Privacy policy

Your privacy is important to us. This privacy policy describes how Söderfors Resort & Spa AB processes personal data when you visit Söderfors Herrgård, make a reservation, contact us, use our services, or visit our website.

1. Data Controller

Söderfors Resort & Spa AB is the data controller for the processing of personal data described in this policy.

Söderfors Resort & Spa AB
Corporate ID: 559448-9311
Söderfors Herrgård 1
815 76 Söderfors
Sweden

Phone: +46 293 76 10 20
Email: info@soderforsherrgard.com

2. What personal information we process

The information we process depends on how you contact us.

Reservations and Stay

When you book a hotel, restaurant, spa, package, activity, event, or any other service, we may process information such as:

  1. Name
  2. Phone number
  3. Email address
  4. Address
  5. Reservation Number
  6. Arrival and Departure Dates
  7. Information about the services you have booked
  8. Billing Information
  9. Communication Between You and Us
  10. Requests you submit yourself before or during your stay

If you voluntarily provide information regarding, for example, allergies, dietary needs, accessibility needs, or other details that may contain sensitive personal data, we will process that information only to the extent necessary to fulfill your request and in accordance with applicable data protection laws.

Payment Information

Payments may be processed by third-party payment providers.

We do not normally store complete card information. Card information and other payment details are processed by the payment provider used for the transaction in question, in accordance with that provider’s own security procedures and terms and conditions.

However, we may process information such as completed payments, amounts, payment dates, and payment methods.

Information When You Use Our Website

When you visit our website, information may be collected about, for example:

  1. IP address
  2. Device Type
  3. Web browser
  4. Pages Visited
  5. How to Use the Website
  6. Referring website or ad
  7. Information Collected Through Cookies and Similar Technologies

Non-essential cookies are used only in accordance with the choices you make in our cookie banner.

3. Why We Process Your Personal Information

To manage your reservation

We process personal data in order to receive, manage, and fulfill your reservation, as well as to provide the services you have ordered.

The legal basis is that the processing is necessary to enter into or fulfill a contract with you.

For Payments and Financial Administration

We process data in order to collect payments, manage invoices, handle refunds, and perform financial administration.

The processing is based on the performance of a contract and legal obligations, such as accounting laws.

For Customer Service and Communications

We may use your contact information and booking details to answer questions, send you important information before your stay, and assist you with any matters before, during, or after your visit.

The processing is carried out to fulfill our agreement with you or based on our legitimate interest in providing good customer service.

To develop and improve our operations

We may analyze information about reservations, the use of our services, and guest feedback to improve Söderfors Herrgård’s services, offerings, and customer experience.

When personal data is used for this purpose, the processing is based on our legitimate interest in developing and improving our operations. Whenever possible, we use anonymized or aggregated information.

For marketing

If you have chosen to receive newsletters, offers, or other electronic marketing communications, we may use your email address or phone number for this purpose.

When consent is required, the processing is based on your consent. In situations where the law permits marketing to existing customers, the processing may also be based on a legitimate interest.

You can unsubscribe from marketing communications at any time by clicking the link in our emails or by contacting us.

If you object to direct marketing, we will stop using your personal information for that purpose.

For Digital Advertising

If you have provided the necessary consent, your information may be used for analysis, measurement, and personalized advertising through, for example, Google, Meta, and other digital platforms.

Among other things, this may involve measuring the effectiveness of ads or creating target audiences for relevant marketing.

Such processing takes place only when we have a valid legal basis and in accordance with your cookie and marketing preferences.

For safety and to prevent misuse

Personal information may be processed when necessary to protect our guests, our staff, our systems, and our business, as well as to prevent fraud or abuse.

The legal basis is our legitimate interest in conducting our business securely.

4. Where the data comes from

We usually receive personal information directly from you.

We may also receive information from third parties, such as when you book Söderfors Herrgård through an external booking platform, a tour operator, a company, or another partner.

When a reservation is made through a third party, that third party’s privacy policy and terms and conditions may also apply to their processing of your information.

5. Who We Share Personal Information With

We do not sell your personal information.

However, in order to conduct our business, we may need to share personal information with vendors who assist us with, for example:

  1. Hotels and Reservation Systems
  2. Restaurant and Spa Reservations
  3. Payment Processing
  4. IT Operations and Technical Support
  5. Email and Communication
  6. Finance and Accounting
  7. Web Statistics and Analysis
  8. Marketing and Advertising

These vendors may only process data in accordance with applicable laws and our agreements with them.

We may also disclose information to government agencies if we are required to do so by law or by a government agency’s decision.

6. Transfers Outside the EU and the EEA

Some of our suppliers and digital services may involve the processing of personal data outside the EU or the EEA.

When such a transfer takes place, we ensure that there is a legal basis for the transfer and adequate protection for the personal data, for example through a decision on an adequate level of protection or the European Commission’s standard contractual clauses.

7. How Long We Retain Personal Data

We do not retain personal data for longer than is necessary for the purpose for which it was collected.

How long the data is retained therefore depends on the type of information involved.

Information needed to manage a reservation is retained for as long as it is necessary for the reservation, customer service, and any subsequent claims or obligations.

Information subject to accounting laws is retained for the period required by law.

Data processed for marketing purposes is retained for as long as the processing is relevant and permitted, or until you withdraw your consent or object to the marketing.

Information from cookies is stored in accordance with the retention periods specified in our cookie settings.

When data is no longer needed, it is deleted or anonymized.

8. Cookies

Our website uses cookies and similar technologies.

Some cookies are necessary for the website and its features to function. Others may be used for purposes such as statistics, analysis, and marketing.

Non-essential cookies are enabled only after you have given your consent.

You can change or withdraw your consent at any time through our cookie settings.

For more information about the cookies we use, their purposes, and how long they are stored, please see our cookie banner and our cookie settings.

9. Your Rights

Under the GDPR, you have several rights regarding our processing of your personal data.

Right of Access

You have the right to request information about what personal data we process about you and to receive a copy of that data.

Right to Correction

You have the right to request that inaccurate or incomplete personal data be corrected.

Right to Erasure

In certain situations, you may request that your personal data be deleted.

This right does not apply when we are required to retain the data, for example, to comply with a legal obligation.

Right to Limitation

In certain situations, you may request that the processing of your personal data be restricted.

Right to Object

You have the right to object to processing based on legitimate interests.

You always have the right to object to the processing of personal data for direct marketing purposes.

Right to Data Portability

When the conditions under the GDPR are met, you may have the right to receive the personal data you have provided to us in a structured and machine-readable format.

Right to Withdraw Consent

When processing is based on your consent, you may withdraw your consent at any time.

The revocation does not affect the legality of the processing that has already taken place.

10. Complaints to the Data Protection Authority

If you believe we are processing your personal information incorrectly, please contact us so that we can assist you.

You also have the right to file a complaint with the Swedish Data Protection Authority (IMY), which is Sweden’s data protection supervisory authority.

11. Security

We implement technical and organizational security measures to protect personal data from unauthorized access, loss, alteration, or disclosure.

Access to personal data is limited to individuals and vendors who need the data to perform their work or provide their services.

12. Changes to the Privacy Policy

We may update this privacy policy as our business, services, or applicable regulations change.

The latest version is always available at soderforsherrgard.se.

13. Contact Us

If you have any questions about how we process your personal information or would like to exercise any of your rights, please feel free to contact us.

Söderfors Resort & Spa AB
Corporate ID: 559448-9311
Söderfors Herrgård 1
815 76 Söderfors

Phone: +46 293 76 10 20
Email: info@soderforsherrgard.com