Hotel Rusthållargården (“we”, “us”) cares about your personal privacy. This privacy policy describes how we collect, use, store, and protect your personal data when you visit our website, book a stay, spa treatment, meeting, event, or purchase a gift card from us, in accordance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller for the processing of your personal data is:
Hotel Rusthållargården
Stora vägen 26, 263 73 Arild, Sweden
Company reg. no: 556143-8879
E-mail: bokning@rusthallargarden.se
Phone: +46 (0)42 – 34 65 30
2. What personal data we collect
Depending on how you interact with us, we may collect:
- Contact details: name, email address, phone number
- Booking details: arrival/departure dates, room type, number of guests, special requests (e.g. allergies or dietary preferences for restaurant bookings)
- Payment information: handled by our booking partner Bookvisit and/or payment provider – we do not store full card details ourselves
- Gift card details: purchaser, recipient, email address when purchasing a gift card
- Technical information: IP address, device type, browser, and behavior on the website via cookies and tracking tools, e.g. Meta/Facebook pixel
- Communication: information you provide via the contact form, email, or phone, e.g. when inquiring about meetings, weddings, or job applications
3. Why we process your data and the legal basis
| Purpose | Legal basis |
|---|---|
| Managing your booking of a room, spa, meeting, event, or table | Performance of contract |
| Sending booking confirmations and practical information ahead of your stay | Performance of contract |
| Managing the purchase and redemption of gift cards | Performance of contract |
| Responding to questions and inquiries | Legitimate interest |
| Sending newsletters and offers | Legitimate interest (established customer relationship) |
| Marketing and ad follow-up via e.g. Facebook pixel | Consent (via cookie banner) |
| Managing job applications | Legitimate interest / pre-contractual |
| Accounting | Legal obligation |
4. How long we retain your data
We retain your personal data for as long as necessary for each respective purpose:
- Booking details: During your stay and thereafter in accordance with the requirements of the Swedish Bookkeeping Act (normally 7 years for records related to payment)
- Contact inquiries without a booking: We retain the information for as long as there is a legitimate business interest in following up and processing the inquiry. You may at any time request that your data be deleted by contacting us (see section 7).
- Marketing data: Until you withdraw your consent or unsubscribe
- Job applications: One month after the recruitment process has concluded, unless you consent to longer retention
5. Who we share your data with
We may share your data with carefully selected suppliers and partners, including:
- BookVisit/VisBook – our booking systems for rooms, packages, and gift cards
- Payment service providers – for secure handling of payments
- Meta/Facebook – when using tracking pixels for marketing purposes (only if you have consented to marketing cookies)
- Cloudflare – provides the Turnstile security service, which protects our website and forms against spam and automated bot traffic
- IT providers – who host our website and systems
- Authorities – when required by law
We never sell your personal data to third parties. Where data is transferred to providers outside the EU/EEA, we ensure this is done with appropriate safeguards (e.g. the EU’s Standard Contractual Clauses).
6. Cookies
Our website uses cookies and similar technologies. A cookie is a small text file stored on your device that helps us make the website function, understand how it is used, and display relevant advertising.
Types of cookies we use:
- Necessary cookies – required for the website and booking function to work. These cannot be disabled and do not require consent.
- Functional cookies – remember your choices and settings (e.g. selected language) to provide a better experience.
- Statistics cookies – help us understand how visitors use the website, so we can improve it.
- Marketing cookies – used to display relevant ads and measure their effectiveness, e.g. via the Meta/Facebook pixel. These are only set if you have consented to them.
Security and bot protection
Our website uses Cloudflare Turnstile, a security tool that protects our forms against spam and automated bot traffic. Turnstile verifies visitors in the background without visible interaction and collects minimal technical information (e.g. IP address, browser information, and technical signals) for this purpose. This processing is necessary for the website’s security and does not require consent. Read more in Cloudflare’s Turnstile Privacy Addendum.
Your consent
When you visit the website, you will be asked to indicate which cookies you accept, apart from the necessary ones. You may change your choice at any time via the “Manage consent” link in the footer, or by clearing the cookies in your browser.
Third-party cookies
Some cookies are set by third parties, e.g. Meta/Facebook for marketing follow-up, our booking systems BookVisit/VisBook to enable booking, and Cloudflare for security verification. These parties may process the data in accordance with their own privacy policies.
7. Your rights
You have the right to:
- Access the data we hold about you (subject access request)
- Request correction of inaccurate data
- Request deletion of your data (“the right to be forgotten”)
- Request restriction of processing
- Object to processing based on legitimate interest
- Receive your data in a structured format (data portability)
- Withdraw consent you have given at any time
8. Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.
9. Complaints
If you believe we are processing your personal data in violation of the GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se.
10. Contact
If you have questions about this privacy policy or how we process your personal data, please contact us at:
E-mail: bokning@rusthallargarden.se
Phone: +46 (0)42 – 34 65 30
Address: Stora vägen 26, 263 73 Arild, Sweden
