners (e.g., Google Ads) to provide personalized marketing and targeted advertisements.
Legal Authorities when required by law.
Business Transfers, such as in the event of a merger or acquisition.

We do not sell or share Personal Data with third parties for commercial purposes.

Lodgify may engage sub-processors to provide their services. We ensure that all sub-processors comply with GDPR regulations.

We only disclose Personal Data to government authorities or law enforcement agencies when required to comply with legal obligations, enforce our terms, or protect our rights and the safety of our users.

Your data may be processed outside the European Economic Area (EEA). Lodgify may transfer data outside the EEA, but such transfers will always be safeguarded using Standard Contractual Clauses (SCCs) or equivalent protective measures.

We may share Your Personal Data with:

Service Providers (e.g., Lodgify) who process data on Our behalf.
Payment Processors for secure payment handling.
Accounting Software Providers (e.g., Visma) to manage invoicing and financial records in compliance with legal obligations.
Advertising Partners (e.g., Google Ads) to provide personalized marketing and targeted advertisements.
Legal Authorities when required by law.
Business Transfers, such as in the event of a merger or acquisition.

We do not sell or share Personal Data with third parties for commercial purposes.

Your data may be processed outside the European Economic Area (EEA). We ensure adequate safeguards, such as Standard Contractual Clauses (SCCs), for international data transfers.

Data Retention

We retain Your Personal Data only as long as necessary for:

Providing Our services.
Fulfilling legal obligations.
Resolving disputes.
Enforcing agreements and policies.
ID Verification Data: Stored for a maximum of 30 days after check-out, unless required for legal compliance.
Booking and Payment Information: Stored for up to 7 years to comply with accounting laws.

Data Security

We implement appropriate technical and organizational measures to protect Your Personal Data against unauthorized access, loss, alteration, or destruction.

Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect Personal Data from minors.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify You of any significant changes via email or a notice on Our Website.

If You have questions about this Privacy Policy or wish to exercise Your GDPR rights, You can contact Us at:

Sälengodset Rekreation AB Box 2063, 652 12 Hammarö, Sweden Email: info@salengodset.se Website: https://www.salengodset.se