Privacy Policy

At Stenungsbaden, we process your personal data in various contexts, e.g. when you order services from us, stay at our hotel, use services we provide, and in other contexts. Our privacy policy contains information about our processing of personal data. Below you will also find contact details if you have questions or want to request access to information.

We process your personal data in accordance with the Swedish Data Protection Regulation in force at any given time, referred to below as the GDPR.

Data controller for your personal data

Our company Stenungsbaden Yacht Club, reg. no. 556707-8596, tel +46(0)303-72 68 00, email: info@stenungsbaden.se, is responsible for the processing of personal data in our systems for booking, invoicing, and hotel operations. We are also the data controller for our marketing and email communications to our customers and other contacts.

Processing of personal data in connection with booking accommodation and stays

In connection with bookings you make yourself or that others make on your behalf, we process personal data that we need in order to fulfill the agreement for booking and purchasing services. This concerns information you have given us directly or that you have given us via a travel agency or agent. We process, for example, information regarding your identity, your contact details, and your payment information. In some cases we store your passport number. In addition, we process other information you may have provided that is relevant to your stay with us. This may concern information about allergies or special requests regarding your stay. We register all purchases and orders you make with us, e.g. spa, restaurant, room service, so that we can deliver these services and so that you can pay for them.

We process this data for as long as necessary to fulfill the booking agreement with you, and for as long as applicable laws and regulations require us to do so.

Processing of personal data for marketing purposes

When you subscribe to our newsletter, we store and use your email address to send news and offers from us. When you register for our events, we store and use your email address to send future invitations in accordance with applicable rules. We may also process profile information such as your date of birth, gender, and place of residence in order to send personalized greetings, tailored offers, and relevant invitations based on your profile.

We also use your email address or phone number to send news, offers, and invitations in accordance with rules governing existing customer relationships. To make our communication as relevant as possible, we may segment our mailings based on your purchase history and registered preferences. We may also use encrypted versions of your contact details to create customized target audiences on social media, in order to reach people with interests similar to yours with relevant offers. Our basis for this is the Marketing Act and legitimate interest.

Processing of personal data for development, troubleshooting, and security

We process data, including personal data, to carry out troubleshooting and correct errors, to improve our services and the technology we use, and to analyze users and user behavior. In addition, we process personal data to verify your identity, including identity verification when using our digital services.

We anonymize data and compile statistics as far as possible, but must also process personal data for development, troubleshooting, statistical, or security purposes.

Processing of personal data for other purposes

We process data, including personal data, to carry out troubleshooting and correct errors, to improve our services and the technology we use, and to analyze users and user behavior. We also process data for business analysis and statistical purposes to anticipate trends and improve our commercial offerings. This may include automated processing to provide you with more relevant communication. In addition, we process personal data to verify your identity when using our digital services.

Disclosure of personal data and statutory processing

We do not disclose your personal data to third parties without your consent, or unless applicable laws allow or require us to do so. Where we offer joint events or packages together with external partners, we may process your data to fulfill delivery of the specific service. We ensure that such partners handle your data with the same confidentiality as we do. To avoid misunderstanding, we wish to clarify that our data processing for our own purposes is not considered disclosure.

Your rights

As a natural person, you have a number of rights under the Data Protection Regulation.

You have the right to request information, correction, and deletion of personal data we process about you. You further have the right to request restriction of processing, the right to object to the processing, and the right to data portability.

To exercise your rights, you can go to the following page. We will respond to your request as soon as possible, and no later than within 30 days.

We will ask you to confirm your identity or provide additional information before allowing you to exercise your rights against us. We do this to ensure that we only disclose your personal data to you — and not to someone pretending to be you.

Data processor

We are part of Strawberry. Strawberry has its own data processor. The data processor acts as an agent for all hotels affiliated with Strawberry, including ourselves.

The data processor is our contact person for Datatilsynet (the Norwegian Data Protection Authority).

The processor provides advice and guidance to all Strawberry hotels, our data processors, and our employees on the processing of personal data and the regulations governing it. The processor works to ensure that we comply with both data protection regulations and our own internal guidelines.

Our data processor can also help you exercise your rights against us, or help you get answers to questions about your personal data with us.

You can contact our data processor at DPO@strawberry.no

If you believe that our processing of your personal data does not comply with our description here, or if we otherwise violate the Data Protection Regulation, you can also file a complaint with Datatilsynet in Norway, or with the supervisory authority in the country where you are staying at one of our hotels. Information on how to contact Datatilsynet can be found on Datatilsynet's website www.datatilsynet.no.

Cookies

We use cookies to improve the user experience on our websites.

Stenungsbaden also uses cookies to store statistics and to track how visitors navigate the website. The website can be used without cookies, but then information will not be saved between pages. If you want to disable the use of cookies, you can do so in your browser settings.

There are two types of cookies. One type saves a file on your computer for a longer period. It is used, for example, for functions that tell the user what's new since their last visit to the website. The other type of cookie is called a session cookie. While you are browsing a site, this cookie is temporarily stored in your computer's memory, for example to keep track of which language you have chosen. Session cookies are not stored on your computer for a long period, but disappear when you close your browser.

A cookie is a small text file saved on your device (e.g. your smartphone, computer, tablet). Cookies help identify which pages are visited on our website. The information stored using cookies may include, for example, how you use the website, which browser you use, and which web pages you have visited.

A persistent cookie remains on your device for a predetermined period. A session cookie is temporarily stored in your device's memory while you are on our websites. Session cookies are deleted when the browser is closed. We use both persistent cookies and session cookies. Strawberry may also use third-party cookies.

If you do not want our websites to save cookies on your device, you can disable cookies in your browser. If you disable cookies, the functionality of our websites will be reduced.

A personalized stay with us

At Stenungsbaden Yacht Club, we want to offer our customers the best possible hotel experience tailored to each individual guest's preferences and purchase history.

On the basis of legitimate interests, we want to use information we have received from you regarding your room preferences (e.g. "sea-view window," "quiet room requested") and information about your purchases with us ("sparkling water" instead of "still water") in order to offer you a customized stay.

This information is collected based on the purchases you make with us and the requests you have made to our staff.

In addition, on certain occasions we collect information about you from open sources, such as the internet and social media, limited to information relevant to offering you a personalized stay. The basis for this is legitimate interests.

The information is not disclosed to anyone else.

You can object to our use of your data for personalizing your stay. This can be done by sending an email to info@stenungsbaden.se

Changes to the privacy policy or processing

We work continuously on developing and improving our services for our customers. This may change the approach or scope of our processing of personal data. The information we provide in this privacy policy will therefore be changed and updated from time to time. We will also amend the privacy policy in accordance with new regulations or if required by regulatory practice.