GDPR

Kallsedets Fjällcenter INTEGRITY POLICY

Terms / Cookies / GDPR

Kallsedets Fjällcenter/HarmsenBrouwer AB, org. no. 559138-2964, Kallsedet 820, 83793 Järpen, processes personal data in accordance with prevailing law, including the EU’s General Data Protection Regulation (GDPR).

In the following, “we”, “our” and “us” refers to Kallsedets Fjällcenter.

1       WHAT PERSONAL DATA DO WE PROCESS, WHY, ON WHAT LAWFUL BASIS AND FOR HOW LONG? 

We may obtain personal data directly from you or may have access to them when you use our website Kallsedet.eu

We may receive email and other correspondence that contains personal data on third parties, and we therefore process such personal data. If required, we will inform you as a third party about such processing.

The table below contains information on why we process your personal data (“purpose”), which personal data about you we process for each purpose, which lawful basis we have for this and how long we save your personal data.

If you do not submit the personal data specified below, we are unable to offer and provide our services and products or otherwise fulfil our commitments to you. Regarding the purpose of providing information on our offer and those of our members, you can say no to receiving such information at any time. You can find out how to do this below.

PurposePurposeLawful basisHow long do we save the data?
To process your bookingFirst name and surname
Address
Email
Telephone number
Date of birth
Nationality
Details of the booking, i.e. type of accommodation, location, date of arrival and departure, and booking number
Your contact with us via telephone and email
Contract1 year after completion of your travel
To process any complaintsFirst name and surname
Address
Email
Telephone number
Date of birth
Nationality
Details of the booking, i.e. type of accommodation, location, date of arrival and departure, and booking number
Contract3 years after completion of your travel
To fulfil our obligations under the Swedish Book-keeping ActFirst name and surname
Address
Email
Telephone number
Date of birth
NationalityDetails of the booking, i.e. type of accommodation, location, date of arrival and departure, and booking number
I’m
Legal obligation (book-keeping)7 years after the transaction

Web analytics companies

We use external providers and systems to analyse user behaviour on our websites and for user feedback. These companies process personal data as data processors on our behalf. The data concerned are primarily data collected by cookies and are processed at anonymous and aggregate level.

We may also share your personal data to allow a merger, acquisition or sale of all or parts of SCR’s assets.

We may pass your personal data to authorities that require us to pass on such personal data.

As a main rule, SCR and SCR’s partners process your personal data solely within the EU and EEA. Should personal data be processed outside the EU and EEA, SCR will take steps to ensure that the personal data continue to enjoy the same protection and will also take the measures necessary to transfer personal data to countries outside the EU and EEA in a lawful manner.

3        Your rights

You have certain rights under the General Data Protection Regulation (GDPR):

3.1        The right to be informed and the right of access

You have the right, free of charge, to request in writing information on the personal data we process about you.

If you do not have grounds for your request or your request is unreasonable, e.g. if you request extracts or erasure frequently and at short intervals, we may either refuse to accommodate your request or charge a fee to cover the administrative costs that your request entails for us. You can submit your request to us using the contact details below; see point 5.

3.2        The right to rectification and the right to erasure

If your personal data are incorrect or incomplete, you have the right to request that we rectify or complete such data.

You have the right to request erasure of your personal data under certain circumstances (which are specified in the EU’s General Data Protection Regulation). Provided your request falls within one of these circumstances, we will erase your data.

3.3        The right to object to direct marketing

You may at any time object to your personal data being processed for direct marketing or profiling for such purposes. If you do not want us to process your personal data for this purpose, please inform us of this using the contact details below; see point 5. We will then stop processing your personal data for this purpose and remove the data, provided that we do not need to continue processing them for some other purpose pursuant to the present Integrity policy.

3.4         The right to restrict processing

Under certain conditions, you have the right to demand that processing of your personal data be restricted. If you have this right, and with the exception of storage, such personal data will only be processed with your consent or to establish, exercise or defend legal claims; to protect the rights of another physical or legal person; or for reasons concerning an important public interest matter.

3.5         The right to data portability

You have the right to receive the personal data that you have provided to us in a structured, generally used and machine-readable format, and have the right to transfer these data to another data controller where this is technically feasible.

3.6          The right to withdraw your consent

You may at any time withdraw your consent, in full or in part, for your personal data to be processed by contacting us; see the contact details in point 5. If you withdraw your consent, please note that this does not affect the lawfulness of any processing carried out previously with your consent before this was withdrawn. SCR may also have another lawful basis for processing your personal data (see our explanation above, below the respective Purpose), which may mean we have a right to continue such processing.

3.7          The right to submit a complaint

If you are dissatisfied with how we have processed your personal data, please contact us; see the contact details in point 5. Don’t forget to include your name (email), address and personal identity number. You also have the right to submit a complaint about our processing of your personal data to:

The Swedish Data Protection Authority/ The Swedish Integrity Protection Authority (the authority is changing name during 2018)
Box 8114
S-104 20 Stockholm
datainspektionen@datainspektionen.se