Privacy policy

What personal data do we process?

• Name
• Address
• Telephone number
• E-mail address
• Special requests and/or needs that you communicate to us
• Other information that you provide in connection with your booking and that is necessary for us to fulfill your requests
• Personal identification number in cases where it is required to meet government regulations
• Data needed to make the payment such as BG number, bank account, etc.

Bookings
If you book or request accommodation, activities, or other services with us, we process your personal data to manage your booking. Personal data is also processed in order to take payment and follow up on your booking. Special requests and/or needs are processed to provide you with the best possible service. We only process data that is necessary to fulfill the agreement with you. When consent is required by law, we will obtain your consent before processing the data. If you book on behalf of another person, you are responsible for ensuring that you have permission from the other person(s) for us to process their personal data.

Newsletters and other forms of marketing or information If you have agreed to receive newsletters and other information from us, we process your personal data to reach you with this information. If you no longer wish to receive information from us, you can unsubscribe via the link at the bottom of the newsletter or contact us at info@hafsten.se.

Cookies
Personal data is processed so that we can perform the requested service, invoice completed work, make payments to suppliers, report to authorities when applicable, and for bookkeeping purposes. Cookies store visitor history to facilitate navigation on the web. Cookies are also used for web analytics and statistics. If you don’t want to save cookies, you can set up private browsing in your browser to browse anonymously. You can also delete the history of your computer or mobile device to clear cookies and codes from your browser.

Other services
The personal data is processed in order for us to be able to perform the requested service, invoice work performed, make payment to the supplier, where appropriate report to the authorities and to be able to establish accounting.

Security
It is important to us that you, as a guest, feel secure about how we handle your personal data. We are continuously working on technical measures and internal procedures regarding the processing of personal data to maintain as much security as possible for the personal data we process.

Transfer to third parties
We do not disclose any personal data to third parties, but we do use various cloud services. All suppliers we use in connection with bookings and marketing are GDPR compliant. However, personal data may be transferred in the following cases:

• We disclose personal data to public authorities where we are required by law to do so.
• If you do not pay, we may transfer your data for debt collection purposes.
• In the context of a dispute, we may transfer your data to e.g. court, authority and counterparty.

Clearing of data
We keep your customer data for as long as it is required or as long as we are required by law. We then securely delete or de-identify your data so that it cannot be linked to you. Data for newsletters (your email address) is retained as long as the customer relationship with you exists or until you unsubscribe (the data may be processed in another register for other purposes). Data that forms part of accounting material and/or other obligations is retained for as long as Swedish laws and regulations require.

Accessing your data
You can request, free of charge, at any time to receive information about which personal data we process about you. You also have the right to request the correction of your personal data if you believe it is incorrect or incomplete.