1. Introduction

We value your privacy, which is why we focus on security and how we handle and store your personal data.

This describes how Tänndalens Fjällanläggning AB (publ.) handles your personal data and what rights you have. This information is intended for you as:
- Are an existing customer.
- Visit our website or connect to one of our open Wi-Fi.
- Participate in our marketing activities such as guest surveys or competitions.
- Communicate with us, e.g. via our customer service.
- Are a supplier, partner, shareholder or have another professional relationship with us.

We strive to ensure that your collected personal data is handled and stored in accordance with data protection legislation and that it is handled in a safe and secure manner. If you have any questions regarding our handling and storage of your personal data, you are welcome to contact us. Our contact details can be found at the bottom.

2. What is personal data?

Information that can be attributed, directly or indirectly, to a living natural person is personal data. This includes, for example, photos, names, social security numbers, and IP addresses.

3. Collection of personal data

Personal data is collected on various occasions and in different contexts in order to provide you as a guest with relevant services, experiences and offers.

We collect personal data in the following ways:
- That you submit these to us yourself, for example through a purchase, newsletter subscription or participation in a marketing activity or guest survey.
- You submit the information to a partner who provides information on your behalf.
- Through a third party. For example, credit rating information from banks or credit rating agencies, or other purchases of addresses.

3.1 In connection with the purchase of a product or service

When you purchase a product or service from us at our facility, we process and store the following personal data that you provide to us:
- Your name (and any fellow guests) and your contact details.
- Your social security number, e.g. when you make a booking.
- Your booking number, if any, if you provide this when booking/purchasing.
- Details about your booking, such as arrival and departure, price and product type.
- Payment information and payment history.

We process this personal data to:
- Identify yourself as a customer, e.g. when providing additional booking information or returning a product, as well as in the event of a complaint.
- Charge for the booking, product or service, including handling card payments.
- Possibly detect and prevent fraud in connection with payment.
- Handle and deliver what you have purchased in accordance with our purchase and booking terms.
- Contact you if there are any changes to your booking, purchase of the product or service.
- Send out arrival and facility-related information.
- Market our services and products, e.g. via email, SMS or other electronic communication. (You can unsubscribe from this part via an unsubscribe link in the newsletter.)
- Compile statistics on purchases of our products and services.
- Produce statistics and conduct analyses in order to improve our services, goods and offers

If you choose to pay by invoice, with or without installment payment, we also process personal data about you together with our payment solution partners.

When you communicate with us as a corporate customer regarding, for example, conference quotes, collaboration agreements, we also handle:
- Billing and contract information.
- Contact information and personal data for, for example, you and the company you represent.

3.2 In case of complaint

If you complain about a product, service or contact us with other compensation claims, we handle:
- Information that you provide to us yourself, such as contact information, personal data, payment information, account information and case history.
- Information about the basis for your compensation claim.
- Documents that you attach to your case, such as receipts or medical certificates.

We process your personal data to:
- Manage and assess your compensation claims.
- To detect and prevent fraud in connection with compensation claims.
- Produce any statistics on compensation cases in order to improve our services.

3.3 When you communicate with us

There are many different ways to communicate with us; social media, web forms, by phone or email. When you communicate with us, we handle information that you provide to us:
- Name, contact details and any booking number.
- Information about your point of view, question or matter.

We process your personal data to:
- Answer your questions and handle your case, e.g. rectify errors and handle complaints.
- Deliver ordered information, such as annual reports.
- Improve our services and the information we provide and publish via our websites.

3.4 When you participate in marketing activities or guest surveys

In connection with marketing activities (competitions, campaigns, etc.) or in guest surveys (surveys, interviews, etc.), we process the personal data that you provide to us, such as name and contact information. We process this data to:
- Administer the marketing activity or guest survey, e.g. to be able to contact you again.
- Inform you and offer you new marketing activities and guest surveys.
- Contact you with information about both general offers and personal and customized offers, campaigns and benefits from us, e.g. via email.

3.5 When you connect to our Wi-Fi at the facility, or use our website

When you connect to one of our Wi-Fi on site, we are the data controller for the processing that takes place to connect you to the Internet, but not for the further processing or the content of your communication via Wi-Fi. When you connect, we handle your IP address, MAC address and timestamps for the duration of your connection. When you visit our website/Wi-Fi, we handle:
- Information about how you integrate with and use our website, e.g. when booking a trip.
- Information about your visits to our websites, including through cookies.

We process your personal data to:
- Provide digital tools and services.
- Provide you with support when you have technical problems.
- Maintain, test and improve our digital tools and services.
- Detect and prevent security attacks, such as virus attacks.
- Analysis of visitor behavior on our website.

3.6 In some cases we are required by law to process personal data

In addition to what is described above, we sometimes process your personal data when we are required by law, for example due to our accounting obligations or requests from authorities.

Legal basis: When we process your personal data because we are required by law, we do so based on a legal obligation.

4. How long is your personal data stored?

We only store your personal data for as long as is necessary to fulfill the purposes for which it is processed, or as long as we are required by law. After that, we securely delete the data so that it can no longer be linked to you.

The personal data we collect when making a booking is stored in our customer database for 36 months. If you make a new booking within the period from your return from this trip, information about previous bookings/products will be stored for an additional 36 months. The personal data is stored to facilitate you as a guest and as a basis for market and customer analyses with the aim of improving our offer and product range. If a personal data is linked to information that concerns accounting, this will be stored for seven (7) years according to the Accounting Act.

