Privacy Policy

Introduction

This policy describes how Apertin Hotell AB, organization number 559389-0261, Apertin Herrgård 66591 Kil (“Apertin Hotell AB”, “we”, “our” and “us”), processes your personal data. If you have any questions, please contact us at info@apertinshotell.se.

Scope of privacy policy

This policy describes how your personal data is processed, stored and handled when you visit our website, are a customer with us, provide services to us or apply for work with us. We take your privacy very seriously and are responsible for the personal information you provide to us via our website or when you contact us. Your rights are described in this privacy policy. This policy contains, among other things, information about the purposes for which we process personal data and what rights you have in relation to your personal data.

How do we collect your personal data?

We process personal data collected directly from you, from the company you represent, as well as personal data collected via cookies.

How is your personal data processed?

Your personal data is processed in order for us to fulfill our obligations to you or because the processing is necessary to fulfill an agreement in which you are a party to the agreement. We assume not to process more personal data than is necessary for the purpose.

Below is information on the purposes for which your personal data is used.

(a) Fulfilling agreements and providing services and goods

We process personal data to provide services and goods and fulfill agreements for our administration, for invoicing, for credit information, when handling complaints and when contacting our customer service and customer support. Personal data handled are contact details, financial data and identity-related personal data.

(b) Accounting

We process personal data for accounting purposes and to fulfill the statutory obligations we have towards the Accounting Act. Personal data handled are contact details, financial data and identity-related personal data.

We process personal data for marketing mailings by e-mail and post if you have registered for such mailings and consented to receive them. Personal data that is handled in this processing is contact data.

(d) Employment

We process your personal data when you apply for vacancies with us or register an interest in employment. Your personal data is processed to carry out the recruitment process. Personal data handled in this processing are contact details and identity-related personal data.

(e) Analysis, maintenance and improvement of the website (cookies)

We process your personal data to maintain and improve functions on our website, analyze traffic and behavioral data on our website, detect and counter errors, intrusions and incidents, and target relevant marketing to you. The personal data is handled via cookies, a text-based data file that is saved in your browser. You can change the settings for cookies in your browser. If you choose to block or delete cookies, this may mean that certain services cannot be used or that the website does not function properly. Personal data handled in this processing is IP address, as well as technical information generated when visiting our website (e.g. type of browser, pages visited, times of visits, time zone and other web traffic information).

Pon what legal basis do we base our processing of the personal data?

When processing personal data to fulfill requirements such as the Accounting Act or tax legislation, the legal basis for processing is legal obligation.

In order to fulfill agreements and provide services and goods, your personal data is processed to provide agreed goods/services.

In the case of personal data processing for marketing, analysis, maintenance and improvement of the website, as well as employment, the legal basis is our legitimate interest where we consider that the specific processing outweighs your interest that your personal data should not be processed. The assessment has been made taking into account that we believe it is beneficial to you.

How long do we store your personal data?

Your personal data is saved as long as you are a customer with us or as long as we have a business relationship with you or the company you represent and up to 24 months thereafter. In the case of marketing mailings, your personal data is saved until you withdraw your consent from receiving further mailings and up to 12 months thereafter. In order to meet requirements from the Accounting Act and tax legislation, certain personal data is stored for a longer period of time. When the purposes of the treatments have been fulfilled and the storage period has expired, your personal data is deleted or anonymized so that it can no longer be linked to you.

With whom do we share your personal data?

Your personal data is limited to people who need access for the purposes described above. In order to fulfill the purposes, the personal data is shared with:

(a) Service Providers

In order to fulfill the purposes of processing personal data, we may share personal data with companies that perform services on our behalf. When we use suppliers, we establish personal data processing agreements and take appropriate measures to ensure that your personal data is processed in a manner consistent with this policy. A service provider may not pass on your personal data without approval from us.

(b) Authorities

Your personal data may be provided to authorities if we are required by law to do so.

Transfer of personal data outside the EU/EEA

We may transfer your personal data to countries outside the European Union (“EU”)/European Economic Area (“EEA”). If the European Commission has not decided that a country has an adequate level of protection to which your personal data is transferred, we will provide a description of protective measures taken or the legal basis on which we base the transfer to ensure that your personal data is transferred in accordance with European data protection legislation. You can contact us to get information about whether your personal data has been transferred to a country outside the EU/EEA.

How your personal data is protected

The starting point for how your personal data is processed is that only people who need access to it process it. Our working methods and routines must therefore ensure that your personal data is processed securely.

Your rights

You have the following rights regarding your personal data with us:

(a) Right of Access. You have the right to request a register extract where you can see which personal data from you we process.

(b) Right to Rectification. You have the right to have your personal data corrected if we have incorrect or incomplete personal data registered about you.

(c) Right to Erasure. You have the right for us to delete your personal data without undue delay under the following conditions:

1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

2. You withdraw your consent to the processing and there is no other legal basis for the processing.

3. You make a justified objection to the processing of your personal data.

4. The personal data has been processed illegally.

5. Deletion is required to comply with a legal obligation.

The right to have personal data deleted does not apply if we are obliged by law (e.g. the Accounting Act) to retain the data.

(d) Right to Limited Use. You have the right to request limited processing of your personal data. However, if you request a restriction on your processing of personal data, it may mean that we cannot fulfill our possible obligations towards you during the time that the restriction is in effect.

(e) Right to Data Portability. Under certain circumstances, you have the right to receive your personal data in order to transfer it to another service provider, provided that the legal basis is consent or agreement.

(f) General Right to Object. You have the right to object to the processing of personal data based on our legitimate interest. In order for us to continue with the processing, we need to demonstrate that we have a compelling legitimate reason for such processing or that we need the personal data to establish, exercise or defend legal claims.

(g) Right to Object to Direct Marketing. You have the right to object to your personal data being used for direct marketing. If you do this, we will not continue to process your personal data for such purposes.

(h) Right to Withdraw Consent. If the processing of your personal data is based on consent, you have the right to withdraw your consent. A withdrawal of your consent does not affect the lawfulness of the processing that took place based on the consent before this was withdrawn.

Complaints to supervisorthe adorableness

If you believe that we are processing your personal data incorrectly, we encourage you to contact us so that we can review your views. You also have the right to file a complaint with the Swedish Data Protection Authority, which is the authority in Sweden responsible for monitoring the application of current data protection legislation.