Privacy policy
Privacy Policy for Hestraviken
Last updated: 2025-02-24
Introduction
Hestraviken cares about your personal privacy and is committed to protecting your personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR). This privacy policy explains what personal data we collect, how we use it, and what rights you have regarding your information.
What Personal Data We Collect
We may collect the following categories of personal data:
- Identity details such as name and personal identification number (when necessary)
- Contact details including address, phone number, and email address
- Booking information related to hotel rooms, spa services, conferences, and special requests
- Payment information, with card details managed securely by a payment provider
- Communication records such as emails, chat messages, and phone calls
- Technical data including your IP address, cookies, and device data from visits to our website
How We Use Your Personal Data
Your personal data is processed for the following purposes:
- To manage bookings and purchases of our services
- To communicate with you about your stay and respond to inquiries
- To improve our services and the overall guest experience
- For marketing and promotional offers, provided you have given your consent
- To comply with legal obligations, such as accounting regulations
Retention Period
We retain your personal data only for as long as necessary to fulfill the purposes stated in this policy or as required by law. For example:
- Booking data is stored for 24 months after your stay
- Financial records are kept for 7 years in accordance with accounting laws
- Marketing data is stored until you choose to unsubscribe
Sharing of Personal Data
We only share your personal data with trusted third parties when necessary. This may include:
- Payment providers to process transactions
- Partners such as restaurants and activity providers for handling your bookings
- Authorities, if required by law
We never sell your personal data to third parties.
Your Rights
You have the following rights regarding your personal data:
- The right to access the data we hold about you
- The right to correct incorrect or outdated information
- The right to request deletion of your data
- The right to restrict or object to processing
- The right to withdraw your consent for marketing
- The right to transfer your data to another provider (data portability)
Please contact us if you wish to exercise any of these rights.
Cookies and Tracking
Our website uses cookies to improve your user experience. You can change your cookie settings in your browser at any time.
Security
We use appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.
Contact Details
If you have any questions about this privacy policy or how we process your personal data, please contact us:
Hestraviken
Receptionsvillan
335 72 Hestra
Sweden
Phone: +46 370 336800
Email: info@hestraviken.se
If you believe that we are processing your data in violation of GDPR, you have the right to file a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).