PRIVACY POLICY
At Karstorp Konferenscenter we care about your personal privacy. When your personal data is processed you are entitled to certain information. In this privacy policy we therefore provide information about how we collect, use and store your personal data and how you can contact us, so that you can always feel confident that your personal data is handled securely.
DATA CONTROLLER
Karstorp Konferenscenter AB (reg. no. 556666-5450) (“Karstorp”) is the data controller for the processing of your personal data described in this privacy policy. The data controller is responsible for ensuring that your personal data is processed in accordance with applicable law.
HOW WE COLLECT PERSONAL DATA AND WHAT DATA WE COLLECT
Karstorp mainly collects personal data directly from you as a guest. Your personal data is collected, for example, when you make a booking (via our website, by phone or in another way), when you contact us by email or when you are in contact with us in other ways. The personal data we collect in connection with room bookings is: name, postal address, email address and telephone number. Otherwise, we only collect data that you voluntarily provide to us, for example requests for special dietary needs or similar.
You are not obliged to provide us with your personal data, but if you do not provide the personal data that is necessary for bookings, we cannot provide you with our services. Data you provide when you have special requests is also necessary for us to be able to give you the service you expect.
PURPOSES OF OUR PROCESSING OF PERSONAL DATA AND OUR LEGAL BASIS
Karstorp processes personal data primarily in order to handle room bookings and for purposes that are compatible with that purpose. Our legal basis for this processing is that the processing is necessary to enter into or perform the contract that arises in connection with your booking.
Karstorp may also process your personal data in order to answer, assist, follow up and otherwise handle questions you have with our staff regarding your room or other matters related to your stay with us. This includes the communication required to answer any questions you have asked our customer service by telephone, email, social media (to the extent we use or may in future use social media) or any of our other communication channels. The processing of personal data covered by this purpose includes our right to investigate complaints, claims or support cases, including technical support.
Our legal basis for this processing is primarily that we have a legitimate interest in processing carried out for the purposes described in the paragraph above.
PROCESSING OF PERSONAL DATA BASED ON YOUR CONSENT
Information from you that you have, for example, an allergy may constitute so-called sensitive personal data, as it concerns health. Such data, i.e. all forms of sensitive personal data, is not normally processed by us. When it is, it is only because you have provided the information yourself, for example when you tell us that you have an allergy.
Processing of personal data for the above purposes is based on your consent. This means that you consent to the processing when you give us the personal data.
WHO WE MAY SHARE YOUR PERSONAL DATA WITH
Where necessary, we share your personal data with companies that are so-called data processors for us. These are companies that process information on our behalf and in accordance with our instructions. We have processors that help us with: IT systems, the customer database and booking systems.
When your personal data is shared with data processors, it is only for purposes that are compatible with the purposes for which we collected the personal data. We have agreements with the data processors and check that all processors can provide sufficient guarantees regarding the security and confidentiality of personal data.
We also share personal data with companies that are independent data controllers. Companies that offer payment solutions, for example, may be independent data controllers.
STORAGE PERIOD
Karstorp processes your personal data for as long as is necessary to administer bookings and other matters you may have with us. We may also process personal data for as long as is necessary to fulfil our legal obligations.
YOUR RIGHTS AS A DATA SUBJECT
Under Swedish law you have certain rights regarding the processing of your personal data. You have the right to transparency about how your personal data is processed. This means you can request access to certain information about the processing. You also have the right to request that incorrect personal data is corrected, that excessive processing is restricted, that unfounded processing is erased, and to request that personal data be transferred from our system to another provider, so-called data portability.
You also have the right to withdraw your consent for processing that is based on your consent.
A request regarding any of the above can be made to us. You can also contact the Swedish Authority for Privacy Protection (IMY) with any complaints if you are dissatisfied with the processing of your personal data, but we of course hope that you will first turn to us with questions and requests regarding our processing of personal data. If you have any other questions, you are always welcome to contact us. When your personal data is shared with data processors, it is only for purposes that are compatible with the purposes for which we collected the personal data. We have agreements with the data processors and check that all processors can provide sufficient guarantees regarding the security and confidentiality of personal data.
We also share personal data with companies that are independent data controllers. Companies that offer payment solutions, for example, may be independent data controllers.