Privacy Policy – Bo i Järvsö

Lill-Brant AB is the data controller for the processing of personal data described in this policy.

Depending on how you book and communicate with us, we may process:

• your name
• contact details such as your email address and telephone number
• address and billing details
• booking number
• arrival and departure dates
• the accommodation booked
• the number of guests and information needed for the booking
• selected additional services
• payment and transaction information
• messages and other communications with us
• information about changes, cancellations, complaints or damage
• technical information needed to administer our website and booking service.

We try not to collect more personal data than necessary.

We receive personal data:

• directly from you when you make a direct booking or contact us
• from Airbnb when you book our accommodation through Airbnb
• from Booking.com when you book our accommodation through Booking.com
• through our booking system, Smoobu
• from payment providers in connection with payments
• in some cases, from another person who makes a booking that includes you as a member of the travelling party.

Managing bookings and stays

We process personal data to:

• receive and administer bookings
• communicate before, during and after your stay
• provide check-in and access information
• provide booked services and additional options
• manage changes and cancellations
• provide support during your stay.

The primary legal basis is that the processing is necessary to enter into or perform our contract with you.

Payments and financial administration

We process personal data to:

• administer payments and refunds
• issue invoices where applicable
• comply with accounting and tax legislation.

The processing is based on our contract and, for information that must be retained by law, a legal obligation.

Handling damage, complaints and legal claims

We may process information about an incident, communications, photographs or other relevant documentation when necessary to handle damage, complaints, insurance matters or legal claims.

The legal basis is normally our legitimate interest in establishing, exercising or defending legal claims.

Security and misuse

We may process personal data when necessary to protect our guests, properties and systems or to investigate suspected misuse.

The legal basis is our legitimate interest in operating a secure business and protecting our property and systems.

Marketing

We do not use your booking details for electronic direct marketing solely because you have made a booking.

If we use personal data for marketing, we only do so where there is a separate legal basis for the processing and in accordance with applicable electronic marketing rules.

If you book through Airbnb or Booking.com, both the booking platform and Lill-Brant AB process personal data for their respective purposes.

Each platform is responsible for its own processing under its privacy policy.

When we receive the information needed to administer your booking, Lill-Brant AB is responsible for the processing we subsequently carry out for our own purposes.

We use external service providers to operate our booking business.

Smoobu is used as a booking and channel management system, among other purposes, and processes personal data on our behalf to the extent that Smoobu acts as our data processor.

We may also use service providers for:

• payments
• email and communications
• web hosting and IT operations
• financial systems and accounting
• servicing and administering the accommodation.

Service providers are only given access to the information needed to perform their respective services.

In some cases, a service provider is an independent data controller for its processing, for example a payment provider or booking platform.

We may share necessary personal data with:

• Airbnb or Booking.com when the booking was made through the relevant platform
• Smoobu
• payment providers
• service providers that assist us with financial administration
• insurance companies when necessary to handle a damage claim
• public authorities when we are required by law to provide information
• legal advisers or other parties when necessary to establish or defend a legal claim.

We do not sell personal data.

Some of our service providers may process personal data in or from countries outside the EU/EEA.

When such a transfer takes place, we ensure that a lawful transfer mechanism under the GDPR is in place, such as an adequacy decision or the European Commission's standard contractual clauses together with additional safeguards where necessary.

We retain personal data only for as long as it is needed for each purpose.

Booking and contact details are retained for as long as needed to administer the booking, handle any subsequent questions and protect our legal rights.

Information that constitutes accounting records is retained for as long as required by accounting legislation.

Information relating to a complaint, damage or legal dispute may be retained for the duration of the matter and thereafter for as long as needed to handle any legal claims.

When the information is no longer needed, it is deleted or anonymised.

Under the GDPR, depending on the circumstances, you may have the right to:

• receive information about the personal data we process about you
• have inaccurate information corrected
• request the deletion of personal data
• request that processing be restricted
• object to processing based on legitimate interests
• receive certain information in a structured, machine-readable format.

Some rights are limited where we need to retain the information to perform a contract, comply with the law or handle legal claims.

Contact us at info@boijarvso.se if you wish to exercise any of your rights.

If you believe that we are processing your personal data incorrectly, please contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

More information is available at www.imy.se.

We may update this privacy policy when our processing or services change.

The current version is always published at https://boijarvso.se/en/integritetspolicy.