Privacy Policy

What personal data do we process?

• Name
• Address
• Phone number
• Email address
• Special requests and/or needs that you share with us.
• Other information you provide in connection with your booking that is necessary for us to meet your requests.
• Personal identity number in cases where it is needed to meet requirements from authorities.
• Information required to process payment, such as bank giro number, bank account, etc.

Bookings
If you book or enquire about accommodation, an activity, or another service with us, we process your personal data in order to manage your booking, take payment, and follow up on your visit. We only process the personal data that is necessary to fulfil our agreement with you and provide the service you request.

If you provide information about special requests or needs, we process this only to the extent required to give you the best possible service during your stay. If consent is required by law for a specific type of processing, we will obtain it before the processing begins.

If you book on behalf of another person, you are responsible for ensuring that you have that person’s permission to provide their personal data to us.

Newsletters and other marketing or information
If you have agreed to receive newsletters and other information from us, we process your personal data in order to reach you with information. If you no longer wish to receive information from us, you can unsubscribe at any time via the link at the bottom of the newsletter or contact us at info@hafsten.se.

Cookies
Our website uses cookies that are stored in your browser until you choose to disable them in your browser settings, or until they expire automatically, usually 30 days after your most recent visit to our website. Cookies are used to make navigation easier, improve the user experience, and for web analytics and statistics. If you do not want cookies to be stored, you can use private browsing or delete cookies via your browser settings.

Other services
Personal data is processed so that we can provide the requested services, invoice completed work, carry out payments, report to authorities when required, and fulfil our obligations under the Swedish Bookkeeping Act and other applicable legislation.

Security
It is important to us that you, as a guest, feel confident about how we process your personal data. We continuously work with technical and organisational security measures, as well as internal procedures, to protect the personal data we process against unauthorised access, loss, or other unlawful processing.

Transfer to third parties
We never sell your personal data to third parties. However, we use various suppliers and cloud services for example for bookings, payments, and marketing. All suppliers that process personal data on our behalf act as data processors and process the data according to our instructions and in accordance with the GDPR.

Personal data may also be disclosed in the following situations:

• If we are legally required to disclose information to an authority.
• If an unpaid claim needs to be handed over for debt collection or other legal handling.
• If personal data needs to be disclosed in connection with a legal dispute, for example to a court, an authority, or the opposing party.

Storage and deletion of personal data
At Hafsten, we save information about our guests in order to offer fast, smooth, and personal service on return visits. By keeping a booking history, we can, among other things, see which accommodation or camping pitches you have had previously and, when possible, offer the same or a similar spot for future bookings. The history also helps us provide efficient customer service by quickly answering questions about previous bookings and requests.

Information about bookings and booking history is stored for up to ten (10) years after your most recent stay. This retention period is based on the fact that many of our guests return after several years and appreciate that we can offer fast, personal, and efficient service based on previous bookings and requests.

When the retention period has ended, the data is deleted or anonymised, unless it needs to be stored for a longer period as required by law, for example under the Swedish Bookkeeping Act or other applicable legislation.

Data used for newsletters is stored until you withdraw your consent or unsubscribe from the mailings. Data that must be stored by law, such as accounting records, is retained for the period prescribed by applicable legislation.

Access, correct, or delete your data
You have the right to request, free of charge, information about which personal data we process about you. If any information is incorrect or incomplete, you have the right to request that it be corrected.

You also have the right to request that your personal data be deleted. If you contact us, we will review your request and delete or anonymise the data that no longer needs to be stored for the purposes for which it was collected or under applicable legislation. Data that we are legally required to retain cannot be deleted until the retention period has ended.