The personal data you provide when subscribing to our newsletter is stored as long as you are an active reader. If you unsubscribe from the newsletter, the personal data is stored for up to one (1) month.

Data collected during website visits is stored anonymously until further notice.

5. To whom is your personal data disclosed?

Tänndalens Fjällanläggning AB (publ) will not sell your information to a third party. However, we may disclose your personal information to the following recipients:
- Suppliers within and outside the EU/EEA, who, for example, provide us with IT services, handle bookings or perform payment processing and credit information on our behalf.
- If you have entered into an agreement with us on behalf of a company, information about your purchase history may be disclosed to the company in question (your employer, for example).
- Other recipients when required by law, other statute or authority decision.

Recipients who process personal data on behalf of Tänndalens Fjällanläggning AB (publ) must always enter into a so-called personal data processing agreement with us in order for us to be able to ensure that your data is processed correctly and securely. If we use suppliers who process your personal data on our behalf outside the EU/EEA, we take special safeguards, such as signing agreements that include the standardized model clauses for data transfer adopted by the EU Commission and which are available on the EU Commission's website.

When your personal data is shared with a recipient who is an independent data controller, such as a government agency or a bank, the recipient's privacy policy and information on personal data processing apply.

6. How do we protect your personal data?

We value your privacy, which is why we focus on security and how we handle and store your personal data. We work in accordance with the General Data Protection Regulation and established information security guidelines and take measures to protect your data. We have procedures and rules around data protection, such as sending your data securely and ensuring that staff only have access to the data they need to do their job.

7. About Cookies

When you visit our website, we may also collect information and data about you and your internet usage by using so-called Cookies.

We strive to offer you a seamless and personalized experience. To do this, we use cookies – small text files that are stored on your device. We use cookies for technical reasons and to facilitate the visitor's activities at Orsa Grönklitt Friluftsanläggning AB's web services. Cookies are also used to measure traffic on our website and for statistics. Here we explain how and why we use cookies, as well as how you can control them to protect your privacy.

Why do we use cookies?
We use cookies to enable you to use Tänndalens Fjällanläggning AB's website in the way we intended and to be able to provide you as a visitor with better service. Certain cookies are required for Tänndalens Fjällanläggning AB's websites, and our services to you, to function. These cookies are used, for example, to support multiple simultaneous visitors to the website and to identify the visitor so that choices you make on the website are tracked throughout your visit. Cookies are also used to facilitate information when purchasing on the website.

Cookies help us to:
- Improve our website : Cookies are also used to collect statistics about the number of visitors to the website and to obtain information about how our website is used and how we can improve it. By analyzing how you and other visitors use our website, we can make necessary improvements and offer a better user experience.
- Offer personalized services: Cookies enable us to customize the content and offers we display based on your previous visits and choices. We work with other companies to help us with our marketing, for example through retargeting. This means that our marketing partners may place permanent or session cookies to enable us to provide you with personalized and relevant content in other channels that you use. Based on how you have used our website, our marketing partners help us show you offers and information about our products and services even when you leave our website, such as on social media, search engines, advertising networks and other websites where we have purchased advertising.
- Facilitate your navigation: We use cookies to remember your settings and choices on our website, making your next visit easier and more personalized.

Types of cookies we use

- Session cookies: These are temporary and disappear when you close your browser. They help our website to function smoothly during your visit.
- Persistent cookies: These are stored on your device until you or your browser deletes them. They help us remember you and your preferences over time.
- First-party and third-party cookies: Our own cookies (first-party cookies) ensure that the website functions properly. Third-party cookies, set by our partners, are used for analytics and marketing.

Your Choice and Privacy

Your privacy is important to us, which is why we offer you the ability to choose which cookies you allow:

- Necessary cookies are always active for the website to function properly.
- Analysis and performance cookies help us understand how the website is used.
- Marketing cookies customize advertising based on your interests.

You can change your settings at any time from our cookie settings page.

8. Your rights

You have certain rights under data protection legislation. If you would like to exercise any of your rights, you can contact us using the contact details below.
- Access to your personal data – you have the right to receive confirmation of whether we are processing your personal data and an extract of what data is being processed.
- Request correction – you have the right to have incorrect information corrected.
- Request deletion – you have the right to have your data deleted under certain circumstances.
- Object to processing based on our legitimate interest and to processing for direct marketing purposes – you have the right to object to the processing of your personal data or to have the processing restricted.
- Right to data portability – you have the right to request that personal data be transferred from us to another company, authority or organisation. This right is limited to data that you have provided to us.

If you would like to know more about data protection legislation and your rights, you can read more here: http://eur-lex.europa.eu/legal-content/SV/TXT/?uri=CELEX:32016R0679 .

If you believe that our processing of your personal data is not in accordance with data protection legislation, please contact us by letter, see the contact details section below. You also have the right to complain to the Swedish Data Protection Authority, which is the supervisory authority.

If you would like to contact us and request correction or deletion, please see the contact details and procedures below. From the time we receive your letter, we reserve the right to allow up to one (1) month for the changes to be implemented.

9. How to object to electronic direct marketing

Tänndalens Fjällanläggning AB (publ) may use your email address or mobile number for marketing and information mailings. If you do not want us to use your information for marketing purposes, you are welcome to contact us and we will remove your information from the channels we have access to.
In that case, contact the following: bokning@tanndalen.com

10. Information text updates

This information text was last updated on August 8, 2023 and is subject to change. Changes will be published as a new version on our website.